last executing test programs: 5m20.407508611s ago: executing program 2 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x216, &(0x7f0000001900)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x50, 0x0, &(0x7f0000000000)=0xff5f) listen(r1, 0x3) accept(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX]) socket$packet(0x11, 0x3, 0x300) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r7, 0x0) 5m17.55972242s ago: executing program 2 (id=144): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2889c1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, 0x0, 0x400) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000500), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x40000) sendmsg$nl_route(r8, 0x0, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) 5m14.212903109s ago: executing program 2 (id=150): openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x200040c4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) syz_emit_ethernet(0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) socket(0x28, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000f80)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}, 0x50) r8 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r9}, 0x20) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) 5m9.127128767s ago: executing program 2 (id=156): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/kexec_crash_size', 0xb041, 0x90) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, 0x0}]) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r7, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./bus\x00', 0x50, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="a60b8f2f94f38c9c515f0a49abc35b272f81737b1b8fb0591ebfcd504abdec6006007f2d3331275784d9e3d3e712d86ca48a7445f18ab74b", @ANYRES64], 0x2, 0x62e, &(0x7f0000000cc0)="$eJzs3c1rXNcZB+DfHcmy5ICjNLbjlkBEDGmpqK0PlFbd1C2lqBBKSBddC1vGwmMnlZSihNKoX3TbRf6AdKFdV4VuCgVDum532WoZKHSTlbqacu/cGY1seTqKJc04eR5z55wz595z3/PO/ZgZIybAl9bKbMYfpsjK7BvbZXtvd7G5t7t4v1NPcj5JIxlvFykeJMXHyc20l3y1fLIernjSfj5cX37rk8/2Pm23xuulWr/Rb7vB7NRLZpKM1eVJjXfrqccrujMsE3atkzgYtnNJWof8/MpBT38Xnvq8BUZB0b5vdrXqM3u6Os0zWb8PaN8V2/fsZ9rOsAMAAACAM/D8fvaznYvDjgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeJfXv/1e/+j/ZfSrFTIrO7/9PdPrr+mgaMLKHjdMOBAAAAAAAAABO3yv72c92LnbarSKNJK9WjUvV43N5N5tZy0auZzur2cpWNjKfZLpnoInt1a2tjfkBtlw4csuFAQOeevo5AwAAAAAAAMAX0G+ycvD//wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAqKZKxdVMulTn06jfEkk0kmyvV2kn916s+yh8MOAAAAAM7A8/vZz3YudtqtovrMf6X63D+Zd/MgW1nPVppZy+3qu4D2p/7G3u5ic2938X65PD7u9/9zrDCqEdP+7uHoPV+t1pjKnaxXz1zPrbydZm6nUW1ZutqJ5+i4fl3GVHyvNmBkt+uynPkf6/L0jQ2wznSVkXPdjMzVsZXZeKF/Jg6/OjvH3dN8Gt1vfi6dQs4v1GWRPPfjM8v5IOpMvJI6Ews9R9+V/plIvv7XP//sbvPBvbt3NmdHZ0rHcL7VanXqjx4Tiz2ZeOkLn4lec1UmLnfbK/lRfprZzOTNbGQ9v8hqtrKWmfywqq3Wx3P5ON0/UzcPtd6sHqeeHMlE/bq0rx7Hi+nVatuLWc9P8nZuZy2vV/8WMp9vZylLWe55hS8PcNY3jnfWX/tGXSkn+If+Ez1jZV5fqPP6QXLomjtd9fU+c5ClFDnpa+P41+pKuY/f1uVoeDQT8z2ZeLH/8fKn6rKy2Xxwb+Pu6jsD7u+1uizPo9+P1F2iPF6+Ur5YVevw0VH2vXhk33zVd6nb13is73K37/+dqRP1e7jHR1qo+l46sm+x6rva03fU+y0ARt6Fb16YmPr31D+nPpr63dTdqTcmf3D+O+dfnsi5f5z77vjc2GuNl4u/5KP86uDzPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Pltvvf+vdVmc23jkUqr1frgCV2ftzKW42z197+d5N47v0d0gtM52crkcVZujUbMx6n8t9VqnciAO30O2hOrtGojkbohVYZ8YQJO3Y2t++/c2Hzv/W+td26RS0vLc8tLry/euLPeXJtrPw45SOBUHNz0hx0JAAAAAAAAAAAAMKiz+HOCYc8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeLatzGb8YYrMz12fK9t7u4vNcunUD9YcT9JIUvwyKT5Obqa9ZLpnuOJJ+/lwffmtTz7b+/RgrPHO+o1+2w1mp14yk2SsLk9qvFtPPV7RnWGZsGudxMGw/S8AAP//C8wPrA==") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 5m6.559652662s ago: executing program 2 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x2, 0x4, 0x438, 0xffffffff, 0x298, 0x0, 0x190, 0xfeffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x168, 0x190, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x18}, [0xffffff00, 0xff, 0xff000000, 0xff000000], @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0x0, 0xffffff00, 0xffffff], @ipv4=@local, [0xff000000, 0xff, 0xffffff00], @ipv6=@empty, [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], 0xc, 0x0, 0x0, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x2000, 0x500}, 0x120, 0x41}}]}, @REJECT={0x28}}, {{@ipv6={@private2, @private1, [], [0x0, 0x0, 0xffffff00, 0xffffffff], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x2f}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xd9eb, 0x0, 0x0, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x5, 0x4}, {0xffffffffffffffff, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, [0xffffff00, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'ip_vti0\x00', 'netpci0\x00', {}, {0xff}, 0x6, 0x5, 0x6, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x12, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000000a80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0x0, 0x5, "0ce80c0581e98175c2aef788b35a9ada582171"}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x1b5) pwritev2(r7, &(0x7f0000000580)=[{&(0x7f0000000680)="a4411e92ccc3", 0x6}], 0x1, 0x7, 0x7, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='xs_stream_read_data\x00', r7, 0x0, 0x3}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x3) 5m4.509303232s ago: executing program 2 (id=163): io_setup(0xfb, &(0x7f0000000140)) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r6, &(0x7f0000000140)='./file0\x00') r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 4m49.014569908s ago: executing program 32 (id=163): io_setup(0xfb, &(0x7f0000000140)) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r6, &(0x7f0000000140)='./file0\x00') r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 3m45.286667247s ago: executing program 4 (id=286): socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x8dc0}, &(0x7f0000000300)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r4}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setfsuid(0xee01) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) 3m43.454673797s ago: executing program 4 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r5, r4, 0x0, 0x40001) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 3m41.87236965s ago: executing program 4 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, 0x0, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, 0x0, 0x0) sendmsg$can_j1939(r8, 0x0, 0xee) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20010008}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x4c}}, 0xc0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r1, 0x100}, 0x14}}, 0x40400d1) 3m39.631537189s ago: executing program 4 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xa8, 0x39, 0x1, 0x0, 0x0, {0x2}, [@nested={0x94, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="bafdaeef1bb9e14b01d14f98d7ccecc2b1054c204d9abad2538d191260e1be56bdc4604a277bd3cf0aea8e7492b558bcd30d19e4fd59a2144a6889d0191a630876557dce6a053fdfdc51847ad878d50ed9e2d50f6df5afb56c3624b12f04aec75adefcc169cf6a5ac55b78be4b09b5f4ce5e1a956ea17b3adefdf17e4ad082a7f045553b07f161", @generic='x']}]}, 0xa8}}, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x400000, 0x4c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000005c0)={@id={0x2, 0x0, @auto="48309945bf7e4ff04cb5027b395aa290"}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_x25_SIOCADDRT(r6, 0x890b, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r7 = socket(0x1d, 0x2, 0x6) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r9, 0x2}, 0x18) 3m36.853200299s ago: executing program 4 (id=300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9fc69000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x4, &(0x7f0000000200)=0x417c, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4014, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, r1, 0x8, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x44}}, 0x51) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000000)={0x31, 0x2, 0x2, "0600836a330000000000000007000200268d09ff076900ff0f0040c39b08fc00", 0x3831354f}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 3m35.788920093s ago: executing program 4 (id=304): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unshare(0x4000280) landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x80ffff}, 0x18, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x44, 0x453, 0x100, 0x70bd29, 0x25dfdbfe, "35166148fd596b75be0050ef17fb78e66f06f81d6b6d7c07f336ade1762b6e643de1986b39229867aaf1dd36d80b246820", ["", "", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unshare(0x4000280) landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x80ffff}, 0x18, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x44, 0x453, 0x100, 0x70bd29, 0x25dfdbfe, "35166148fd596b75be0050ef17fb78e66f06f81d6b6d7c07f336ade1762b6e643de1986b39229867aaf1dd36d80b246820", ["", "", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0"], 0xd) r4 = socket(0x23, 0x5, 0x0) listen(r4, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='%\n>.\x80\x16\xb7?](<\xe2\x9b\'\n\xd8\xa1\x97\xa7P\x05!\xd70\xc4^O\xb9\r\x10\x9c[\xe0\xc6\x10Z\xe9\xf8vMT\xf6l\x19\xc6A\x7f\xe8\xc9\xdf\a/H=9.\xe4\xdcb>9\xf0F\x189\xba\xd9*\x89\x8cm\xaaTS\xb6\xfb:o/u\x8cM\nz\x97b\xc3\x15\x92\x83\x16Y*+\xa6\x1e)\xba\xbb\xb5:\x8d\x8ff@\xf9\xc1\'s\xfd\xcd\xfb\xd9d\xf8\x91\xc3\xf8&@MB\xbb\n\'\xec\xbc\xaew\x87\xffM\x14\x03\\i\xb8\xd1$\xcf\xd6<\xeb\xea>\\\x15\x10\xff\xa4\xa6)\x05h;\x15\xd2\xcb*\xe4\xc2b\xc3\xacR\a\xd5n\xd4\xc5GKL\x9a\xe0\x99Rh\x7f\'\x8144RE\x96\x12\xa60R\x11\xd4\xa8\a$4\x90N\xa9\xd3\v? \x02J\x92\xcd\t\xe6X\x93\"\xd1`\xaeK\x9f\xc6\x00\r\xd5X\xbb\xf9\xd0M-!\xd2\xe0MR\xbd.\x1bj\x95\x84\xc9\xbd\'', 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000000)) keyctl$get_persistent(0x16, 0x0, r5) 12.676789907s ago: executing program 5 (id=758): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r10, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 11.921823962s ago: executing program 3 (id=759): syz_emit_vhci(&(0x7f0000005300)=ANY=[@ANYBLOB="040e0b060510000300892e"], 0xe) 11.855853453s ago: executing program 5 (id=761): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}}) shmctl$IPC_RMID(r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) 11.84302584s ago: executing program 3 (id=762): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10080, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x6, 0x6ac, &(0x7f0000001980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x40, 0x7, 0x0, @private1, @loopback, 0x1, 0x8, 0x7f, 0x8}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x18) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xb6944ec9edce1e8}}, 0x1006) mmap(&(0x7f0000246000/0x4000)=nil, 0x4000, 0x2000004, 0x10012, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3100401, 0x0, 0x0, 0x0, 0x0) 10.491024984s ago: executing program 5 (id=766): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={0x0, 0x0, 0x4010, r3}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 10.214674473s ago: executing program 1 (id=771): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r10, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 10.071549813s ago: executing program 0 (id=772): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x72, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x1000) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0xe1, 0x0, 0x0, 0xfa000, 0x1a5e00}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5]}, 0x45c) ioctl$UI_SET_PROPBIT(r5, 0x5501, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000007e9010000000000000000030000010900010073797a3100000000"], 0x20}}, 0x8000000) io_setup(0x9, &(0x7f0000003080)) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) unshare(0x400) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) 9.999672262s ago: executing program 1 (id=773): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xad1, 0x2, {{{}, 0x0, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 9.981372546s ago: executing program 1 (id=774): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x802) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) 9.837021181s ago: executing program 3 (id=775): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x2, 0x58a, &(0x7f0000000740)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x802) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) 8.76652239s ago: executing program 0 (id=777): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) shmctl$IPC_RMID(r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) 7.602085392s ago: executing program 0 (id=779): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x560a, 0xfffffffffffffffe) 7.497139725s ago: executing program 0 (id=781): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8}]}}}]}, 0x40}}, 0x0) 7.423549346s ago: executing program 0 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r5, r4, 0x0, 0x40001) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.388591137s ago: executing program 6 (id=783): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r10, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 7.163774411s ago: executing program 6 (id=784): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf4, 0x78, 0x68, 0x8, 0xab4, 0x14, 0xc418, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2d, 0x8a, 0x54}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080d04"], 0xd) 6.352083959s ago: executing program 0 (id=785): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10080, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x6, 0x6ac, &(0x7f0000001980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x40, 0x7, 0x0, @private1, @loopback, 0x1, 0x8, 0x7f, 0x8}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x18) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xb6944ec9edce1e8}}, 0x1006) mmap(&(0x7f0000246000/0x4000)=nil, 0x4000, 0x2000004, 0x10012, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3100401, 0x0, 0x0, 0x0, 0x0) 6.092740745s ago: executing program 1 (id=786): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) capset(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0"], 0xd) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='%\n>.\x80\x16\xb7?](<\xe2\x9b\'\n\xd8\xa1\x97\xa7P\x05!\xd70\xc4^O\xb9\r\x10\x9c[\xe0\xc6\x10Z\xe9\xf8vMT\xf6l\x19\xc6A\x7f\xe8\xc9\xdf\a/H=9.\xe4\xdcb>9\xf0F\x189\xba\xd9*\x89\x8cm\xaaTS\xb6\xfb:o/u\x8cM\nz\x97b\xc3\x15\x92\x83\x16Y*+\xa6\x1e)\xba\xbb\xb5:\x8d\x8ff@\xf9\xc1\'s\xfd\xcd\xfb\xd9d\xf8\x91\xc3\xf8&@MB\xbb\n\'\xec\xbc\xaew\x87\xffM\x14\x03\\i\xb8\xd1$\xcf\xd6<\xeb\xea>\\\x15\x10\xff\xa4\xa6)\x05h;\x15\xd2\xcb*\xe4\xc2b\xc3\xacR\a\xd5n\xd4\xc5GKL\x9a\xe0\x99Rh\x7f\'\x8144RE\x96\x12\xa60R\x11\xd4\xa8\a$4\x90N\xa9\xd3\v? \x02J\x92\xcd\t\xe6X\x93\"\xd1`\xaeK\x9f\xc6\x00\r\xd5X\xbb\xf9\xd0M-!\xd2\xe0MR\xbd.\x1bj\x95\x84\xc9\xbd\'', 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000000)) keyctl$get_persistent(0x16, 0x0, r4) 6.088788907s ago: executing program 5 (id=787): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x72, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x1000) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0xe1, 0x0, 0x0, 0xfa000, 0x1a5e00}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5]}, 0x45c) ioctl$UI_SET_PROPBIT(r5, 0x5501, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000007e9010000000000000000030000010900010073797a3100000000"], 0x20}}, 0x8000000) io_setup(0x9, &(0x7f0000003080)) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x400) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) 6.014436726s ago: executing program 3 (id=788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) shmctl$IPC_RMID(r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) 5.847769067s ago: executing program 6 (id=789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) shmctl$IPC_RMID(r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) 2.089880233s ago: executing program 1 (id=790): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f00000007c0)=ANY=[], 0x41, 0x72a, &(0x7f0000003980)="$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") r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20004880) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) unshare(0x2a020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r6, 0x65, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000004a00)=""/4099, 0x1003}, {&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f00000013c0)=""/96, 0x60}, {&(0x7f0000001440)=""/200, 0xc8}, {&(0x7f00000002c0)=""/86, 0x56}], 0x5}, 0x5}], 0x1, 0x100, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@orlov}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") 1.945065713s ago: executing program 5 (id=791): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x6, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9000000c67f00"}) 1.930561825s ago: executing program 3 (id=792): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) getrandom(&(0x7f00000001c0)=""/20, 0x14, 0x0) 1.930212904s ago: executing program 6 (id=793): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r10, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.83178835s ago: executing program 5 (id=794): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) getrandom(&(0x7f00000001c0)=""/20, 0x14, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x5, 0xf7, &(0x7f00000007c0)=""/247, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe1, @void, @value}, 0x94) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0x502}) 1.695931489s ago: executing program 6 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r5, r4, 0x0, 0x40001) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 461.010527ms ago: executing program 1 (id=796): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 0s ago: executing program 6 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x2, 0x58a, &(0x7f0000000740)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x802) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.500933][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.503622][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.505895][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.508409][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.512617][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.514998][ T6450] veth1_vlan: entered promiscuous mode [ 38.534801][ T6452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.536950][ T6452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.538998][ T6452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.542906][ T6452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.561044][ T6444] veth0_macvtap: entered promiscuous mode [ 38.564306][ T6444] veth1_macvtap: entered promiscuous mode [ 38.586457][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.588448][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.594579][ T476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.596551][ T476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.633105][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.635778][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.638136][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.641704][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.644307][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.647108][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.653828][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.705110][ T6450] veth0_macvtap: entered promiscuous mode [ 38.710217][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.713074][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.715037][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.715063][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.718028][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.723912][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.726637][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.729807][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.732899][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.742127][ T6450] veth1_macvtap: entered promiscuous mode [ 38.748251][ T6444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.752328][ T6444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.754642][ T6444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.756720][ T6444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.766960][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.773519][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.774501][ T6448] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.775844][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.782934][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.785567][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.788218][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.791309][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.794645][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.798029][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.810007][ T476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.812006][ T476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.828610][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.831645][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.857687][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.869669][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.872136][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.874564][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.876878][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.882937][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.885581][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.888832][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.899905][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.944061][ T6450] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.946226][ T6450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.958613][ T6450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.961775][ T6450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.977245][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.979213][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.040001][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.041926][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.061037][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.063002][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.858849][ T612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.861037][ T612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.905219][ T612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.907197][ T612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.472347][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 40.921207][ T54] Bluetooth: hci0: command tx timeout [ 40.922652][ T54] Bluetooth: hci2: command tx timeout [ 40.923902][ T54] Bluetooth: hci1: command tx timeout [ 40.925328][ T54] Bluetooth: hci4: command tx timeout [ 40.925749][ T6543] loop1: detected capacity change from 0 to 64 [ 40.926647][ T54] Bluetooth: hci3: command tx timeout [ 40.928858][ T6543] ======================================================= [ 40.928858][ T6543] WARNING: The mand mount option has been deprecated and [ 40.928858][ T6543] and is ignored by this kernel. Remove the mand [ 40.928858][ T6543] option from the mount to silence this warning. [ 40.928858][ T6543] ======================================================= [ 41.264029][ T6543] hfs: get root inode failed [ 41.516886][ T6549] loop2: detected capacity change from 0 to 1024 [ 42.969548][ T54] Bluetooth: hci3: command tx timeout [ 42.970999][ T54] Bluetooth: hci4: command tx timeout [ 42.972387][ T6443] Bluetooth: hci1: command tx timeout [ 42.973709][ T6443] Bluetooth: hci2: command tx timeout [ 42.974988][ T6443] Bluetooth: hci0: command tx timeout [ 43.173240][ T6545] loop4: detected capacity change from 0 to 256 [ 43.175464][ T6545] exfat: Deprecated parameter 'namecase' [ 43.176923][ T6545] exfat: Deprecated parameter 'namecase' [ 43.178335][ T6545] exfat: Deprecated parameter 'namecase' [ 45.010905][ T6549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.109571][ T6446] Bluetooth: hci0: command tx timeout [ 45.111066][ T6446] Bluetooth: hci4: command 0x0419 tx timeout [ 45.112516][ T6446] Bluetooth: hci2: command tx timeout [ 45.113876][ T6446] Bluetooth: hci1: command tx timeout [ 45.115178][ T6446] Bluetooth: hci3: command tx timeout [ 45.502107][ T6452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.506256][ T6545] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x079995a4, utbl_chksum : 0xe619d30d) [ 45.831070][ T6567] loop0: detected capacity change from 0 to 256 [ 46.495790][ T6569] loop1: detected capacity change from 0 to 128 [ 46.503603][ T6569] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.955837][ T6575] input: syz0 as /devices/virtual/input/input2 [ 47.479683][ T6453] Bluetooth: hci4: command 0x0419 tx timeout [ 48.270884][ T6583] loop2: detected capacity change from 0 to 8 [ 49.310198][ T6583] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 49.428163][ T6583] process 'syz.2.8' launched './file2' with NULL argv: empty string added [ 49.432348][ T6583] cramfs: Error -5 while decompressing! [ 49.433860][ T6583] cramfs: 00000000ef2a3149(26)->000000006610f524(4096) [ 49.435822][ T6583] cramfs: Error -3 while decompressing! [ 49.437254][ T6583] cramfs: 000000002f0c13e3(26)->000000004b6ea13a(4096) [ 49.439445][ T6583] cramfs: Error -3 while decompressing! [ 49.440873][ T6583] cramfs: 00000000d87e70bc(16)->00000000dd4db68c(4096) [ 49.443147][ T6583] cramfs: Error -5 while decompressing! [ 49.444688][ T6583] cramfs: 00000000ef2a3149(26)->000000006610f524(4096) [ 50.045248][ T6593] loop3: detected capacity change from 0 to 256 [ 50.167167][ T6594] Soft offlining pfn 0x1353e0 at process virtual address 0x4000002e0000 [ 50.177842][ T6594] Soft offlining pfn 0x1353e1 at process virtual address 0x4000002e1000 [ 50.180744][ T6594] Soft offlining pfn 0x1353e2 at process virtual address 0x4000002e2000 [ 50.329132][ T6440] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.040596][ T6594] loop0: detected capacity change from 0 to 32768 [ 51.569530][ T6594] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12 (6594) [ 51.725082][ T6594] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 51.727900][ T6594] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 51.730797][ T6594] BTRFS info (device loop0): using free-space-tree [ 52.393512][ T6594] BTRFS info (device loop0): rebuilding free space tree [ 52.818871][ T6448] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 52.908547][ T6626] loop3: detected capacity change from 0 to 512 [ 52.941217][ T6597] loop4: detected capacity change from 0 to 1024 [ 52.948531][ T6626] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.17: casefold flag without casefold feature [ 52.956875][ T6597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.987060][ T6597] overlayfs: upper fs needs to support d_type. [ 52.991307][ T6597] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 52.993130][ T6597] overlayfs: failed to set xattr on upper [ 52.994556][ T6597] overlayfs: ...falling back to redirect_dir=nofollow. [ 52.996185][ T6597] overlayfs: ...falling back to index=off. [ 52.997707][ T6597] overlayfs: ...falling back to uuid=null. [ 53.003266][ T6626] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.17: couldn't read orphan inode 15 (err -117) [ 53.016791][ T6626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.028919][ T6632] loop2: detected capacity change from 0 to 2048 [ 53.222651][ T6632] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 54.704730][ T6579] udevd[6579]: incorrect nilfs2 checksum on /dev/loop2 [ 54.802830][ T6650] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.819811][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.837879][ T6635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.952653][ T6635] bond0: (slave rose0): Enslaving as an active interface with an up link [ 54.960865][ T25] cfg80211: failed to load regulatory.db [ 55.309443][ T6665] Zero length message leads to an empty skb [ 59.666058][ T6694] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.230265][ T6698] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 61.476918][ T6713] loop1: detected capacity change from 0 to 512 [ 62.272141][ T6717] loop2: detected capacity change from 0 to 32768 [ 62.274217][ T6717] ocfs2: Unknown parameter '' [ 62.381104][ T6713] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 62.436661][ T6713] EXT4-fs (loop1): group descriptors corrupted! [ 63.129779][ T6733] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.618925][ T2364] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.620892][ T2364] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.242607][ T6746] netlink: 'syz.1.36': attribute type 10 has an invalid length. [ 68.198470][ T6754] loop0: detected capacity change from 0 to 1024 [ 69.002688][ T6754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.119853][ T6754] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.0.37: corrupted in-inode xattr: bad magic number in in-inode xattr [ 69.136652][ T6754] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.208389][ T6746] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 69.575357][ T6448] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.641922][ T6769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 69.757088][ T6770] loop3: detected capacity change from 0 to 8 [ 70.123267][ T6770] unable to read inode lookup table [ 70.659769][ T6773] loop2: detected capacity change from 0 to 1024 [ 70.942777][ T6773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.104597][ T6777] loop4: detected capacity change from 0 to 24 [ 71.119717][ T6777] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 71.669320][ T6777] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 72.238267][ T6784] loop0: detected capacity change from 0 to 512 [ 72.350979][ T6786] kAFS: unable to lookup cell ' [ 72.350979][ T6786] >.?](<' [ 72.350979][ T6786] ءP!0^O[ZvMTlA/H=9.b>9F9*mTS' [ 72.921940][ T6784] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 72.924538][ T6784] EXT4-fs (loop0): group descriptors corrupted! [ 73.026138][ T6785] loop3: detected capacity change from 0 to 2048 [ 73.049799][ T6452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.524863][ T6796] loop1: detected capacity change from 0 to 256 [ 74.262746][ T6801] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.282553][ T6796] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 74.284872][ T6796] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 75.515408][ T6800] loop2: detected capacity change from 0 to 1024 [ 80.413091][ T6842] loop4: detected capacity change from 0 to 1024 [ 80.417167][ T6838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.51'. [ 80.421677][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 80.828660][ T6850] loop1: detected capacity change from 0 to 64 [ 81.770298][ T6842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.330975][ T6858] loop2: detected capacity change from 0 to 64 [ 82.818355][ T6867] loop1: detected capacity change from 0 to 512 [ 83.020897][ T6867] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.58: invalid indirect mapped block 4294967295 (level 1) [ 83.069902][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.076595][ T6876] loop0: detected capacity change from 0 to 256 [ 83.077325][ T6867] EXT4-fs (loop1): Remounting filesystem read-only [ 83.083909][ T6876] vfat: Unexpected value for 'usefree' [ 83.095641][ T6867] EXT4-fs (loop1): 2 truncates cleaned up [ 83.097586][ T6867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.108951][ T6874] loop3: detected capacity change from 0 to 1024 [ 83.131613][ T6874] EXT4-fs: inline encryption not supported [ 83.224935][ T6874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.420936][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.326924][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.123508][ T6903] loop2: detected capacity change from 0 to 1024 [ 87.739350][ T6903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.956053][ T6909] loop3: detected capacity change from 0 to 512 [ 87.958551][ T6909] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 88.011716][ T6909] EXT4-fs (loop3): group descriptors corrupted! [ 89.293214][ T6452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.660643][ T6446] Bluetooth: hci4: command 0x0419 tx timeout [ 91.337098][ T6930] loop4: detected capacity change from 0 to 32768 [ 91.339141][ T6930] ocfs2: Unknown parameter '' [ 92.965621][ T6943] IPVS: length: 156 != 24 [ 93.983609][ T6941] loop2: detected capacity change from 0 to 2048 [ 94.399520][ T6953] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.502218][ T6956] Injecting memory failure for pfn 0x1367a5 at process virtual address 0x400000ffe000 [ 94.598995][ T6957] loop3: detected capacity change from 0 to 8 [ 95.521628][ T6956] Memory failure: 0x1367a5: Sending SIGBUS to syz.3.74:6956 due to hardware memory corruption [ 95.524835][ T6956] Memory failure: 0x1367a5: recovery action for dirty LRU page: Recovered [ 95.526193][ T6963] loop1: detected capacity change from 0 to 8 [ 95.585641][ T6963] SQUASHFS error: lzo decompression failed, data probably corrupt [ 95.587737][ T6963] SQUASHFS error: Failed to read block 0x91: -5 [ 95.589323][ T6963] SQUASHFS error: Unable to read metadata cache entry [8f] [ 95.591169][ T6963] SQUASHFS error: Unable to read inode 0x11f [ 96.606504][ T6972] loop3: detected capacity change from 0 to 512 [ 96.611250][ T6972] EXT4-fs: Ignoring removed oldalloc option [ 96.612805][ T6972] EXT4-fs: inline encryption not supported [ 97.247487][ T6972] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.787264][ T6972] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.76: bg 0: block 64: padding at end of block bitmap is not set [ 97.793820][ T6972] Quota error (device loop3): write_blk: dquota write failed [ 97.795911][ T6972] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 97.798360][ T6972] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.76: Failed to acquire dquot type 0 [ 98.022491][ T6972] EXT4-fs (loop3): 1 truncate cleaned up [ 98.024350][ T6972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.040698][ T6979] loop2: detected capacity change from 0 to 1024 [ 98.051058][ T6979] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.055158][ T6971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.073086][ T6979] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.77: Invalid block bitmap block 0 in block_group 0 [ 98.079317][ T6979] Quota error (device loop2): write_blk: dquota write failed [ 98.081074][ T6979] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 98.083522][ T6979] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.77: Failed to acquire dquot type 0 [ 98.086624][ T6979] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.77: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.092616][ T6979] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.77: Invalid inode bitmap blk 0 in block_group 0 [ 98.097411][ T6979] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 98.102231][ T6979] EXT4-fs (loop2): 1 orphan inode deleted [ 98.104141][ T6979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.105365][ T476] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 98.136932][ T476] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 0 [ 98.193616][ T6984] loop1: detected capacity change from 0 to 2048 [ 99.194495][ T6984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.572778][ T6452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.661083][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.052573][ T7013] 9pnet_virtio: no channels available for device syz [ 101.133266][ T7013] befs: (nbd2): No write support. Marking filesystem read-only [ 101.138484][ T7013] syz.2.81: attempt to access beyond end of device [ 101.138484][ T7013] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 101.142275][ T7013] befs: (nbd2): unable to read superblock [ 102.739447][ T6453] Bluetooth: hci2: command tx timeout [ 103.535067][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.611714][ T7027] loop2: detected capacity change from 0 to 1024 [ 104.827236][ T7038] loop1: detected capacity change from 0 to 16 [ 104.974026][ T7027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.984860][ T7027] overlayfs: upper fs needs to support d_type. [ 104.988158][ T7027] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.990083][ T7027] overlayfs: failed to set xattr on upper [ 104.991540][ T7027] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.993231][ T7027] overlayfs: ...falling back to index=off. [ 104.994788][ T7027] overlayfs: ...falling back to uuid=null. [ 105.008879][ T7024] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 105.242084][ T7024] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 105.244046][ T7024] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 105.261241][ T7024] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 105.285532][ T7044] loop0: detected capacity change from 0 to 512 [ 105.288086][ T7044] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 105.290238][ T7044] UDF-fs: Scanning with blocksize 512 failed [ 105.292701][ T7044] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 105.294516][ T7044] UDF-fs: Scanning with blocksize 1024 failed [ 105.298649][ T7044] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 105.300794][ T7044] UDF-fs: Scanning with blocksize 2048 failed [ 105.302822][ T7044] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 105.306916][ T7044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.499165][ T7057] loop3: detected capacity change from 0 to 512 [ 106.511896][ T7048] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 106.641778][ T7057] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.90: casefold flag without casefold feature [ 106.663611][ T7057] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.90: couldn't read orphan inode 15 (err -117) [ 106.673477][ T7057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.536046][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.353418][ T7090] hub 5-0:1.0: USB hub found [ 110.355501][ T7090] hub 5-0:1.0: 8 ports detected [ 111.661016][ T7097] loop3: detected capacity change from 0 to 32768 [ 112.114304][ T7097] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 112.140641][ T7113] loop4: detected capacity change from 0 to 512 [ 112.533143][ T7113] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 112.535044][ T7113] UDF-fs: Scanning with blocksize 512 failed [ 112.538090][ T7113] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 112.540292][ T7113] UDF-fs: Scanning with blocksize 1024 failed [ 112.544143][ T7113] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 112.546012][ T7113] UDF-fs: Scanning with blocksize 2048 failed [ 112.548780][ T7113] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 112.589839][ T7113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.699035][ T7097] XFS (loop3): Ending clean mount [ 112.708116][ T7097] XFS (loop3): Quotacheck needed: Please wait. [ 112.749566][ T7097] XFS (loop3): Quotacheck: Done. [ 113.285171][ T7123] wireguard0: entered promiscuous mode [ 113.286656][ T7123] wireguard0: entered allmulticast mode [ 114.725068][ T7142] loop2: detected capacity change from 0 to 128 [ 114.766161][ T7142] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 114.781873][ T6450] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 115.344764][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.348699][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.355083][ T7138] loop1: detected capacity change from 0 to 2048 [ 115.360605][ T6452] sysv_free_block: trying to free block not in datazone [ 115.610835][ T7151] loop0: detected capacity change from 0 to 32768 [ 115.679873][ T7151] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.110 (7151) [ 116.258635][ T6452] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 116.295743][ T7154] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.226322][ T7151] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.228828][ T7151] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 117.231059][ T7151] BTRFS info (device loop0): using free-space-tree [ 118.552788][ T6448] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.754640][ T7189] loop2: detected capacity change from 0 to 1024 [ 119.828862][ T7207] loop1: detected capacity change from 0 to 32797 [ 119.834037][ T7207] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.115 (7207) [ 119.839756][ T7207] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 119.842197][ T7207] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 119.844594][ T7207] BTRFS info (device loop1): using free-space-tree [ 119.881769][ T7189] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 120.034781][ T6453] Bluetooth: hci3: command 0x0406 tx timeout [ 120.262213][ T7220] loop0: detected capacity change from 0 to 32768 [ 121.839633][ T7207] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 121.864171][ T7207] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 121.871269][ T7207] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 121.873801][ T7207] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 121.876224][ T7207] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 121.887067][ T7220] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 122.891782][ T7220] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop0": -EINTR [ 122.892490][ T7220] XFS (loop0): log mount failed [ 123.792639][ T7207] BTRFS error (device loop1): open_ctree failed: -12 [ 123.863487][ T6668] hfsplus: b-tree write err: -5, ino 4 [ 124.076361][ T7254] loop0: detected capacity change from 0 to 1764 [ 125.486343][ T7268] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 126.056511][ T2364] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.064012][ T2364] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.601368][ T7275] loop4: detected capacity change from 0 to 2048 [ 127.099310][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 127.963247][ T7275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.856660][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.891595][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 130.603629][ T7304] loop4: detected capacity change from 0 to 512 [ 130.638478][ T7304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 131.453811][ T7313] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 132.386460][ T7320] overlay: ./file2 is not a directory [ 135.121522][ T7328] Bluetooth: MGMT ver 1.23 [ 135.172125][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 135.179020][ T7328] loop1: detected capacity change from 0 to 2048 [ 135.298447][ T7329] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.332900][ T7333] loop3: detected capacity change from 0 to 512 [ 135.334975][ T7333] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.361187][ T7332] loop2: detected capacity change from 0 to 1024 [ 135.378058][ T7332] EXT4-fs: Ignoring removed nobh option [ 135.409576][ T7328] NILFS (loop1): error -2 truncating bmap (ino=16) [ 135.431506][ T7332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.487034][ T7333] EXT4-fs error (device loop3): __ext4_iget:4984: inode #11: block 1: comm syz.3.136: invalid block [ 135.511501][ T7333] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.136: couldn't read orphan inode 11 (err -117) [ 135.521747][ T7333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.549001][ T6452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.436184][ T7349] loop2: detected capacity change from 0 to 16 [ 136.438186][ T7349] erofs: Unknown parameter '' [ 137.506687][ T7352] block device autoloading is deprecated and will be removed. [ 137.785208][ T7351] 9pnet_fd: Insufficient options for proto=fd [ 138.224725][ T7359] netlink: 277 bytes leftover after parsing attributes in process `syz.0.142'. [ 139.791269][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.907009][ T7374] loop2: detected capacity change from 0 to 32768 [ 140.048237][ T7374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.144 (7374) [ 140.060299][ T7374] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.063588][ T7374] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 140.065682][ T7374] BTRFS info (device loop2): using free-space-tree [ 140.750697][ T7401] loop3: detected capacity change from 0 to 1024 [ 141.334803][ T7404] loop0: detected capacity change from 0 to 8 [ 141.336760][ T7404] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 141.359899][ T7404] cramfs: Error -5 while decompressing! [ 141.361418][ T7404] cramfs: 00000000f167eda4(26)->00000000e189b0d3(4096) [ 141.363269][ T7404] cramfs: Error -3 while decompressing! [ 141.364696][ T7404] cramfs: 0000000059f67341(26)->000000008bf7de77(4096) [ 141.366464][ T7404] cramfs: Error -3 while decompressing! [ 141.367858][ T7404] cramfs: 00000000ab38015e(16)->00000000637ef16f(4096) [ 141.370077][ T7404] cramfs: Error -5 while decompressing! [ 141.371644][ T7404] cramfs: 00000000f167eda4(26)->00000000e189b0d3(4096) [ 142.000017][ T6452] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.286106][ T40] hfsplus: b-tree write err: -5, ino 4 [ 142.481554][ T7413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.299960][ T6446] Bluetooth: hci4: command 0x0419 tx timeout [ 144.915981][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.918451][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.155564][ T6579] udevd[6579]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 145.223535][ T6579] udevd[6579]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 145.461234][ T7430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.320536][ T6579] udevd[6579]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 146.356039][ T6579] udevd[6579]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 150.274427][ T7451] Cannot find add_set index 3 as target [ 150.291864][ T7451] loop2: detected capacity change from 0 to 2048 [ 150.304209][ T7451] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 150.342565][ T6579] udevd[6579]: incorrect nilfs2 checksum on /dev/loop2 [ 150.345479][ T7455] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.363477][ T7450] loop3: detected capacity change from 0 to 2048 [ 150.383047][ T7450] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.504179][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 151.397020][ T6446] Bluetooth: hci3: command 0x0406 tx timeout [ 152.529680][ T6453] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 153.018951][ T6450] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1346 (mode 100755) has inode size 47557 different from extent length 47616. Filesystem need not be standards compliant. [ 153.128336][ T7472] loop3: detected capacity change from 0 to 47 [ 153.513673][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 154.984702][ T7484] loop2: detected capacity change from 0 to 128 [ 155.268221][ T7491] loop3: detected capacity change from 0 to 512 [ 155.271585][ T7491] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 155.273446][ T7491] UDF-fs: Scanning with blocksize 512 failed [ 155.958291][ T7491] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 155.960324][ T7491] UDF-fs: Scanning with blocksize 1024 failed [ 155.962980][ T7491] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 155.965011][ T7491] UDF-fs: Scanning with blocksize 2048 failed [ 155.967389][ T7491] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 155.971571][ T7491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.980125][ T25] IPVS: starting estimator thread 0... [ 156.198068][ T7495] IPVS: using max 33 ests per chain, 79200 per kthread [ 156.217207][ T7500] wireguard0: entered promiscuous mode [ 156.218634][ T7500] wireguard0: entered allmulticast mode [ 158.513813][ T25] IPVS: starting estimator thread 0... [ 158.671378][ T7519] IPVS: using max 33 ests per chain, 79200 per kthread [ 158.677997][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 158.870056][ T6445] Bluetooth: hci3: command 0x0406 tx timeout [ 158.871610][ T6445] Bluetooth: hci2: command 0x0406 tx timeout [ 158.873096][ T6445] Bluetooth: hci4: command 0x0419 tx timeout [ 158.874606][ T6445] Bluetooth: hci1: command 0x0406 tx timeout [ 160.749453][ T7542] loop3: detected capacity change from 0 to 1024 [ 162.999953][ T7554] capability: warning: `syz.1.181' uses 32-bit capabilities (legacy support in use) [ 164.868227][ T7563] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 166.265393][ T6668] hfsplus: b-tree write err: -5, ino 4 [ 167.190679][ T7579] loop4: detected capacity change from 0 to 64 [ 167.889387][ T7579] hfs: unable to locate alternate MDB [ 167.890721][ T7579] hfs: continuing without an alternate MDB [ 169.107952][ T7586] netlink: 'syz.0.189': attribute type 9 has an invalid length. [ 169.679659][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.726542][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.730753][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.893486][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.896247][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 169.898239][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.038888][ T7601] loop3: detected capacity change from 0 to 512 [ 170.043643][ T7601] EXT4-fs: Ignoring removed nobh option [ 170.045140][ T7601] EXT4-fs: Ignoring removed nobh option [ 170.633029][ T7601] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 170.636950][ T7601] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.190: invalid indirect mapped block 2683928664 (level 1) [ 170.667707][ T7601] EXT4-fs (loop3): 1 truncate cleaned up [ 170.669600][ T7601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.723721][ T7597] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #2: block 13: comm syz.3.190: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 171.007566][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.062357][ T7610] loop4: detected capacity change from 0 to 512 [ 171.071519][ T7610] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 171.073407][ T7610] UDF-fs: Scanning with blocksize 512 failed [ 171.077885][ T7610] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 171.079795][ T7610] UDF-fs: Scanning with blocksize 1024 failed [ 171.081693][ T7610] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 171.083699][ T7610] UDF-fs: Scanning with blocksize 2048 failed [ 171.085640][ T7610] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 171.090556][ T7610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.235337][ T7616] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 171.461595][ T6446] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 172.227704][ T6446] Bluetooth: hci5: command tx timeout [ 172.674263][ T7613] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 173.158463][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.885831][ T7634] loop4: detected capacity change from 0 to 256 [ 174.141613][ T7634] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 174.246426][ T7646] loop1: detected capacity change from 0 to 128 [ 175.130149][ T54] Bluetooth: hci5: command tx timeout [ 175.131517][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 175.229737][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.836555][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.277724][ T7634] capability: warning: `syz.4.197' uses deprecated v2 capabilities in a way that may be insecure [ 177.355051][ T54] Bluetooth: hci5: command tx timeout [ 177.370075][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.807352][ T7664] loop4: detected capacity change from 0 to 512 [ 177.817576][ T7675] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 177.846606][ T7679] loop3: detected capacity change from 0 to 512 [ 177.885614][ T7679] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 177.887586][ T7679] UDF-fs: Scanning with blocksize 512 failed [ 177.897475][ T7664] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 177.902977][ T7679] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 177.904986][ T7679] UDF-fs: Scanning with blocksize 1024 failed [ 177.912778][ T7679] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 177.914741][ T7679] UDF-fs: Scanning with blocksize 2048 failed [ 177.916782][ T7679] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 177.928136][ T7679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.001353][ T7664] EXT4-fs (loop4): orphan cleanup on readonly fs [ 178.003362][ T7664] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.202: bad orphan inode 15 [ 178.007541][ T7664] ext4_test_bit(bit=14, block=18) = 1 [ 178.008980][ T7664] is_bad_inode(inode)=0 [ 178.022355][ T7664] NEXT_ORPHAN(inode)=1023 [ 178.023497][ T7664] max_ino=32 [ 178.024296][ T7664] i_nlink=0 [ 178.030808][ T7664] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.202: corrupted xattr block 19: e_value size too large [ 178.036547][ T7664] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 178.043316][ T7664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 178.082385][ T7590] chnl_net:caif_netlink_parms(): no params data found [ 178.301884][ T7663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.981752][ T11] bridge_slave_1: left allmulticast mode [ 178.983460][ T11] bridge_slave_1: left promiscuous mode [ 178.986069][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.996148][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.188787][ T11] bridge_slave_0: left allmulticast mode [ 179.204999][ T11] bridge_slave_0: left promiscuous mode [ 179.299836][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.449359][ T54] Bluetooth: hci5: command tx timeout [ 179.648712][ T7705] loop4: detected capacity change from 0 to 2048 [ 179.659083][ T7705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.568952][ T7714] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 180.645093][ T7717] loop4: detected capacity change from 0 to 16 [ 180.647666][ T7717] erofs (device loop4): mounted with root inode @ nid 36. [ 180.914050][ T7719] syz.4.211: attempt to access beyond end of device [ 180.914050][ T7719] loop4: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 180.918317][ T7719] erofs (device loop4): read error -5 @ 43 of nid 36 [ 180.933131][ T7719] erofs (device loop4): readahead error at folio 40 @ nid 36 [ 180.935291][ T7719] erofs (device loop4): readahead error at folio 39 @ nid 36 [ 180.937693][ T7719] erofs (device loop4): readahead error at folio 38 @ nid 36 [ 180.940511][ T7719] erofs (device loop4): readahead error at folio 34 @ nid 36 [ 180.942793][ T7719] erofs (device loop4): readahead error at folio 32 @ nid 36 [ 180.945095][ T7719] erofs (device loop4): readahead error at folio 30 @ nid 36 [ 180.947338][ T7719] erofs (device loop4): readahead error at folio 27 @ nid 36 [ 180.949301][ T7719] erofs (device loop4): readahead error at folio 26 @ nid 36 [ 180.951528][ T7719] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 180.954591][ T7719] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 180.956530][ T7719] erofs (device loop4): readahead error at folio 23 @ nid 36 [ 180.958379][ T7719] erofs (device loop4): readahead error at folio 22 @ nid 36 [ 180.960536][ T7719] erofs (device loop4): readahead error at folio 21 @ nid 36 [ 180.962494][ T7719] erofs (device loop4): readahead error at folio 20 @ nid 36 [ 180.964601][ T7719] erofs (device loop4): readahead error at folio 18 @ nid 36 [ 180.967392][ T7719] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 180.969662][ T7719] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 180.973208][ T7719] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 180.975437][ T7719] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 180.978082][ T7719] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 180.979993][ T7719] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 180.982753][ T7719] syz.4.211: attempt to access beyond end of device [ 180.982753][ T7719] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 180.987069][ T7719] syz.4.211: attempt to access beyond end of device [ 180.987069][ T7719] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 180.991116][ T7719] syz.4.211: attempt to access beyond end of device [ 180.991116][ T7719] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 180.995155][ T7719] syz.4.211: attempt to access beyond end of device [ 180.995155][ T7719] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 180.999144][ T7719] syz.4.211: attempt to access beyond end of device [ 180.999144][ T7719] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 181.003121][ T7719] syz.4.211: attempt to access beyond end of device [ 181.003121][ T7719] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 181.006953][ T7719] syz.4.211: attempt to access beyond end of device [ 181.006953][ T7719] loop4: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 181.011890][ T7719] syz.4.211: attempt to access beyond end of device [ 181.011890][ T7719] loop4: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 181.016435][ T7719] syz.4.211: attempt to access beyond end of device [ 181.016435][ T7719] loop4: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 181.065612][ T7719] erofs (device loop4): readahead error at folio 86 @ nid 36 [ 181.067743][ T7719] erofs (device loop4): readahead error at folio 84 @ nid 36 [ 181.070374][ T7719] erofs (device loop4): readahead error at folio 80 @ nid 36 [ 181.073171][ T7719] erofs (device loop4): readahead error at folio 74 @ nid 36 [ 181.075317][ T7719] erofs (device loop4): readahead error at folio 72 @ nid 36 [ 181.077698][ T7719] erofs (device loop4): readahead error at folio 70 @ nid 36 [ 181.080191][ T7719] erofs (device loop4): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 181.082271][ T7719] erofs (device loop4): readahead error at folio 63 @ nid 36 [ 181.084219][ T7719] erofs (device loop4): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 181.086370][ T7719] erofs (device loop4): readahead error at folio 62 @ nid 36 [ 181.088772][ T7719] erofs (device loop4): readahead error at folio 58 @ nid 36 [ 181.090755][ T7719] erofs (device loop4): readahead error at folio 57 @ nid 36 [ 181.093116][ T7719] erofs (device loop4): readahead error at folio 54 @ nid 36 [ 181.094956][ T7719] erofs (device loop4): readahead error at folio 53 @ nid 36 [ 181.096953][ T7719] erofs (device loop4): readahead error at folio 52 @ nid 36 [ 181.098907][ T7719] erofs (device loop4): readahead error at folio 51 @ nid 36 [ 181.100909][ T7719] erofs (device loop4): bogus lookback distance 363 @ lcn 50 of nid 36 [ 181.103164][ T7719] erofs (device loop4): readahead error at folio 50 @ nid 36 [ 181.105472][ T7719] erofs (device loop4): readahead error at folio 47 @ nid 36 [ 181.107308][ T7719] erofs (device loop4): readahead error at folio 46 @ nid 36 [ 183.243193][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.282821][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.361138][ T11] bond0 (unregistering): Released all slaves [ 183.544951][ T7731] loop4: detected capacity change from 0 to 32768 [ 183.574408][ T7696] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 183.579607][ T7590] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.589352][ T7590] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.591188][ T7590] bridge_slave_0: entered allmulticast mode [ 183.593176][ T7590] bridge_slave_0: entered promiscuous mode [ 183.610412][ T7590] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.612209][ T7590] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.614255][ T7590] bridge_slave_1: entered allmulticast mode [ 183.616332][ T7590] bridge_slave_1: entered promiscuous mode [ 183.745291][ T7731] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 184.375204][ T7703] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 184.392576][ T7731] XFS (loop4): Ending clean mount [ 184.396055][ T7731] XFS (loop4): Quotacheck needed: Please wait. [ 184.414366][ T7731] XFS (loop4): Quotacheck: Done. [ 184.546648][ T7714] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 184.560548][ T7714] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.682419][ T7764] overlayfs: missing 'lowerdir' [ 185.521117][ T7590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.775725][ T7772] loop1: detected capacity change from 0 to 1024 [ 186.873365][ T6444] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 187.674297][ T2364] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.676061][ T2364] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.385537][ T7590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.609792][ T561] hfsplus: b-tree write err: -5, ino 4 [ 188.761384][ T7590] team0: Port device team_slave_0 added [ 190.014484][ T7590] team0: Port device team_slave_1 added [ 190.848988][ T7810] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 190.898076][ T7813] loop4: detected capacity change from 0 to 512 [ 190.900724][ T7813] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 190.902553][ T7813] UDF-fs: Scanning with blocksize 512 failed [ 190.904736][ T7813] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 190.906681][ T7813] UDF-fs: Scanning with blocksize 1024 failed [ 190.908571][ T7813] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 190.910542][ T7813] UDF-fs: Scanning with blocksize 2048 failed [ 190.912557][ T7813] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 190.944719][ T7813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.004374][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.014222][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.077907][ T7590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.101252][ T7803] macvlan2: entered promiscuous mode [ 191.102693][ T7803] macvlan2: entered allmulticast mode [ 191.299171][ T11] hsr_slave_0: left promiscuous mode [ 191.305065][ T11] hsr_slave_1: left promiscuous mode [ 191.320089][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.322138][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.346100][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.348444][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.387848][ T11] veth1_macvtap: left promiscuous mode [ 191.389702][ T11] veth0_macvtap: left promiscuous mode [ 191.393115][ T11] veth1_vlan: left promiscuous mode [ 191.394766][ T11] veth0_vlan: left promiscuous mode [ 191.515480][ T7838] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 193.203502][ T7852] netlink: 'syz.1.230': attribute type 4 has an invalid length. [ 193.205889][ T7852] netlink: 244 bytes leftover after parsing attributes in process `syz.1.230'. [ 194.914395][ T11] team0 (unregistering): Port device team_slave_1 removed [ 195.113237][ T11] team0 (unregistering): Port device team_slave_0 removed [ 197.382569][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.384306][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.390682][ T7590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.454551][ T7825] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 197.457746][ T7826] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 197.470552][ T7838] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 197.477906][ T7848] sit0: entered promiscuous mode [ 197.481764][ T7848] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 197.483644][ T7848] netlink: 1 bytes leftover after parsing attributes in process `syz.0.229'. [ 197.901350][ T7590] hsr_slave_0: entered promiscuous mode [ 198.870829][ T7590] hsr_slave_1: entered promiscuous mode [ 198.886533][ T7590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.888465][ T7590] Cannot create hsr debugfs directory [ 199.591214][ T7883] netlink: 'syz.1.232': attribute type 9 has an invalid length. [ 199.750369][ T7886] loop3: detected capacity change from 0 to 1024 [ 200.935957][ T561] hfsplus: b-tree write err: -5, ino 4 [ 202.635777][ T7912] Process accounting resumed [ 202.691054][ T7590] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.725303][ T7590] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.947741][ T7590] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.962674][ T7590] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 203.306767][ T7922] loop0: detected capacity change from 0 to 1024 [ 203.317606][ T7922] EXT4-fs: Ignoring removed oldalloc option [ 203.929316][ T7922] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 204.263949][ T7922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.506978][ T7924] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 205.325873][ T7943] loop3: detected capacity change from 0 to 1024 [ 205.357011][ T6448] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.024130][ T7590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.038142][ T7943] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 206.239103][ T7590] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.243989][ T561] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.245844][ T561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.237682][ T561] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.239656][ T561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.264856][ T7590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.477691][ T7590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.878819][ T6669] hfsplus: b-tree write err: -5, ino 4 [ 208.126673][ T7973] 9pnet_fd: Insufficient options for proto=fd [ 208.567963][ T7980] [U] : [ 208.568943][ T7980] [U] [ 208.569733][ T7980] [U] [ 208.570567][ T7980] [U] [ 208.571342][ T7980] [U] [ 208.571999][ T7980] [U] [ 208.572658][ T7980] [U] [ 208.573372][ T7980] [U] [ 208.574454][ T7980] [U] [ 208.575169][ T7980] [U] [ 208.575843][ T7980] [U] [ 208.576549][ T7980] [U] [ 208.577221][ T7980] [U] [ 208.577931][ T7980] [U] [ 208.578630][ T7980] [U] [ 208.579348][ T7980] [U] [ 208.580418][ T7980] [U] [ 208.581087][ T7980] [U] [ 208.581742][ T7980] [U] [ 208.582422][ T7980] [U] [ 208.583050][ T7980] [U] [ 208.583751][ T7980] [U] [ 208.584466][ T7980] [U] [ 208.585186][ T7980] [U] [ 208.586160][ T7980] [U] [ 208.586833][ T7980] [U] [ 208.587537][ T7980] [U] [ 208.588225][ T7980] [U] [ 208.588961][ T7980] [U] [ 208.589647][ T7980] [U] [ 208.590364][ T7980] [U] [ 208.591085][ T7980] [U] [ 208.592257][ T7980] [U] [ 208.592997][ T7980] [U] [ 208.593719][ T7980] [U] [ 208.594388][ T7980] [U] [ 208.595061][ T7980] [U] [ 208.595707][ T7980] [U] [ 208.596382][ T7980] [U] [ 208.597190][ T7980] [U] [ 208.598255][ T7980] [U] [ 208.598973][ T7980] [U] [ 208.599639][ T7980] [U] [ 208.600367][ T7980] [U] [ 208.601085][ T7980] [U] [ 208.601756][ T7980] [U] [ 208.602379][ T7980] [U] [ 208.603078][ T7980] [U] [ 208.604058][ T7980] [U] [ 208.604763][ T7980] [U] [ 208.605454][ T7980] [U] [ 208.606144][ T7980] [U] [ 208.606888][ T7980] [U] [ 208.607594][ T7980] [U] [ 208.608251][ T7980] [U] [ 208.608954][ T7980] [U] [ 208.609869][ T7980] [U] [ 208.610568][ T7980] [U] [ 208.611235][ T7980] [U] [ 208.611946][ T7980] [U] [ 208.612641][ T7980] [U] [ 208.613285][ T7980] [U] [ 208.614034][ T7980] [U] [ 208.614701][ T7980] [U] [ 208.615562][ T7980] [U] [ 208.616238][ T7980] [U] [ 208.616952][ T7980] [U] [ 208.617642][ T7980] [U] [ 208.618369][ T7980] [U] [ 208.619104][ T7980] [U] [ 208.619773][ T7980] [U] [ 208.620514][ T7980] [U] [ 208.621604][ T7980] [U] [ 208.622340][ T7980] [U] [ 208.622993][ T7980] [U] [ 208.623697][ T7980] [U] [ 208.624342][ T7980] [U] [ 208.625041][ T7980] [U] [ 208.625728][ T7980] [U] [ 208.626399][ T7980] [U] [ 208.627281][ T7980] [U] [ 208.627997][ T7980] [U] [ 208.628754][ T7980] [U] [ 208.629446][ T7980] [U] [ 208.630159][ T7980] [U] [ 208.630927][ T7980] [U] [ 208.631615][ T7980] [U] [ 208.632348][ T7980] [U] [ 208.633246][ T7980] [U] [ 208.633967][ T7980] [U] [ 208.634633][ T7980] [U] [ 208.635324][ T7980] [U] [ 208.635980][ T7980] [U] [ 208.636672][ T7980] [U] [ 208.637399][ T7980] [U] [ 208.638141][ T7980] [U] [ 208.639026][ T7980] [U] [ 208.639700][ T7980] [U] [ 208.640379][ T7980] [U] [ 208.641121][ T7980] [U] [ 208.641859][ T7980] [U] [ 208.642538][ T7980] [U] [ 208.643207][ T7980] [U] [ 208.643912][ T7980] [U] [ 208.677803][ T7980] [U] [ 208.678565][ T7980] [U] [ 208.679226][ T7980] [U] [ 208.679993][ T7980] [U] [ 208.680699][ T7980] [U] [ 208.681411][ T7980] [U] [ 208.682096][ T7980] [U] [ 208.682766][ T7980] [U] [ 208.683741][ T7980] [U] [ 208.684427][ T7980] [U] [ 208.685112][ T7980] [U] [ 208.685812][ T7980] [U] [ 208.686528][ T7980] [U] [ 208.687193][ T7980] [U] [ 208.687915][ T7980] [U] [ 208.688589][ T7980] [U] [ 208.689443][ T7980] [U] [ 208.690210][ T7980] [U] [ 208.690937][ T7980] [U] [ 208.691614][ T7980] [U] [ 208.692303][ T7980] [U] [ 208.692946][ T7980] [U] [ 208.693567][ T7980] [U] [ 208.905433][ T7980] [U] [ 209.155649][ T7590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.513205][ T7991] loop4: detected capacity change from 0 to 128 [ 211.509064][ T7590] veth0_vlan: entered promiscuous mode [ 211.813646][ T30] audit: type=1326 audit(211.770:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7988 comm="syz.4.251" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86b59a68 code=0x0 [ 212.157996][ T7590] veth1_vlan: entered promiscuous mode [ 212.500545][ T7590] veth0_macvtap: entered promiscuous mode [ 212.514099][ T7590] veth1_macvtap: entered promiscuous mode [ 212.527492][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.532970][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.536707][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.542901][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.933358][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.936098][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.938538][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.941394][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.944592][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.950337][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.952998][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.955422][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.957982][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.973397][ T8027] loop4: detected capacity change from 0 to 1024 [ 212.978698][ T8015] netlink: 'syz.1.255': attribute type 10 has an invalid length. [ 212.987555][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.997303][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.000205][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.003021][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.006140][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.011804][ T8027] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 214.408415][ T6668] hfsplus: b-tree write err: -5, ino 4 [ 214.410832][ T7590] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.419913][ T7590] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.422153][ T7590] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.458391][ T7590] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.598541][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 214.638023][ T8043] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.640723][ T8043] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.642920][ T8043] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.644987][ T8043] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.680601][ T8043] vxlan0: entered promiscuous mode [ 214.681909][ T8043] vxlan0: entered allmulticast mode [ 214.728706][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.750259][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.430399][ T6669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.436702][ T6669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.359185][ T8080] wireguard0: entered promiscuous mode [ 217.362696][ T8080] wireguard0: entered allmulticast mode [ 218.319326][ T6521] IPVS: starting estimator thread 0... [ 218.559540][ T8090] IPVS: using max 33 ests per chain, 79200 per kthread [ 219.016233][ T8102] loop4: detected capacity change from 0 to 1024 [ 219.164782][ T8102] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 220.774675][ T8108] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 220.792068][ T4384] hfsplus: b-tree write err: -5, ino 4 [ 221.829420][ T6525] IPVS: starting estimator thread 0... [ 221.993259][ T8125] IPVS: using max 33 ests per chain, 79200 per kthread [ 222.050426][ T8136] loop4: detected capacity change from 0 to 2048 [ 222.192836][ T8139] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.160717][ T8140] tipc: Started in network mode [ 223.162271][ T8140] tipc: Node identity ac1414aa, cluster identity 4711 [ 223.164751][ T8140] tipc: Enabled bearer , priority 10 [ 223.328239][ T8136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.570300][ T6490] tipc: Node number set to 2886997162 [ 224.880784][ T8158] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 225.635354][ T8166] loop3: detected capacity change from 0 to 512 [ 225.640822][ T8166] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 225.642814][ T8166] UDF-fs: Scanning with blocksize 512 failed [ 225.646233][ T8166] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 225.648239][ T8166] UDF-fs: Scanning with blocksize 1024 failed [ 225.650356][ T8166] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 225.652271][ T8166] UDF-fs: Scanning with blocksize 2048 failed [ 225.655157][ T8166] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 225.659046][ T8166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.751931][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.617126][ T6490] kernel write not supported for file 245/task/246/oom_score_adj (pid: 6490 comm: kworker/1:4) [ 227.866690][ T8174] wireguard1: entered promiscuous mode [ 227.868088][ T8174] wireguard1: entered allmulticast mode [ 227.978447][ T8184] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 228.158342][ T8191] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 229.100128][ T8202] lo: entered promiscuous mode [ 229.101424][ T8202] lo: entered allmulticast mode [ 229.111899][ T8202] tunl0: entered promiscuous mode [ 229.113312][ T8202] tunl0: entered allmulticast mode [ 229.125267][ T8202] gre0: entered promiscuous mode [ 229.126713][ T8202] gre0: entered allmulticast mode [ 229.138513][ T8202] gretap0: entered promiscuous mode [ 229.329438][ T8202] gretap0: entered allmulticast mode [ 229.375878][ T8202] erspan0: entered promiscuous mode [ 229.377387][ T8202] erspan0: entered allmulticast mode [ 229.385584][ T8202] ip_vti0: entered promiscuous mode [ 229.386890][ T8202] ip_vti0: entered allmulticast mode [ 230.188816][ T8202] ip6_vti0: entered promiscuous mode [ 230.304231][ T8202] ip6_vti0: entered allmulticast mode [ 230.459127][ T8202] sit0: entered promiscuous mode [ 230.459156][ T8202] sit0: entered allmulticast mode [ 230.469209][ T8202] ip6tnl0: entered promiscuous mode [ 230.476362][ T8202] ip6tnl0: entered allmulticast mode [ 230.483470][ T8202] ip6gre0: entered promiscuous mode [ 230.486395][ T8202] ip6gre0: entered allmulticast mode [ 230.496129][ T8202] syz_tun: entered promiscuous mode [ 230.502123][ T8202] syz_tun: entered allmulticast mode [ 230.508754][ T8202] ip6gretap0: entered promiscuous mode [ 230.517107][ T8202] ip6gretap0: entered allmulticast mode [ 230.523200][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.526622][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.535174][ T8202] bridge0: entered promiscuous mode [ 230.536473][ T8202] bridge0: entered allmulticast mode [ 230.540864][ T8202] vcan0: entered promiscuous mode [ 230.542161][ T8202] vcan0: entered allmulticast mode [ 230.546172][ T8202] bond0: entered promiscuous mode [ 230.547399][ T8202] bond_slave_0: entered promiscuous mode [ 230.561844][ T8202] bond_slave_1: entered promiscuous mode [ 230.563391][ T8202] bond0: entered allmulticast mode [ 230.566376][ T8202] bond_slave_0: entered allmulticast mode [ 230.572513][ T8202] bond_slave_1: entered allmulticast mode [ 230.587586][ T8202] team0: entered promiscuous mode [ 230.593036][ T8202] team_slave_0: entered promiscuous mode [ 230.594895][ T8202] team_slave_1: entered promiscuous mode [ 230.596552][ T8202] team0: entered allmulticast mode [ 230.597896][ T8202] team_slave_0: entered allmulticast mode [ 230.601962][ T8202] team_slave_1: entered allmulticast mode [ 230.605976][ T8202] dummy0: entered promiscuous mode [ 230.607488][ T8202] dummy0: entered allmulticast mode [ 230.615059][ T8202] nlmon0: entered promiscuous mode [ 230.616379][ T8202] nlmon0: entered allmulticast mode [ 230.619069][ T8202] caif0: entered promiscuous mode [ 230.622711][ T8202] caif0: entered allmulticast mode [ 230.624572][ T8202] batadv0: entered promiscuous mode [ 230.626047][ T8202] batadv0: entered allmulticast mode [ 230.632684][ T8202] vxcan0: entered promiscuous mode [ 230.634132][ T8202] vxcan0: entered allmulticast mode [ 230.636572][ T8202] vxcan1: entered promiscuous mode [ 230.637942][ T8202] vxcan1: entered allmulticast mode [ 230.642552][ T8202] veth0: entered promiscuous mode [ 230.643827][ T8202] veth0: entered allmulticast mode [ 230.652655][ T8202] veth1: entered promiscuous mode [ 230.653961][ T8202] veth1: entered allmulticast mode [ 230.794354][ T8202] wg0: entered promiscuous mode [ 230.795720][ T8202] wg0: entered allmulticast mode [ 231.985761][ T8202] wg1: entered promiscuous mode [ 232.024920][ T8202] wg1: entered allmulticast mode [ 232.449452][ T8202] wg2: entered promiscuous mode [ 232.450768][ T8202] wg2: entered allmulticast mode [ 232.453896][ T8202] veth0_to_bridge: entered promiscuous mode [ 232.455492][ T8202] veth0_to_bridge: entered allmulticast mode [ 232.468103][ T8202] veth1_to_bridge: entered promiscuous mode [ 232.469736][ T8202] veth1_to_bridge: entered allmulticast mode [ 232.475331][ T8202] veth0_to_bond: entered promiscuous mode [ 232.476781][ T8202] veth0_to_bond: entered allmulticast mode [ 232.481605][ T8202] veth1_to_bond: entered promiscuous mode [ 232.483095][ T8202] veth1_to_bond: entered allmulticast mode [ 232.487469][ T8202] veth0_to_team: entered promiscuous mode [ 232.489033][ T8202] veth0_to_team: entered allmulticast mode [ 232.498690][ T8202] veth1_to_team: entered promiscuous mode [ 232.500530][ T8202] veth1_to_team: entered allmulticast mode [ 232.505603][ T8202] veth0_to_batadv: entered promiscuous mode [ 232.507121][ T8202] veth0_to_batadv: entered allmulticast mode [ 232.514738][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.516903][ T8202] batadv_slave_0: entered promiscuous mode [ 232.518424][ T8202] batadv_slave_0: entered allmulticast mode [ 232.522269][ T8202] veth1_to_batadv: entered promiscuous mode [ 232.529389][ T8202] veth1_to_batadv: entered allmulticast mode [ 232.547641][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.551739][ T8202] batadv_slave_1: entered promiscuous mode [ 232.553193][ T8202] batadv_slave_1: entered allmulticast mode [ 232.561953][ T8202] xfrm0: entered promiscuous mode [ 232.563339][ T8202] xfrm0: entered allmulticast mode [ 232.566301][ T8202] veth0_to_hsr: entered promiscuous mode [ 232.567859][ T8202] veth0_to_hsr: entered allmulticast mode [ 232.577768][ T8202] hsr_slave_0: entered allmulticast mode [ 232.582241][ T8202] veth1_to_hsr: entered promiscuous mode [ 232.583722][ T8202] veth1_to_hsr: entered allmulticast mode [ 232.587192][ T8202] hsr_slave_1: entered allmulticast mode [ 232.593307][ T8202] hsr0: entered promiscuous mode [ 232.594528][ T8202] hsr0: entered allmulticast mode [ 232.597778][ T8202] veth1_virt_wifi: entered promiscuous mode [ 232.601373][ T8202] veth1_virt_wifi: entered allmulticast mode [ 232.604698][ T8202] veth0_virt_wifi: entered promiscuous mode [ 232.606196][ T8202] veth0_virt_wifi: entered allmulticast mode [ 232.609579][ T8202] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 232.611587][ T8202] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 232.613918][ T8202] veth1_vlan: entered allmulticast mode [ 232.633179][ T8202] veth0_vlan: entered allmulticast mode [ 232.643133][ T8202] vlan0: entered promiscuous mode [ 232.644355][ T8202] vlan0: entered allmulticast mode [ 232.645759][ T8202] vlan1: entered promiscuous mode [ 232.647581][ T8202] vlan1: entered allmulticast mode [ 232.709794][ T8202] macvlan0: entered promiscuous mode [ 232.711204][ T8202] macvlan0: entered allmulticast mode [ 232.739512][ T8202] macvlan1: entered promiscuous mode [ 232.740864][ T8202] macvlan1: entered allmulticast mode [ 232.744795][ T8202] ipvlan0: entered promiscuous mode [ 232.746109][ T8202] ipvlan0: entered allmulticast mode [ 232.747523][ T8202] ipvlan1: entered promiscuous mode [ 232.749415][ T8202] ipvlan1: entered allmulticast mode [ 233.446261][ T8202] veth1_macvtap: entered allmulticast mode [ 233.451692][ T8202] veth0_macvtap: entered allmulticast mode [ 233.499662][ T8202] macvtap0: entered promiscuous mode [ 233.502208][ T8202] macvtap0: entered allmulticast mode [ 233.509625][ T8202] macsec0: entered promiscuous mode [ 233.511164][ T8202] macsec0: entered allmulticast mode [ 233.580076][ T8202] geneve0: entered promiscuous mode [ 233.581498][ T8202] geneve0: entered allmulticast mode [ 233.587328][ T8202] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.589755][ T8202] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.592246][ T8202] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.594430][ T8202] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.629819][ T8202] geneve1: entered promiscuous mode [ 233.631128][ T8202] geneve1: entered allmulticast mode [ 233.636841][ T8202] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 233.638781][ T8202] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 233.642428][ T8202] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 233.644333][ T8202] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 233.647933][ T8202] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 233.649843][ T8202] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 233.653491][ T8202] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 233.655339][ T8202] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 233.752107][ T8202] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 233.753988][ T8202] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 233.831126][ T8202] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 233.832899][ T8202] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 233.968060][ T8213] warning: `syz.0.296' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 235.104250][ T8229] wireguard2: entered promiscuous mode [ 235.105755][ T8229] wireguard2: entered allmulticast mode [ 239.065720][ T8268] infiniband syz1: set down [ 239.067126][ T8268] infiniband syz1: added ipvlan0 [ 239.164734][ T8268] RDS/IB: syz1: added [ 239.166193][ T8268] smc: adding ib device syz1 with port count 1 [ 239.167916][ T8268] smc: ib device syz1 port 1 has pnetid [ 239.175024][ T8277] netlink: 80 bytes leftover after parsing attributes in process `syz.1.298'. [ 239.177926][ T8277] xfrm0: entered allmulticast mode [ 240.010597][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 240.153887][ T8292] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 240.383441][ T8303] sctp: [Deprecated]: syz.0.302 (pid 8303) Use of int in max_burst socket option deprecated. [ 240.383441][ T8303] Use struct sctp_assoc_value instead [ 242.172642][ T8312] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 243.066113][ T8321] Invalid ELF header magic: != ELF [ 244.253655][ T54] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 244.255854][ T54] Bluetooth: hci5: Injecting HCI hardware error event [ 244.266619][ T6446] Bluetooth: hci5: hardware error 0x00 [ 246.084516][ T8319] Set syz1 is full, maxelem 65536 reached [ 247.429873][ T6446] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 248.890458][ T2364] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.896690][ T2364] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.162173][ T8377] netlink: 'syz.1.318': attribute type 10 has an invalid length. [ 249.195678][ T8379] No control pipe specified [ 249.443962][ T8382] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 251.923266][ T6490] kernel read not supported for file /dsp1 (pid: 6490 comm: kworker/1:4) [ 255.236449][ T8442] netlink: 'syz.3.329': attribute type 10 has an invalid length. [ 255.931337][ T6446] Bluetooth: hci2: command 0x0406 tx timeout [ 256.538289][ T8457] overlayfs: workdir and upperdir must reside under the same mount [ 258.660549][ T6491] IPVS: starting estimator thread 0... [ 258.800643][ T8475] IPVS: using max 32 ests per chain, 76800 per kthread [ 259.142975][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.146663][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.150776][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.154091][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.156278][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 259.158251][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.220854][ T6446] Bluetooth: hci1: command tx timeout [ 263.797153][ T6446] Bluetooth: hci1: command tx timeout [ 263.800886][ T6446] Bluetooth: hci2: command 0x0406 tx timeout [ 264.184928][ T8542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.210752][ T8544] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 264.282143][ T476] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.284946][ T476] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.289741][ T8542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.496793][ T8548] kernel profiling enabled (shift: 7) [ 265.444314][ T8548] Injecting memory failure for pfn 0x13614d at process virtual address 0x400000000000 [ 265.512540][ T8548] Memory failure: 0x13614d: Sending SIGBUS to syz.3.342:8548 due to hardware memory corruption [ 265.515736][ T8548] Memory failure: 0x13614d: recovery action for dirty LRU page: Recovered [ 265.518199][ T8548] Injecting memory failure for pfn 0x13613f at process virtual address 0x400000001000 [ 265.689630][ T8548] Memory failure: 0x13613f: Sending SIGBUS to syz.3.342:8548 due to hardware memory corruption [ 265.693467][ T8548] Memory failure: 0x13613f: recovery action for dirty LRU page: Recovered [ 265.695976][ T8548] Injecting memory failure for pfn 0x136140 at process virtual address 0x400000002000 [ 265.702738][ T8548] Memory failure: 0x136140: recovery action for dirty LRU page: Recovered [ 265.705031][ T8548] Injecting memory failure for pfn 0x136141 at process virtual address 0x400000003000 [ 265.709652][ T8548] Memory failure: 0x136141: recovery action for dirty LRU page: Recovered [ 265.850163][ T54] Bluetooth: hci1: command tx timeout [ 265.969157][ T8477] chnl_net:caif_netlink_parms(): no params data found [ 266.273077][ T476] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.276929][ T476] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.686754][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.695355][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.701713][ T8477] bridge_slave_0: entered allmulticast mode [ 266.713125][ T8477] bridge_slave_0: entered promiscuous mode [ 266.884059][ T476] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.895255][ T476] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.913402][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.919035][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.926565][ T8477] bridge_slave_1: entered allmulticast mode [ 266.935148][ T8477] bridge_slave_1: entered promiscuous mode [ 267.132423][ T476] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.141396][ T476] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.167163][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.840695][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.929627][ T54] Bluetooth: hci1: command tx timeout [ 267.951743][ T8477] team0: Port device team_slave_0 added [ 269.034793][ T8477] team0: Port device team_slave_1 added [ 269.174776][ T8603] RDS: rds_bind could not find a transport for fe88::6, load rds_tcp or rds_rdma? [ 269.187135][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.189046][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.329284][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.333180][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.335001][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.372848][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.897779][ T8477] hsr_slave_0: entered promiscuous mode [ 270.910786][ T8477] hsr_slave_1: entered promiscuous mode [ 270.922441][ T8477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.935880][ T8477] Cannot create hsr debugfs directory [ 270.967907][ T476] bridge_slave_1: left allmulticast mode [ 270.969311][ T476] bridge_slave_1: left promiscuous mode [ 270.972601][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.980612][ T476] bridge_slave_0: left allmulticast mode [ 270.981984][ T476] bridge_slave_0: left promiscuous mode [ 270.983310][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.131721][ T8630] Injecting memory failure for pfn 0x140dfe at process virtual address 0x400000ffe000 [ 272.384253][ T8630] Memory failure: 0x140dfe: Sending SIGBUS to syz.0.354:8630 due to hardware memory corruption [ 272.387007][ T8630] Memory failure: 0x140dfe: recovery action for dirty LRU page: Recovered [ 276.811261][ T8672] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 278.415712][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 279.097220][ T8682] Set syz1 is full, maxelem 65536 reached [ 279.547893][ T8688] libceph: resolve ' [ 279.547893][ T8688] -&fYǝa2i [ 279.547893][ T8688] .?&*&' (ret=-3): failed [ 279.565282][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'. [ 280.507207][ T8695] GUP no longer grows the stack in syz.1.365 (8695): 400000004000-40000000a000 (400000002000) [ 280.510367][ T8695] CPU: 0 UID: 0 PID: 8695 Comm: syz.1.365 Not tainted 6.14.0-rc3-syzkaller-g6d206d3a6f6e #0 [ 280.510384][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 280.510391][ T8695] Call trace: [ 280.510394][ T8695] show_stack+0x2c/0x3c (C) [ 280.510424][ T8695] dump_stack_lvl+0xe4/0x150 [ 280.510451][ T8695] dump_stack+0x1c/0x28 [ 280.510466][ T8695] __get_user_pages+0x3230/0x3400 [ 280.510479][ T8695] get_user_pages_remote+0x328/0xa30 [ 280.510492][ T8695] __access_remote_vm+0x1fc/0x6e8 [ 280.510506][ T8695] access_remote_vm+0x48/0x60 [ 280.510519][ T8695] proc_pid_cmdline_read+0x46c/0x944 [ 280.510532][ T8695] vfs_readv+0x53c/0x834 [ 280.510545][ T8695] __arm64_sys_preadv+0x188/0x298 [ 280.510558][ T8695] invoke_syscall+0x98/0x2b8 [ 280.510572][ T8695] el0_svc_common+0x130/0x23c [ 280.510586][ T8695] do_el0_svc+0x48/0x58 [ 280.510598][ T8695] el0_svc+0x54/0x168 [ 280.510610][ T8695] el0t_64_sync_handler+0x84/0x108 [ 280.510620][ T8695] el0t_64_sync+0x198/0x19c [ 280.902513][ T476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.944674][ T476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.014755][ T476] bond0 (unregistering): Released all slaves [ 281.496893][ T8714] Invalid ELF header magic: != ELF [ 288.107814][ T8477] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 288.130578][ T8779] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 288.601904][ T8477] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.252719][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 289.301876][ T8477] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 289.321027][ T8477] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 289.772920][ T8798] netlink: 'syz.3.381': attribute type 10 has an invalid length. [ 289.882099][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.893301][ T8798] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 290.129146][ T8793] input: syz0 as /devices/virtual/input/input5 [ 290.416896][ T476] hsr_slave_0: left promiscuous mode [ 290.534167][ T476] hsr_slave_1: left promiscuous mode [ 290.535909][ T476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.537911][ T476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.586153][ T476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.596727][ T476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.627995][ T476] veth1_macvtap: left promiscuous mode [ 290.632963][ T476] veth0_macvtap: left promiscuous mode [ 290.634346][ T476] veth1_vlan: left promiscuous mode [ 290.635717][ T476] veth0_vlan: left promiscuous mode [ 292.821444][ T54] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 293.738449][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 296.015799][ T8849] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 296.169529][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 297.556828][ T476] team0 (unregistering): Port device team_slave_1 removed [ 297.741791][ T476] team0 (unregistering): Port device team_slave_0 removed [ 300.911110][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.953974][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.168543][ T8871] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 301.254016][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.255856][ T587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.305634][ T8868] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 301.307548][ T8868] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 301.343844][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.345703][ T587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.534832][ T8868] vhci_hcd vhci_hcd.0: Device attached [ 301.557326][ T8868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 301.590203][ T8868] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 301.591920][ T8868] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 301.609720][ T8874] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 301.611532][ T8874] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.628782][ T8888] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 302.603341][ T8874] vhci_hcd vhci_hcd.0: Device attached [ 302.605092][ T8868] vhci_hcd vhci_hcd.0: Device attached [ 302.636466][ T8868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 302.805656][ T8868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 302.821198][ T8868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 302.865465][ T8868] vhci_hcd vhci_hcd.0: port 0 already used [ 303.077495][ T476] IPVS: stop unused estimator thread 0... [ 303.128420][ T8878] vhci_hcd: connection closed [ 303.130646][ T8872] vhci_hcd: connection closed [ 303.132399][ T8877] vhci_hcd: connection closed [ 303.142888][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.156748][ T45] vhci_hcd: stop threads [ 303.158790][ T45] vhci_hcd: release socket [ 303.185360][ T45] vhci_hcd: disconnect device [ 303.195210][ T45] vhci_hcd: stop threads [ 303.196322][ T45] vhci_hcd: release socket [ 303.202550][ T45] vhci_hcd: disconnect device [ 303.204938][ T54] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 303.219753][ T45] vhci_hcd: stop threads [ 303.220875][ T45] vhci_hcd: release socket [ 303.229746][ T45] vhci_hcd: disconnect device [ 303.401525][ T8477] veth0_vlan: entered promiscuous mode [ 303.417790][ T8477] veth1_vlan: entered promiscuous mode [ 303.485068][ T8477] veth0_macvtap: entered promiscuous mode [ 303.488177][ T8477] veth1_macvtap: entered promiscuous mode [ 303.508490][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.519614][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.522010][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.529360][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.531811][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.534484][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.548033][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.571551][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.574220][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.576643][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.599352][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.608063][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.611202][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.709498][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.712903][ T8477] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.715120][ T8477] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.779497][ T8477] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.794207][ T8477] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.808337][ T6668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.823177][ T6668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.980090][ T476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.985135][ T476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.482399][ T8955] wireguard3: entered promiscuous mode [ 305.483844][ T8955] wireguard3: entered allmulticast mode [ 305.893856][ T8962] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 307.418902][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 307.501469][ T8979] wireguard0: entered promiscuous mode [ 307.512279][ T8979] wireguard0: entered allmulticast mode [ 310.266288][ T2364] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.268030][ T2364] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.492691][ T6491] kernel read not supported for file /dsp1 (pid: 6491 comm: kworker/0:3) [ 312.699042][ T9048] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 319.508877][ T9107] IPVS: stopping master sync thread 9102 ... [ 320.740940][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 321.450720][ T6446] Bluetooth: hci3: command 0x0406 tx timeout [ 321.544030][ T9130] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 323.161085][ T6446] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 323.325224][ T27] IPVS: starting estimator thread 0... [ 323.430214][ T9154] IPVS: using max 33 ests per chain, 79200 per kthread [ 325.364268][ T9179] netlink: 'syz.6.441': attribute type 10 has an invalid length. [ 327.026997][ T9179] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 327.082719][ T9196] lo speed is unknown, defaulting to 1000 [ 327.084224][ T9196] lo speed is unknown, defaulting to 1000 [ 327.086125][ T9196] lo speed is unknown, defaulting to 1000 [ 327.089399][ T9196] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 327.093746][ T9196] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 327.149134][ T9196] lo speed is unknown, defaulting to 1000 [ 327.151284][ T9196] lo speed is unknown, defaulting to 1000 [ 327.153041][ T9196] lo speed is unknown, defaulting to 1000 [ 327.154776][ T9196] lo speed is unknown, defaulting to 1000 [ 327.156569][ T9196] lo speed is unknown, defaulting to 1000 [ 329.784828][ T9237] wireguard0: entered promiscuous mode [ 329.786362][ T9237] wireguard0: entered allmulticast mode [ 330.769841][ T9251] wireguard4: entered promiscuous mode [ 330.771367][ T9251] wireguard4: entered allmulticast mode [ 330.880191][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.910634][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.092000][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.453'. [ 331.164527][ T9271] loop6: detected capacity change from 0 to 64 [ 331.634449][ T9271] BFS-fs: bfs_fill_super(): Impossible last inode number 49807519 > 513 on loop6 [ 331.995677][ T9279] netlink: 'syz.6.455': attribute type 10 has an invalid length. [ 334.514634][ T9313] loop6: detected capacity change from 0 to 8 [ 334.632287][ T9313] SQUASHFS error: Failed to read block 0x6e6: -5 [ 334.634146][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.636113][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.638287][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.640174][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.642071][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.643892][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.645718][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.647586][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.649526][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.651319][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.653295][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.655147][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.656898][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.658781][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.660749][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.662460][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.664347][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.666207][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.668047][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.670063][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.671974][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.673798][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.675592][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.677336][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.679124][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.681089][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.682947][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.684787][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.686675][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.688527][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.690434][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.692240][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.694150][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.695895][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.697814][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.699727][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.701580][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.703498][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.705325][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.707093][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.708944][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.710873][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.712695][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.714546][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.716353][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.718396][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.755521][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.757544][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.759641][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.761615][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.763621][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.765559][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.767517][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.769470][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.771333][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.773492][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.775307][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.777131][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.779049][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.781187][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.783189][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.785046][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.786820][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.788630][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.790537][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.792564][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.794228][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.795862][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.797587][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.799284][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.800940][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.802801][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.804456][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.806195][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.807863][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.809504][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.811182][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.812927][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.814595][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.816308][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.818039][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.819692][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.821367][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.823198][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.824824][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.826501][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.828181][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.829908][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.831902][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.833747][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.835425][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.837112][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.838758][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.840606][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.842260][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.844098][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.845750][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.847462][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.849105][ T9313] SQUASHFS error: Failed to read block 0x0: -5 [ 334.851718][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.853431][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.856516][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.858506][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.864450][ T9314] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.866179][ T9314] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.869645][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.871340][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.873522][ T9314] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.875216][ T9314] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.906755][ T9313] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.908526][ T9313] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.912068][ T9314] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.913801][ T9314] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.916905][ T9314] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.918717][ T9314] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.921045][ T9315] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.922794][ T9315] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.925475][ T9314] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.927116][ T9314] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.928691][ T9315] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.930452][ T9315] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.932004][ T9314] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.933634][ T9314] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.935236][ T9315] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.936846][ T9315] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.939036][ T9315] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.940834][ T9315] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.942411][ T9314] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.944282][ T9314] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.945900][ T9314] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.947612][ T9314] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.985387][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.987060][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.988863][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.990997][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.992865][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.994832][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 334.996678][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 334.998507][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.001732][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.003601][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.007505][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.010881][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.012711][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.014984][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.018520][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.020556][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.022283][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.024184][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.025865][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.027663][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.031393][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.033200][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.035017][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.036950][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.038839][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.040937][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.042835][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.044681][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.047469][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.049351][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.051128][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.052959][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.054723][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.056626][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.058467][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.060401][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.063273][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.065242][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.067136][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.068971][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.070804][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.072771][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.074582][ T9311] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 335.076513][ T9311] SQUASHFS error: read_indexes: reading block [6e4:0] [ 335.257243][ T9325] syz.5.461 uses obsolete (PF_INET,SOCK_PACKET) [ 339.095468][ T9346] loop6: detected capacity change from 0 to 1024 [ 339.630824][ T9347] overlayfs: failed to resolve './file2': -2 [ 340.190656][ T9346] hfsplus: failed to load catalog file [ 340.224887][ T9353] netlink: 'syz.3.467': attribute type 10 has an invalid length. [ 340.667937][ T9369] netlink: 'syz.5.468': attribute type 9 has an invalid length. [ 343.484952][ T9407] wireguard5: entered promiscuous mode [ 343.486383][ T9407] wireguard5: entered allmulticast mode [ 344.473476][ T9421] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 344.476653][ T9421] netlink: 'syz.1.478': attribute type 10 has an invalid length. [ 344.476680][ T9421] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 345.167109][ T9427] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 345.199541][ T9427] netlink: 'syz.6.480': attribute type 10 has an invalid length. [ 345.201536][ T9427] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 345.233780][ T9426] netlink: 56 bytes leftover after parsing attributes in process `syz.1.479'. [ 345.260764][ T9426] netlink: 56 bytes leftover after parsing attributes in process `syz.1.479'. [ 345.280957][ T9426] netlink: 56 bytes leftover after parsing attributes in process `syz.1.479'. [ 345.374064][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.479'. [ 345.785706][ T9440] input: syz0 as /devices/virtual/input/input6 [ 346.716140][ T9441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.718526][ T9441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.124584][ T9457] netlink: 'syz.0.483': attribute type 9 has an invalid length. [ 349.269452][ T9470] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 349.281985][ T9470] netlink: 'syz.3.489': attribute type 10 has an invalid length. [ 349.284023][ T9470] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 350.635525][ T9492] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 350.654587][ T9492] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 350.656894][ T9492] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 354.768378][ T9536] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 354.773436][ T9536] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 354.775325][ T9536] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 355.439373][ T9543] No such timeout policy "syz1" [ 356.874473][ T9560] wireguard1: entered promiscuous mode [ 356.876024][ T9560] wireguard1: entered allmulticast mode [ 356.899888][ T9569] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 356.908646][ T9569] netlink: 'syz.3.503': attribute type 10 has an invalid length. [ 356.910642][ T9569] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 357.051411][ T9574] loop7: detected capacity change from 0 to 16384 [ 358.405881][ T9552] pimreg: entered allmulticast mode [ 358.561727][ T9574] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 0 [ 358.562203][ T9575] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 358.565774][ T9574] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 358.567320][ T9575] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 358.587662][ T9575] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 358.589951][ T9575] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 358.592083][ T9575] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 358.594141][ T9575] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 358.596048][ T9575] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 358.633296][ T9575] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 358.638472][ T9574] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 358.646366][ T9574] Buffer I/O error on dev loop7, logical block 480, async page read [ 358.658610][ T9575] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 358.660839][ T9575] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 358.686224][ T9575] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 48 prio class 0 [ 359.491310][ T9590] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 359.493453][ T9590] bridge0: port 3(netdevsim0) entered blocking state [ 359.495299][ T9590] bridge0: port 3(netdevsim0) entered disabled state [ 359.497191][ T9590] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 359.499602][ T9590] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 359.501739][ T9590] bridge0: port 3(netdevsim0) entered blocking state [ 359.503438][ T9590] bridge0: port 3(netdevsim0) entered forwarding state [ 359.814131][ T9575] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.822162][ T9575] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.834675][ T9575] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.847222][ T9575] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.849599][ T9575] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.852209][ T9575] ldm_validate_partition_table(): Disk read failed. [ 359.854336][ T9575] Dev loop7: unable to read RDB block 0 [ 359.885770][ T9575] loop7: unable to read partition table [ 359.889468][ T9575] loop_reread_partitions: partition scan of loop7 ( ) failed (rc=-5) [ 360.353364][ T9615] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 360.378554][ T9615] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 360.381752][ T9615] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 360.599688][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.510'. [ 362.931223][ T9646] netlink: 'syz.5.515': attribute type 10 has an invalid length. [ 362.933460][ T9646] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 362.935286][ T9646] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 362.959187][ T9646] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 362.967317][ T9646] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 362.972603][ T9646] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 364.390276][ T9677] Injecting memory failure for pfn 0x1429fe at process virtual address 0x400000ffe000 [ 365.043193][ T9677] Memory failure: 0x1429fe: Sending SIGBUS to syz.0.521:9677 due to hardware memory corruption [ 365.045925][ T9677] Memory failure: 0x1429fe: recovery action for dirty LRU page: Recovered [ 365.879524][ T27] kernel read not supported for file /dsp1 (pid: 27 comm: kworker/1:1) [ 366.110898][ T9696] wireguard0: entered promiscuous mode [ 366.112458][ T9696] wireguard0: entered allmulticast mode [ 368.664466][ T9746] netlink: 'syz.0.532': attribute type 10 has an invalid length. [ 370.614812][ T9767] sctp: [Deprecated]: syz.0.534 (pid 9767) Use of int in max_burst socket option deprecated. [ 370.614812][ T9767] Use struct sctp_assoc_value instead [ 371.386969][ T2364] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.388587][ T2364] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.905099][ T9771] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.906826][ T9771] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 372.052817][ T9771] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.054540][ T9771] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 372.169021][ T9771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.170629][ T9771] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 373.078958][ T6491] kernel read not supported for file /dsp1 (pid: 6491 comm: kworker/0:3) [ 374.822741][ T9808] netlink: 'syz.5.543': attribute type 10 has an invalid length. [ 375.224186][ T9827] siw: device registration error -23 [ 378.431369][ T9845] lo speed is unknown, defaulting to 1000 [ 378.432949][ T9845] lo speed is unknown, defaulting to 1000 [ 378.434708][ T9845] lo speed is unknown, defaulting to 1000 [ 378.438172][ T9845] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 378.536360][ T9845] lo speed is unknown, defaulting to 1000 [ 378.541481][ T9845] lo speed is unknown, defaulting to 1000 [ 378.546586][ T9845] lo speed is unknown, defaulting to 1000 [ 378.551475][ T9845] lo speed is unknown, defaulting to 1000 [ 378.556239][ T9845] lo speed is unknown, defaulting to 1000 [ 380.322440][ T9864] wireguard1: entered promiscuous mode [ 380.323830][ T9864] wireguard1: entered allmulticast mode [ 380.994551][ T9877] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 381.004366][ T9877] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 381.006321][ T9877] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 381.526876][ T1780] kernel read not supported for file /dsp1 (pid: 1780 comm: kworker/1:2) [ 384.211970][ T9911] netlink: 'syz.1.566': attribute type 10 has an invalid length. [ 384.214176][ T9911] netlink: 2 bytes leftover after parsing attributes in process `syz.1.566'. [ 384.216792][ T9911] bond0: entered promiscuous mode [ 384.218172][ T9911] bond_slave_0: entered promiscuous mode [ 384.220653][ T9911] bond_slave_1: entered promiscuous mode [ 384.223044][ T9911] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 384.226646][ T9911] bridge0: port 3(bond0) entered blocking state [ 384.228465][ T9911] bridge0: port 3(bond0) entered disabled state [ 384.230833][ T9911] bond0: entered allmulticast mode [ 384.232173][ T9911] bond_slave_0: entered allmulticast mode [ 384.233644][ T9911] bond_slave_1: entered allmulticast mode [ 384.235055][ T9911] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 384.237889][ T9911] bridge0: port 3(bond0) entered blocking state [ 384.239548][ T9911] bridge0: port 3(bond0) entered forwarding state [ 385.215527][ T9928] netlink: 'syz.1.571': attribute type 10 has an invalid length. [ 385.587414][ T9932] netlink: 'syz.0.570': attribute type 1 has an invalid length. [ 385.589530][ T9932] netlink: 1 bytes leftover after parsing attributes in process `syz.0.570'. [ 387.019833][ T9940] netlink: 'syz.5.573': attribute type 10 has an invalid length. [ 388.375872][ T9961] input: syz1 as /devices/virtual/input/input7 [ 388.940737][ T1780] kernel read not supported for file /dsp1 (pid: 1780 comm: kworker/1:2) [ 388.943109][ T1780] kernel read not supported for file /dsp1 (pid: 1780 comm: kworker/1:2) [ 389.385066][ T9965] sit0: left allmulticast mode [ 389.387243][ T9965] netlink: 'syz.5.577': attribute type 1 has an invalid length. [ 389.389306][ T9965] netlink: 1 bytes leftover after parsing attributes in process `syz.5.577'. [ 390.993089][ T9973] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 391.010211][ T9973] netlink: 'syz.0.582': attribute type 10 has an invalid length. [ 391.012240][ T9973] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 392.757313][T10003] sit0: entered promiscuous mode [ 393.190003][T10004] netlink: 'syz.5.587': attribute type 10 has an invalid length. [ 393.233059][T10003] netlink: 'syz.6.585': attribute type 1 has an invalid length. [ 393.235102][T10003] netlink: 1 bytes leftover after parsing attributes in process `syz.6.585'. [ 394.870468][T10022] sit0: entered promiscuous mode [ 394.943598][ T1780] kernel read not supported for file /dsp1 (pid: 1780 comm: kworker/1:2) [ 395.121652][T10022] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 395.123689][T10022] netlink: 1 bytes leftover after parsing attributes in process `syz.1.589'. [ 395.149819][T10026] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 395.156410][T10026] netlink: 'syz.0.594': attribute type 10 has an invalid length. [ 395.158468][T10026] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 396.441865][T10057] netlink: 'syz.5.602': attribute type 10 has an invalid length. [ 399.862260][ T6491] kernel read not supported for file /dsp1 (pid: 6491 comm: kworker/0:3) [ 400.155693][T10094] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 400.166902][T10094] netlink: 'syz.6.615': attribute type 10 has an invalid length. [ 400.168916][T10094] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 401.312656][T10109] 9pnet: Unknown protocol version 9p200 [ 401.315746][T10109] siw: device registration error -23 [ 402.116170][T10103] wireguard1: entered promiscuous mode [ 402.120530][T10103] wireguard1: entered allmulticast mode [ 405.372974][T10129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.557713][T10144] netlink: 'syz.1.623': attribute type 72 has an invalid length. [ 406.557753][T10144] netlink: 1016 bytes leftover after parsing attributes in process `syz.1.623'. [ 407.139074][T10149] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 407.188010][T10149] netlink: 'syz.0.627': attribute type 10 has an invalid length. [ 407.190219][T10149] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 407.768473][ T1780] kernel read not supported for file /dsp1 (pid: 1780 comm: kworker/1:2) [ 411.001106][T10190] siw: device registration error -23 [ 413.476642][T10206] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 413.493355][T10206] netlink: 'syz.6.640': attribute type 10 has an invalid length. [ 413.498625][T10206] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 417.130165][ T6491] kernel read not supported for file /dsp1 (pid: 6491 comm: kworker/0:3) [ 417.467746][T10249] netlink: 'syz.0.653': attribute type 10 has an invalid length. [ 419.144044][T10257] sit0: entered promiscuous mode [ 419.197231][T10257] netlink: 'syz.3.651': attribute type 1 has an invalid length. [ 419.199274][T10257] netlink: 1 bytes leftover after parsing attributes in process `syz.3.651'. [ 422.618489][ T6441] kernel read not supported for file /dsp1 (pid: 6441 comm: kworker/0:2) [ 422.840723][T10298] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 422.866135][T10298] netlink: 'syz.3.664': attribute type 10 has an invalid length. [ 422.868741][T10298] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 425.352854][T10323] netlink: 'syz.5.669': attribute type 1 has an invalid length. [ 425.354919][T10323] netlink: 1 bytes leftover after parsing attributes in process `syz.5.669'. [ 427.623932][ T6491] kernel read not supported for file /dsp1 (pid: 6491 comm: kworker/0:3) [ 428.176120][T10368] netlink: 'syz.5.683': attribute type 1 has an invalid length. [ 428.178159][T10368] netlink: 1 bytes leftover after parsing attributes in process `syz.5.683'. [ 430.536493][T10391] Injecting memory failure for pfn 0x13fffe at process virtual address 0x400000ffe000 [ 431.127187][T10391] Memory failure: 0x13fffe: Sending SIGBUS to syz.3.692:10391 due to hardware memory corruption [ 431.130228][T10391] Memory failure: 0x13fffe: recovery action for dirty LRU page: Recovered [ 431.539926][T10402] wireguard2: entered promiscuous mode [ 431.541766][T10402] wireguard2: entered allmulticast mode [ 431.780725][ T8] kernel read not supported for file /dsp1 (pid: 8 comm: kworker/0:0) [ 432.643718][ T2364] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.646113][ T2364] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.654299][T10450] wireguard2: entered promiscuous mode [ 433.655832][T10450] wireguard2: entered allmulticast mode [ 433.910262][ T1780] kernel read not supported for file /dsp1 (pid: 1780 comm: kworker/1:2) [ 436.480264][ T6491] kernel read not supported for file /dsp1 (pid: 6491 comm: kworker/0:3) [ 436.623517][T10500] netlink: 'syz.5.722': attribute type 10 has an invalid length. [ 438.066637][T10530] netlink: 'syz.1.734': attribute type 10 has an invalid length. [ 438.598935][ T8] kernel read not supported for file /dsp1 (pid: 8 comm: kworker/0:0) [ 438.714297][T10544] overlayfs: failed to resolve './file2': -2 [ 441.425103][T10573] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 441.430920][T10573] netlink: 'syz.3.745': attribute type 10 has an invalid length. [ 441.432870][T10573] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 442.011244][T10593] wireguard1: entered promiscuous mode [ 442.018163][T10593] wireguard1: entered allmulticast mode [ 442.129017][ T8] kernel read not supported for file /dsp1 (pid: 8 comm: kworker/0:0) [ 442.547349][T10602] wireguard2: entered promiscuous mode [ 442.548788][T10602] wireguard2: entered allmulticast mode [ 443.203414][T10611] netlink: 'syz.5.757': attribute type 10 has an invalid length. [ 445.360576][ T6441] kernel read not supported for file /dsp1 (pid: 6441 comm: kworker/0:2) [ 445.688607][T10651] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 445.714033][T10651] netlink: 'syz.6.769': attribute type 10 has an invalid length. [ 445.715652][T10652] netlink: 'syz.1.768': attribute type 10 has an invalid length. [ 445.716052][T10651] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 445.981508][T10660] netlink: 892 bytes leftover after parsing attributes in process `syz.1.773'. [ 446.242929][T10667] input: syz0 as /devices/virtual/input/input8 [ 447.276488][T10678] wireguard6: entered promiscuous mode [ 447.278006][T10678] wireguard6: entered allmulticast mode [ 448.241838][T10685] wireguard3: entered promiscuous mode [ 448.243303][T10685] wireguard3: entered allmulticast mode [ 448.492160][T10698] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 448.530451][T10698] netlink: 'syz.6.780': attribute type 10 has an invalid length. [ 448.542826][T10698] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 448.721573][T10704] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 448.862496][T10706] overlayfs: failed to resolve './file2': -2 [ 449.485911][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.506000][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.935131][ T6431] kernel read not supported for file /dsp1 (pid: 6431 comm: kworker/1:3) [ 451.928901][T10725] input: syz0 as /devices/virtual/input/input9 [ 454.114261][T10743] netlink: 'syz.6.793': attribute type 10 has an invalid length. [ 454.116346][T10743] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 454.132191][T10744] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 455.024392][T10754] overlayfs: failed to resolve './file2': -2 [ 456.014732][T10759] random: crng reseeded on system resumption [ 456.026646][T10759] Unable to handle kernel paging request at virtual address dfff80000000000d [ 456.046411][T10759] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 456.051028][T10759] Mem abort info: [ 456.051998][T10759] ESR = 0x0000000096000005 [ 456.055528][T10759] EC = 0x25: DABT (current EL), IL = 32 bits [ 456.063500][T10759] SET = 0, FnV = 0 [ 456.064435][T10759] EA = 0, S1PTW = 0 [ 456.085154][T10759] FSC = 0x05: level 1 translation fault [ 456.089538][T10759] Data abort info: [ 456.090476][T10759] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 456.094498][T10759] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 456.101991][T10759] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 456.106910][T10759] [dfff80000000000d] address between user and kernel address ranges [ 456.116006][T10759] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 456.117800][T10759] Modules linked in: [ 456.118732][T10759] CPU: 0 UID: 0 PID: 10759 Comm: syz.1.796 Not tainted 6.14.0-rc3-syzkaller-g6d206d3a6f6e #0 [ 456.121305][T10759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 456.123964][T10759] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 456.126005][T10759] pc : efivarfs_pm_notify+0xcc/0x350 [ 456.127285][T10759] lr : efivarfs_pm_notify+0x8c/0x350 [ 456.128597][T10759] sp : ffff80009c967260 [ 456.129619][T10759] x29: ffff80009c967300 x28: 0000000000000000 x27: 1fffe0001a135e71 [ 456.131725][T10759] x26: dfff800000000000 x25: ffff70001392ce4c x24: 0000000000000068 [ 456.133778][T10759] x23: ffff80009c967288 x22: 0000000000000005 x21: ffff80009c967280 [ 456.135851][T10759] x20: ffff80009c967260 x19: ffff0000d09af388 x18: ffff80009c966e00 [ 456.137912][T10759] x17: 0000000000041cbf x16: ffff8000832b5a70 x15: 0000000000000001 [ 456.140106][T10759] x14: 1fffe0001b37725f x13: 0000000000000000 x12: 0000000000000000 [ 456.142082][T10759] x11: 0000000000080000 x10: 0000000000025a89 x9 : ffff8000a395a000 [ 456.144139][T10759] x8 : 000000000000000d x7 : 0000000000000000 x6 : 0000000000000000 [ 456.146227][T10759] x5 : ffff800093a608a8 x4 : 0000000000000002 x3 : ffff80008b7495d0 [ 456.148328][T10759] x2 : 0000000000000000 x1 : 0000000000000005 x0 : ffff0000d09af3a8 [ 456.150478][T10759] Call trace: [ 456.151392][T10759] efivarfs_pm_notify+0xcc/0x350 (P) [ 456.152807][T10759] notifier_call_chain+0x1c4/0x550 [ 456.154079][T10759] blocking_notifier_call_chain_robust+0xdc/0x1bc [ 456.155738][T10759] pm_notifier_call_chain_robust+0x34/0x64 [ 456.157252][T10759] snapshot_open+0x11c/0x270 [ 456.158508][T10759] misc_open+0x2b8/0x328 [ 456.159730][T10759] chrdev_open+0x3b0/0x4bc [ 456.160847][T10759] do_dentry_open+0xb7c/0x1538 [ 456.162023][T10759] vfs_open+0x48/0x2d8 [ 456.163103][T10759] path_openat+0x2308/0x2b1c [ 456.164225][T10759] do_filp_open+0x1e8/0x404 [ 456.165363][T10759] do_sys_openat2+0x124/0x1b8 [ 456.166556][T10759] __arm64_sys_openat+0x1f0/0x240 [ 456.167837][T10759] invoke_syscall+0x98/0x2b8 [ 456.169015][T10759] el0_svc_common+0x130/0x23c [ 456.170253][T10759] do_el0_svc+0x48/0x58 [ 456.171357][T10759] el0_svc+0x54/0x168 [ 456.172305][T10759] el0t_64_sync_handler+0x84/0x108 [ 456.173611][T10759] el0t_64_sync+0x198/0x19c [ 456.174815][T10759] Code: f940027c 9100a297 9101a398 d343ff08 (387a6908) [ 456.176577][T10759] ---[ end trace 0000000000000000 ]--- [ 456.883806][T10759] Kernel panic - not syncing: Oops: Fatal exception [ 456.885578][T10759] SMP: stopping secondary CPUs [ 456.886891][T10759] Kernel Offset: disabled [ 456.888018][T10759] CPU features: 0x200,00002070,00800250,82017203 [ 456.889715][T10759] Memory Limit: none [ 457.547756][T10759] Rebooting in 86400 seconds..