last executing test programs: 7m57.281046372s ago: executing program 32 (id=176): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x982a, &(0x7f0000009b80)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) unlink(&(0x7f0000000180)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xc2) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0/file0\x00') 7m33.073154169s ago: executing program 33 (id=252): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 6m38.767441396s ago: executing program 5 (id=580): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x9a85, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) close(0x4) 6m38.347418452s ago: executing program 5 (id=593): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x8, 0x0, 0x5e, 0x0, 0xfffffffffffffffd}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r1) 6m37.029822822s ago: executing program 5 (id=596): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 6m33.91236371s ago: executing program 5 (id=604): read$msr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}]}, 0xfd, 0x269, &(0x7f0000000780)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1ca440, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x143042, 0x4) 6m33.053302073s ago: executing program 5 (id=611): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4be}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) 6m31.175856182s ago: executing program 5 (id=617): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 6m30.870731156s ago: executing program 34 (id=617): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 4m57.244529819s ago: executing program 4 (id=1198): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlockall(0x2) shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000) 4m56.278214484s ago: executing program 4 (id=1203): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4m53.690620514s ago: executing program 4 (id=1219): setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getpid() sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4m53.451404467s ago: executing program 4 (id=1221): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000200)=[{r1, 0x6600}, {r1, 0x200}], 0x2, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000000)=""/13, 0xd) 4m53.26044286s ago: executing program 4 (id=1222): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m52.995142724s ago: executing program 4 (id=1223): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)="68c8e4bc8e6569f85655cf3cd072d238c08b2abd0abb3e12889093c16add1c084ea3f26ba933", 0x26}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 4m42.143692901s ago: executing program 6 (id=1297): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 4m41.979245353s ago: executing program 6 (id=1298): r0 = syz_io_uring_setup(0x4325, &(0x7f00000002c0)={0x0, 0xb0ef, 0x800, 0x3, 0x386}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47bc, 0x0, 0x4, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) poll(0x0, 0x0, 0x80) writev(r2, 0x0, 0x0) 4m40.651365353s ago: executing program 6 (id=1310): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f0000000240)=[{}], 0x1, 0x100) close_range(r0, 0xffffffffffffffff, 0x0) 4m40.115459312s ago: executing program 6 (id=1316): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)={'a', ' *:* ', 'wm\x00'}, 0x9) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000000, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x6f) creat(&(0x7f0000000340)='./file0\x00', 0x101) 4m39.779329027s ago: executing program 6 (id=1321): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x1, 0x550d, &(0x7f00000079c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud++eNmwwDAP7YPl9pARECyhCEQGKAhabX0tINMYAiBj4CUpReS+iVP20GWlWILGwocxcEI0JIVGHrd+iIWqlL2TpkKBIzyD4756Yncfyzr83vJ71+H1uW3+e1pSiPXycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUdt+exFmxWRjHaXXs1v2r60V/e19fuLF9Z7loRZy0mfSj4cXmTrLUXSIAAAAcHFld30fE3XxntejThbL+z+tzipr/26fHcV3P76/7676u/Yv28/V7z+8NtDAep7jo2Y3R8NjDqfT+v1nOt2f+8oxeeefLdy9Z+UDS97ae283L+5l8ffPmO/0yPNRGtgDAP3G07qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBt2t+LJOk4iYrk3iX+5HnH7/tX1Yn9/f2P7znLdTl27th1fTq5ZXCKPiLMbo+Gx1mc0vy5dvnJ+bTQaXmw/eCkiuhr9rWr65z+Y4eSITu6P4D8K0uphz0s+j0bQ4Q8lAAAeS3nVirr+br6zWhxLFiP++O7B+v/VRhxT6v5p9f+9D0/dao7VrP8Hrc1w/q1sXvh05dLlK69vXFg7Nzw3/PiN44M3BydOnzx5eqV8V7LijQkAAAD/Tr9qzfo/XXx4/f9II44Z6//Pvhl80RwrU/9PNVn06zoTAACAg+3Zl3//LZlyPOn34/O1zc2Lg/F2b//4eNtBqn/boao16/9sseusAAAAgDbsbiUPrP+facQx4/r/U9+/8GPzmllEHK7W/4+ufzI609505lobf07c9RwBAADo1uGqNdf/8/L7/3Tvk4c0Il57ZRxX/wZwpvo/e/erH5pjNb//P9HeFOdSujS+H2W/FNFb6jojAAAAHmdPVK0o9n/Nd1Y/+unI+33f/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07c8AAAD//5tzQBk=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r4, 0x0, r3, &(0x7f00000000c0)=0x8010000, 0x400000, 0x0) copy_file_range(r2, 0x0, r1, &(0x7f00000000c0)=0x8010000, 0x400000, 0x0) 4m39.500807741s ago: executing program 6 (id=1324): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000440)="5cdd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4m39.229009515s ago: executing program 35 (id=1324): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000440)="5cdd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4m37.521306171s ago: executing program 36 (id=1223): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)="68c8e4bc8e6569f85655cf3cd072d238c08b2abd0abb3e12889093c16add1c084ea3f26ba933", 0x26}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 4m16.7334541s ago: executing program 1 (id=1420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000a80)={{r0}, "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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) 4m16.361828795s ago: executing program 1 (id=1423): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025cc", 0x94}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc02", 0x93}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m16.08727309s ago: executing program 1 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 4m15.943986492s ago: executing program 1 (id=1433): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}, 0xff03}], 0x1, 0x8000) recvmsg$unix(r1, 0x0, 0x40002004) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0xfffffffffffffffd) 4m15.817415014s ago: executing program 7 (id=1426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4m15.754869095s ago: executing program 1 (id=1427): mkdir(&(0x7f0000000040)='./file1\x00', 0x160) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 4m15.481937479s ago: executing program 7 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 4m15.298620162s ago: executing program 1 (id=1430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x74, 0x8, 0x0, 0xfffffffd}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) 4m15.290896742s ago: executing program 7 (id=1431): bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0)="09197ce259ce0c3bd6", &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 4m6.675505794s ago: executing program 7 (id=1468): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64, @ANYRESOCT], 0x1, 0x6e7, &(0x7f0000001a40)="$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") r0 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 4m6.322962349s ago: executing program 7 (id=1474): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 4m5.912533605s ago: executing program 7 (id=1475): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000380)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 4m5.551985661s ago: executing program 37 (id=1475): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000380)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 4m0.250699772s ago: executing program 38 (id=1430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x74, 0x8, 0x0, 0xfffffffd}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) 1m0.343318026s ago: executing program 9 (id=2259): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$eJzs28tvG8UfAPDv2nH76+uXUJVHH0CgICIeSZOW0gMHQCBxAAkJDuUYkrQKdRvUBIlWEQSEyhFV4o44IvEHIE5wQcAJqVe4o0oVyqWFk9Hau4nt2s6jTlzw5yNtMrM7zszXu2PP7GQD6FvD6Y8kYm9E/BYRg7VsY4Hh2q9by4tTfy0vTiVRqbz5Z1Itd3N5cSovmr9uT54ZiCh8msThFvXOX7p8brJcnrmY5ccWzr83Nn/p8jOz5yfPzpyduTBx6tSJ4+PPnZx4titxpnHdPPTh3JGDr7599fWp01ff+fmbJI+/KY4uGe508PFKpcvV9da+unQy0MOGsCHFWjeNUrX/D0YxVk/eYLzySU8bB2ypSqVSua/94aUK8B+WRK9bAPRG/kWfzn/zbZuGHneFGy/WJkBp3LeyrXZkIApZmVLT/LabhiPi9NLfX6ZbbM19CACABt+n45+nW43/ClF/X+j/2RrKUETcExH7I+JkRByIiHsjqmXvj4gHNlh/8yLJ7eOfwvVNBbZO6fjv+Wxtq3H8l4/+YqiY5fZV4y8lZ2bLM8ey92QkSjvT/HiHOn54+drn7Y7Vj//SLa0/Hwtm7bg+sLPxNdOTC5N3EnO9Gx9HHBpoFX+yshKQRMTBiDjU/s9c+7ZDHbNPfn2k3bG14++gC+tMla8inqid/6Voij+XdF6fHPtflGeOjeVXRbMX4pdfr7zRrv47ir8L0vO/u+X1vxL/UFK/Xju/8Tqu/P5Z2znNZq//HclbDfs+mFxYuDgesSN5rdbo+v0TTeUmVsun8Y8cbd3/98fqO3E4ItKL+MGIeCgiHs7a/khEPBoRRzvE/9NLj727ofhje8//9IbO/2piRzTvaZ0onvvxu4ZKh9aI/7bzf6KaGsn2rOfzbz3t2tzVDAAAAP8+hYjYG0lhdCVdKIyO1v6H/0DsLpTn5heeOjP3/oXp2jMCQ1Eq5He6Buvuh45n0/o8P9GUP57dN/6iuKuaH52aK0/3Onjoc3va9P/UH8Vetw7Ycp7Xgv6l/0P/0v+hf+n/0L9a9P9dvWgHsP1aff9/1IN2ANuvqf9b9oM+Yv4P/Uv/h/6l/0Nfmt8V2ZPwpVj7aXkJiTwRhbuiGRJblOj1JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB3/BMAAP//DqDnMg==") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80000000, 0x2000) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000140)={0x4}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c00000004000000000000000000000001020000", @ANYRES32, @ANYBLOB="f500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYBLOB="597ce5d7bc6c5e64c58ca2f2a1aa9dd2a20bb9bf1d2762b8c155ddb1fb4e8f4071ba824e281ba27b3146432240d14811e5f1077ce13ee493cac178834565bbf9ab354bce2ba5e6de16f7a8031b709be63984e05a408547947947db893e3555c9e419349358c88e94898a00c677249d81b8da517991bc73172fdf4cb43733bcbcfdb38dce4c6e905366df64ae0d7f205733f8e1e840e13502fca191318deefaba07fa1efb3f84371e248aaf6a48c9ed69138d7d3b43a9d26e59de43b441728c0b64647225e445d4bf6caed223de2a7bd971930dfc6ead551d46c0b3e8fa"], 0x1, 0x2f2, &(0x7f0000000b00)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji3pNDU1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpO4CU0iJ8PwmZw9x7eu9tB3LuhGHrzuvH+aylZfWyBKNKAiIi2yKjEhRPwD0GnTgiu72Qi0PfPv5/6+69G6l0empWqenU3KWkUmpk7N2TZzG32/qgbI4+2Pqa/LL59+a/Wz/nHuUslbNUoVhWupovfi7r86ahFnNWXlNqxjR0y1C5gmWU6u3FenvWLC4tVZVeWByOL5UMy1J6oaryRlWVi6pcqqrQQz1XUJqmqeG44CCZldlZPdVh8kKXJ4NjUiql9JCIxNpaMit9mRAAAOir1vo/KKqb9f/quY3y0O21Ebf+X4/41f+XP9Vfq6n+j4qIb/3vje9b/+uHq//bK6Kz5Uj1P06GsUjbqUAjrDWWUnrc/fl1vLy/Ou4E1P8AAAAAAAAAAAAAAAAAAAAAAPwJtm07Ydt2wjt6X4MiEhUR73uf1JCIXO3DlNFFR/j8cQo0HtwLj4iYryqZSqZ+dDtsiIgphoxLQn4414OrFntPHqmaUXlvLrv5y5VMyGlJZSXn5E9IYkBa8217+np6akLVNecPSHx3flIS8pd/frItf3C5konIhfO78jVJyIcFKYopi848GvnPJ5S6djPdMn7M6QcAAAAAwGmgqR2++3dN26u9nr+zv269PxBq7K/Hfff3Yfkv3N+1AwAAAABwVljVp3ndNI3SPkFMDu7TeRA+plf2Vvi7Wd7fMhzfSvcJvMGbmqLuya6/LYFDvC17BEHpJGusthp11FV4t4326iMzk737BJum8c+bt9+7N8SVtegBK+08CO1/AQz07BcQAAAAgJ5pFP3emcn+TggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDOoF/8mrd9rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6KXwEAAP//ziYEEA==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) 58.309953007s ago: executing program 9 (id=2266): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x6c}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 55.334142223s ago: executing program 9 (id=2274): socket(0x848000000015, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 54.611526654s ago: executing program 9 (id=2276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$hfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x1210081, &(0x7f0000000e00)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'iso8859-14'}}, {@part={'part', 0x3d, 0x4}}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@part={'part', 0x3d, 0x800}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x11, 0x323, &(0x7f0000000940)="$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") openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40400) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) 54.448368546s ago: executing program 9 (id=2278): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5f, 0x6a, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c014}, 0x801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 54.079366542s ago: executing program 9 (id=2283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000040)=""/48, &(0x7f0000000200)=0x30) 53.568543639s ago: executing program 39 (id=2283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000040)=""/48, &(0x7f0000000200)=0x30) 13.156724449s ago: executing program 0 (id=2400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) 13.156384358s ago: executing program 2 (id=2401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(0x0, 0x0, 0x0, 0x0) 11.71019469s ago: executing program 2 (id=2402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) 10.906971283s ago: executing program 0 (id=2403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) uname(0x0) 9.500020084s ago: executing program 0 (id=2404): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$MAP_CREATE(0x1100000000000000, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) read(r0, &(0x7f00000000c0)=""/175, 0x20) 8.345552772s ago: executing program 8 (id=2407): socket(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 7.20731803s ago: executing program 3 (id=2408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x4b6, r0}, 0x38) 7.206231039s ago: executing program 8 (id=2416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = io_uring_setup(0x1694, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x11a}, 0x20) 5.659397333s ago: executing program 3 (id=2409): rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) creat(&(0x7f0000000000)='./bus\x00', 0x8e) 5.659017243s ago: executing program 8 (id=2410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.307333859s ago: executing program 8 (id=2411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 5.301725228s ago: executing program 0 (id=2412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 5.007477983s ago: executing program 2 (id=2413): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") r0 = socket(0x11, 0x3, 0xfffffffc) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000700)=0xe9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) dup2(r0, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000440)=0x2, 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './bus', [], 0xa, 'v'}, 0xa) 4.112037307s ago: executing program 8 (id=2414): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7a, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x5, &(0x7f0000000380)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x6b, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)="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", 0x3a4}, {&(0x7f00000004c0)="fb70e0bb4af508a8bd7743c9344ef15990ba23198065c127d2eeeb5cd492da09df6dd06b83228c0bd791a8d22f55fd7195dcab7979585ccace85d9", 0x3b}], 0x2}}], 0x1, 0x40000d0) 4.110785327s ago: executing program 3 (id=2423): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(0xffffffffffffffff) 3.93706641s ago: executing program 2 (id=2415): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 3.868469581s ago: executing program 0 (id=2417): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) pivot_root(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, r4, 0x0) 2.657228909s ago: executing program 3 (id=2418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) 1.529524447s ago: executing program 3 (id=2419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x609c}}]}]}}]}, 0x44}}, 0xc0) 353.628194ms ago: executing program 8 (id=2420): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/204, 0x0, 0xcc, 0x1}, 0x28) write$bt_hci(0xffffffffffffffff, 0x0, 0xa) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) 254.807236ms ago: executing program 2 (id=2421): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001b80)={&(0x7f0000001ac0), 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)=@getsadinfo={0x2c, 0x23, 0x1, 0x0, 0x0, 0x0, [@proto={0x25}, @replay_val={0x10}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000000), 0x1, 0x78a, &(0x7f0000000800)="$eJzs3c1rXFUbAPDnTvPRN+37JoUXtCIYEDRQOjE1tgouKi5EsVDQte04mYaaSaZkJqUJAS0quBFUXAi66dqPunPrx1Y3/g2CpaVqWqy40MidzDTTZpJM0mSmNb8fXOace8/MOc+c+3Hu3MvcAHaswYhIImJ/RLyXRPTX5qfzuquproijS+VuLMzn0ymJxcWXfk2qZa4vzOej4T2pPbXM/RHx7dsRBzIr6y3Pzk3kisXCdC0/XJk8M1yenTt4ejI3XhgvTB0eGR09dOSJI4e3Ltbff5jbe+X95x794uifb9538d3vkjgae2vLGuPYKoMxWPtOutOv8BbPbnVlHZZ0ugFsWrK0lcf+6I9d1RQA8G/2ekQsAgA7TOL4DwA7TP13gOsL8/n61NlfJNrr6jMRsXsp/vr1zaUlXbVrdrur10H7rie3XBlJImJgC+ofjIhPvnrls3SKbboOCdDMG+cj4uTA4Mr9f7LinoWNeqyFMoO35e3/oH2+Tsc/TzYb/2Vujn+iyfint8m2uxnrb/+Zy1tQzarS8d/TDfe23WiIv2ZgVy333+qYrzs5dbpYSPdt/4uIoejuTfMja9QxdO2va6staxz//fbBa5+m9aevyyUyl7t6b33PWK6Su5OYG109H/FAV7P4k5v9n6wy/j2+zmf//eOlV9PX55965+PVyqTxp/HWp5Xxb6/FCxGPNO3/5TvakjXvTxyurg7D9ZWiiS9/+qhvX6n5ssb+T6e0/vq5QDuk/d+3Rvz50RhIGu/XLG+8ju8v9H+z2rL142++/vckL1fTPbV553KVyvRIRE/y4sr5h5bfW8/Xy6fxDz3cfPtfa/1PzwlPthh/15VfPt98/NsrjX9s7fX/tv7feOLijYldq9XfWv+PVlNDtTmt7P9abeCdfHcAAAAAAAAAAAAAAAAAAAAAAAAA0KpMROyNJJO9mc5kstme6jO8/x99mWKpXDlwqjQzNRbVZ2UPRHem/leX/Q3/hzpS+z/8ev7QbfnHI2JfRHzY+59qPpsvFcc6HTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1Oxp+vz/pWWXejvdOgBg2+zudAMAgLZb5/j/4As/v9WupgAAbeL8HwB2Hsd/ANh5Nn38n3toaxsCALSN838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC22fFjx9Jp8Y+F+XyaHzs7OzNROntwrFCeyE7O5LP50vSZ7HipNF4sZPOlyfU+r1gqnRmNqZlzw5VCuTJcnp07MVmamaqcOD2ZGy+cKHS3JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Jjy7NxErlgsTEusTGTujma0kIi7oxkS93iif3lOp/dMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPeGfwIAAP//FY8vow==") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 172.120157ms ago: executing program 3 (id=2422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 163.376217ms ago: executing program 0 (id=2424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 0s ago: executing program 2 (id=2425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 342.212454][T10915] loop7: detected capacity change from 0 to 8 [ 342.214213][T10799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.239457][T10799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.253170][T10799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.275923][T10799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.291893][T10799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.327603][T10799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.364380][T10799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.394883][T10799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.433775][T10799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.495790][T10799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.552497][T10799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.569101][T10799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.587309][T10799] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.596265][T10799] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.605193][T10799] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.651605][T10799] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.830747][T10925] SQUASHFS error: xz decompression failed, data probably corrupt [ 342.916101][T10925] SQUASHFS error: Failed to read block 0xa8: -5 [ 342.966593][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.979434][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.013006][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.019848][T10925] SQUASHFS error: xz decompression failed, data probably corrupt [ 343.028569][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.033594][T10925] SQUASHFS error: Failed to read block 0xa8: -5 [ 343.043708][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 343.043723][ T28] audit: type=1800 audit(1750798667.956:235): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1326" name="file0" dev="loop7" ino=3 res=0 errno=0 [ 344.971416][T10937] loop8: detected capacity change from 0 to 32768 [ 345.005640][T10937] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.1331 (10937) [ 345.050740][T10937] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 345.075346][T10937] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 345.101137][T10937] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 345.119575][T10937] BTRFS info (device loop8): use zstd compression, level 3 [ 345.132776][T10937] BTRFS info (device loop8): using free space tree [ 345.189774][T10937] BTRFS info (device loop8): enabling ssd optimizations [ 345.197056][T10937] BTRFS info (device loop8): auto enabling async discard [ 345.232058][ T28] audit: type=1800 audit(1750798670.146:236): pid=10937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1331" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 345.525526][T10799] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 346.602833][T11011] tipc: Enabling of bearer rejected, failed to enable media [ 346.951548][T11020] sit1: entered promiscuous mode [ 347.038222][T11021] loop7: detected capacity change from 0 to 1024 [ 347.047713][T11023] loop1: detected capacity change from 0 to 512 [ 347.115480][T11023] EXT4-fs error (device loop1): __ext4_iget:5047: inode #14: block 1886221359: comm syz.1.1386: invalid block [ 347.164977][T11023] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1386: couldn't read orphan inode 14 (err -117) [ 347.216128][T11023] EXT4-fs (loop1): mounted filesystem 07000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.264569][T11023] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.323436][T11032] netlink: 'syz.8.1389': attribute type 7 has an invalid length. [ 347.344234][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1389'. [ 347.368933][T11033] overlayfs: failed to clone upperpath [ 347.947191][ T5773] EXT4-fs (loop1): unmounting filesystem 07000000-0000-0000-0000-000000000000. [ 349.016280][T11059] kvm: pic: non byte write [ 349.213271][T11074] input: syz1 as /devices/virtual/input/input13 [ 351.145920][T11099] sit1: entered promiscuous mode [ 351.219976][T11099] loop1: detected capacity change from 0 to 1024 [ 351.343208][ T5784] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 351.692072][T11104] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.869127][T11111] loop1: detected capacity change from 0 to 16 [ 351.944069][T11111] erofs: (device loop1): mounted with root inode @ nid 36. [ 352.648759][T11104] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.865729][T11104] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.167112][T11104] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.406911][T11104] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.429556][T11104] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.447960][T11104] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.471623][T11104] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.114560][T11149] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.122572][T11149] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.155688][T11149] bridge0: entered allmulticast mode [ 354.185202][T11150] bridge_slave_1: left allmulticast mode [ 354.208724][T11150] bridge_slave_1: left promiscuous mode [ 354.228569][T11150] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.258592][T11150] bridge_slave_0: left allmulticast mode [ 354.273219][T11150] bridge_slave_0: left promiscuous mode [ 354.288848][T11150] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.474703][T11156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1436'. [ 354.562213][T11157] netlink: 1268 bytes leftover after parsing attributes in process `syz.8.1435'. [ 360.099851][T11217] loop8: detected capacity change from 0 to 512 [ 360.110581][T11217] EXT4-fs (loop8): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 360.120854][T11217] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 360.132970][T11217] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 360.142294][T11217] EXT4-fs (loop8): Couldn't mount because of unsupported optional features (fffc1829) [ 360.152098][T11217] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 360.211854][T11217] loop8: detected capacity change from 0 to 1024 [ 360.219754][T11217] EXT4-fs: Ignoring removed nomblk_io_submit option [ 360.228260][T11217] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 360.240775][T11217] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 360.256088][T11217] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 360.268560][T11217] System zones: 0-1, 3-36 [ 360.278205][T11217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.333417][T10799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.423759][T11222] overlayfs: failed to clone lowerpath [ 360.432316][T11222] overlayfs: failed to clone upperpath [ 361.773788][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'. [ 361.780762][T11231] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 362.138838][T11245] netlink: 540 bytes leftover after parsing attributes in process `syz.8.1466'. [ 362.754009][T11252] loop7: detected capacity change from 0 to 1024 [ 363.398993][T11263] loop8: detected capacity change from 0 to 40427 [ 363.434497][T11263] F2FS-fs (loop8): heap/no_heap options were deprecated [ 363.461087][T11263] F2FS-fs (loop8): invalid crc value [ 363.466518][ T2947] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.506234][T11263] F2FS-fs (loop8): Found nat_bits in checkpoint [ 363.564406][ T2947] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.578413][T11263] F2FS-fs (loop8): Start checkpoint disabled! [ 363.634437][T11263] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 363.652657][ T2947] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.794555][ T2947] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.939872][T11189] kworker/u4:5: attempt to access beyond end of device [ 363.939872][T11189] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 363.993852][T11189] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 364.480607][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.498416][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.521366][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.531162][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.544071][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 364.551780][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.726805][T11279] syz.8.1480[11279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.726949][T11279] syz.8.1480[11279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.459404][T11270] chnl_net:caif_netlink_parms(): no params data found [ 365.792704][T11270] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.800789][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.826135][T11270] bridge_slave_0: entered allmulticast mode [ 365.833712][T11270] bridge_slave_0: entered promiscuous mode [ 365.846566][ T2947] hsr_slave_0: left promiscuous mode [ 365.854514][ T2947] hsr_slave_1: left promiscuous mode [ 365.862371][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.881012][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.892657][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.906732][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.969583][ T2947] veth1_macvtap: left promiscuous mode [ 365.975416][ T2947] veth0_macvtap: left promiscuous mode [ 365.983487][ T2947] veth1_vlan: left promiscuous mode [ 365.993106][ T2947] veth0_vlan: left promiscuous mode [ 366.705580][ T5784] Bluetooth: hci2: command tx timeout [ 367.890503][ T2947] team0 (unregistering): Port device team_slave_1 removed [ 367.983177][ T2947] team0 (unregistering): Port device team_slave_0 removed [ 368.077649][ T2947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.167135][ T2947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.195531][ T28] audit: type=1326 audit(1750798693.106:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.2.1493" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5b918e929 code=0x0 [ 368.732725][ T5784] Bluetooth: hci2: command tx timeout [ 369.083352][ T2947] bond0 (unregistering): Released all slaves [ 369.472099][T11270] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.597223][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.719503][T11270] bridge_slave_1: entered allmulticast mode [ 369.877080][T11270] bridge_slave_1: entered promiscuous mode [ 370.151517][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1488'. [ 370.319364][T11270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.374667][T11270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.519739][T11270] team0: Port device team_slave_0 added [ 370.595261][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.624936][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.634616][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.646945][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.657659][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 370.665429][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.696445][T11270] team0: Port device team_slave_1 added [ 370.826255][ T5784] Bluetooth: hci2: command tx timeout [ 370.841680][T11270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.849471][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.880584][T11270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.915103][T11270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.935611][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.012332][T11270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.123814][T11270] hsr_slave_0: entered promiscuous mode [ 371.141246][T11270] hsr_slave_1: entered promiscuous mode [ 371.151477][T11270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.161550][T11270] Cannot create hsr debugfs directory [ 371.194980][T11343] syz_tun: entered allmulticast mode [ 371.312074][T11342] syz_tun: left allmulticast mode [ 371.650622][T11345] loop8: detected capacity change from 0 to 32768 [ 371.692215][T11345] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.1503 (11345) [ 371.693494][T11270] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 371.716420][T11270] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 371.740766][T11270] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 371.743865][T11345] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 371.763702][T11270] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 371.764987][T11345] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 371.782647][T11345] BTRFS info (device loop8): force zlib compression, level 3 [ 371.790369][T11331] chnl_net:caif_netlink_parms(): no params data found [ 371.794304][T11345] BTRFS info (device loop8): force clearing of disk cache [ 371.807329][T11345] BTRFS info (device loop8): setting nodatasum [ 371.813562][T11345] BTRFS info (device loop8): use zlib compression, level 3 [ 371.821373][T11345] BTRFS info (device loop8): allowing degraded mounts [ 371.828926][T11345] BTRFS info (device loop8): enabling disk space caching [ 371.837074][T11345] BTRFS info (device loop8): disk space caching is enabled [ 371.887303][T11345] BTRFS info (device loop8): enabling ssd optimizations [ 371.894496][T11345] BTRFS info (device loop8): auto enabling async discard [ 371.905953][T11345] BTRFS info (device loop8): rebuilding free space tree [ 371.932043][T11345] BTRFS info (device loop8): disabling free space tree [ 371.943476][T11345] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 371.957269][T11345] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 372.036586][T11331] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.054291][T11331] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.061626][T11331] bridge_slave_0: entered allmulticast mode [ 372.077801][T11331] bridge_slave_0: entered promiscuous mode [ 372.107129][T11331] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.124384][T11331] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.132278][T11331] bridge_slave_1: entered allmulticast mode [ 372.158185][T11331] bridge_slave_1: entered promiscuous mode [ 372.242583][T11331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.277622][T11331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.348950][T10799] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 372.417558][T11331] team0: Port device team_slave_0 added [ 372.468286][T11270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.490532][T11331] team0: Port device team_slave_1 added [ 372.586729][T11331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.593745][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.639374][T11331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.686322][T11331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.693586][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.724596][ T5784] Bluetooth: hci1: command tx timeout [ 372.759423][T11331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.798043][T11270] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.895210][ T5784] Bluetooth: hci2: command tx timeout [ 372.917111][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.924443][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.973045][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.980580][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.016798][T11331] hsr_slave_0: entered promiscuous mode [ 373.036501][T11331] hsr_slave_1: entered promiscuous mode [ 373.047824][T11331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.064351][T11331] Cannot create hsr debugfs directory [ 373.538130][T11270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.630269][T11270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.804425][ T5784] Bluetooth: hci1: command tx timeout [ 376.254885][ T28] audit: type=1326 audit(1750798701.166:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.8.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 376.326553][ T28] audit: type=1326 audit(1750798701.166:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.8.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 376.394479][ T28] audit: type=1326 audit(1750798701.196:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.8.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 376.459710][ T28] audit: type=1326 audit(1750798701.196:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.8.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 376.500717][ T28] audit: type=1326 audit(1750798701.196:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.8.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 376.544216][ T28] audit: type=1326 audit(1750798701.196:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.8.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 376.585711][T11270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.642071][ T28] audit: type=1326 audit(1750798701.196:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.8.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 376.661960][T11427] loop8: detected capacity change from 0 to 2048 [ 376.738714][ T28] audit: type=1326 audit(1750798701.206:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.8.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 376.794317][ T28] audit: type=1326 audit(1750798701.206:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.8.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 376.836601][T11431] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.852682][ T28] audit: type=1326 audit(1750798701.206:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.8.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 376.884833][ T5784] Bluetooth: hci1: command tx timeout [ 377.642815][T11331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.665575][T11331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 377.690662][T11331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.703336][T11331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.824669][T11270] veth0_vlan: entered promiscuous mode [ 377.861515][T11270] veth1_vlan: entered promiscuous mode [ 377.949325][T11270] veth0_macvtap: entered promiscuous mode [ 377.972103][T11270] veth1_macvtap: entered promiscuous mode [ 377.999626][T11331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.039633][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.052126][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.063529][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.074356][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.094203][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.122704][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.157036][T11270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.191960][T11331] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.201597][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.223355][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.248230][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.260073][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.271428][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.294351][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.310365][T11467] overlayfs: failed to clone upperpath [ 378.316670][T11270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.368789][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.376185][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.399825][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.408721][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.467199][T11270] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.504320][T11270] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.524226][T11270] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.533002][T11270] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.857418][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.899130][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.971303][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.973048][ T5784] Bluetooth: hci1: command tx timeout [ 378.985355][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.031762][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.063493][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.443366][T11331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.671842][T11331] veth0_vlan: entered promiscuous mode [ 379.731874][T11331] veth1_vlan: entered promiscuous mode [ 379.879761][T11331] veth0_macvtap: entered promiscuous mode [ 379.896594][T11331] veth1_macvtap: entered promiscuous mode [ 379.941965][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.984179][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.022661][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.040942][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.067447][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.104400][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.127191][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.144129][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.166000][T11331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.219493][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.250271][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.267685][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.284305][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.301506][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.325325][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.343062][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.356030][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.396266][T11331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.408658][T11525] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1532'. [ 380.460135][T11331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.494153][T11331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.502932][T11331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.553425][T11331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.927037][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.972654][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.155575][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.163470][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.624262][T11566] loop9: detected capacity change from 0 to 256 [ 382.638332][T11566] exfat: Deprecated parameter 'utf8' [ 382.644030][T11566] exfat: Deprecated parameter 'utf8' [ 382.866115][T11566] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 383.571556][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 383.571574][ T28] audit: type=1326 audit(1750798708.476:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.8.1541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x0 [ 384.867627][T11593] loop9: detected capacity change from 0 to 128 [ 384.970785][T11593] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.037002][T11593] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.108810][T11606] netlink: 'syz.8.1549': attribute type 9 has an invalid length. [ 385.117821][T11606] netlink: 'syz.8.1549': attribute type 7 has an invalid length. [ 385.126233][T11606] netlink: 'syz.8.1549': attribute type 8 has an invalid length. [ 385.297834][T11270] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.421137][T11615] loop3: detected capacity change from 0 to 2048 [ 385.502397][T11615] loop3: p1 < > p3 [ 385.525690][T11615] loop3: p3 size 134217728 extends beyond EOD, truncated [ 385.545245][T11623] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1552'. [ 385.579283][T11619] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1552'. [ 386.061464][T11641] netlink: 'syz.2.1559': attribute type 11 has an invalid length. [ 386.810133][T11667] 9pnet: p9_errstr2errno: server reported unknown error @΂0x0000000000000007 [ 386.934824][T11672] syzkaller0: entered promiscuous mode [ 386.957515][T11672] syzkaller0 (unregistering): left promiscuous mode [ 387.575772][T11682] loop3: detected capacity change from 0 to 8192 [ 387.732074][T11682] loop3: p1 p3 p4 [ 387.743758][T11682] loop3: p1 size 8390912 extends beyond EOD, truncated [ 387.781591][T11682] loop3: p3 size 589824 extends beyond EOD, truncated [ 388.039565][T11713] sp0: Synchronizing with TNC [ 388.836022][T11709] [U] [ 389.767606][ T5784] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 389.779940][ T5784] Bluetooth: hci1: Injecting HCI hardware error event [ 389.804002][ T5788] Bluetooth: hci1: hardware error 0x00 [ 392.344371][ T5849] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 392.534592][ T5849] usb 10-1: Using ep0 maxpacket: 32 [ 392.628008][ T5849] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 392.643414][ T5849] usb 10-1: config 0 has no interface number 0 [ 392.650708][ T5849] usb 10-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 392.662909][ T5849] usb 10-1: config 0 interface 1 has no altsetting 0 [ 392.730190][ T5849] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 392.740609][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.748936][ T5849] usb 10-1: Product: syz [ 392.753548][ T5849] usb 10-1: Manufacturer: syz [ 392.758357][ T5849] usb 10-1: SerialNumber: syz [ 392.802035][ T5849] usb 10-1: config 0 descriptor?? [ 392.864199][ T5788] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 393.096532][ T5849] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 393.122862][ T5849] cx231xx 10-1:0.1: Failed to read PCB config [ 393.150268][ T5849] cx231xx: probe of 10-1:0.1 failed with error -71 [ 393.178477][ T5849] usb 10-1: USB disconnect, device number 2 [ 393.185297][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1593'. [ 393.212403][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1593'. [ 393.754221][ T5849] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 393.954225][ T5849] usb 10-1: Using ep0 maxpacket: 32 [ 393.967966][ T5849] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.976396][ T5849] usb 10-1: config 0 has no interface number 0 [ 393.983016][ T5849] usb 10-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 393.993875][ T5849] usb 10-1: config 0 interface 1 has no altsetting 0 [ 394.016600][ T5849] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 394.025868][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.033953][ T5849] usb 10-1: Product: syz [ 394.048497][ T5849] usb 10-1: Manufacturer: syz [ 394.064254][ T5849] usb 10-1: SerialNumber: syz [ 394.095302][ T5849] usb 10-1: config 0 descriptor?? [ 394.365037][ T5849] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 394.414386][ T5849] cx231xx 10-1:0.1: bad scenario!!!!! [ 394.414386][ T5849] config_info=0 [ 394.443849][ T5849] cx231xx 10-1:0.1: Failed to read PCB config [ 394.742888][ T5808] usb 10-1: USB disconnect, device number 3 [ 395.623192][T11806] macvlan2: entered promiscuous mode [ 395.650671][T11806] macvlan2: entered allmulticast mode [ 395.674336][T11806] batadv0: entered promiscuous mode [ 395.692473][T11806] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 395.717814][T11806] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 396.429804][T11833] netlink: 'syz.8.1614': attribute type 4 has an invalid length. [ 396.514912][T11836] netlink: 'syz.8.1614': attribute type 4 has an invalid length. [ 396.766117][T11847] loop9: detected capacity change from 0 to 512 [ 396.794038][T11847] EXT4-fs: Ignoring removed nobh option [ 396.801342][T11847] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 396.869978][T11847] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1617: invalid indirect mapped block 256 (level 2) [ 396.974039][T11847] EXT4-fs (loop9): 2 truncates cleaned up [ 397.009793][T11847] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.906689][T11270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.875022][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 400.970040][T11890] loop3: detected capacity change from 0 to 512 [ 401.053298][T11890] EXT4-fs (loop3): 1 truncate cleaned up [ 401.063295][T11890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.357261][T11331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.908557][T11916] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 402.088222][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 402.489929][T11930] syz_tun: entered promiscuous mode [ 402.525642][T11930] vlan2: entered promiscuous mode [ 404.101848][ T28] audit: type=1326 audit(1750798729.016:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11944 comm="syz.8.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7fc00000 [ 404.716188][T11959] loop3: detected capacity change from 0 to 2048 [ 404.730945][ T28] audit: type=1326 audit(1750798729.646:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11944 comm="syz.8.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd024b8e929 code=0x7fc00000 [ 404.757429][T11959] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 404.799203][T11959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.155719][T11973] ptrace attach of "./syz-executor exec"[10799] was attempted by "  GPL            m [ 405.286063][ T5788] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 405.391355][ T5788] Bluetooth: hci3: Injecting HCI hardware error event [ 405.401859][ T5784] Bluetooth: hci3: hardware error 0x00 [ 405.692180][T11985] netlink: 'syz.8.1648': attribute type 1 has an invalid length. [ 405.724451][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1648'. [ 406.060379][T11996] loop3: detected capacity change from 0 to 128 [ 406.105747][T11996] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 406.174363][T11996] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 406.386478][T11331] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.563370][T12010] netlink: 'syz.3.1654': attribute type 10 has an invalid length. [ 406.675984][T12010] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 406.812613][T12021] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1656'. [ 407.182133][T12028] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 407.444750][ T5784] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 407.784326][ T28] audit: type=1326 audit(1750798732.686:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.8.1661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x0 [ 408.291681][T12054] loop9: detected capacity change from 0 to 8192 [ 409.672784][T12092] syz_tun: entered allmulticast mode [ 409.894750][ T8] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 410.094807][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 410.105733][ T8] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 410.120067][ T8] usb 10-1: config 0 has no interface number 0 [ 410.135537][ T8] usb 10-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 410.166870][ T8] usb 10-1: config 0 interface 1 has no altsetting 0 [ 410.191560][ T8] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 410.214453][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.232891][ T8] usb 10-1: Product: syz [ 410.243022][ T8] usb 10-1: Manufacturer: syz [ 410.263294][ T8] usb 10-1: SerialNumber: syz [ 410.274695][ T8] usb 10-1: config 0 descriptor?? [ 410.506482][ T8] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 410.545791][ T8] cx231xx 10-1:0.1: Failed to read PCB config [ 410.552013][ T8] cx231xx: probe of 10-1:0.1 failed with error -71 [ 410.574390][ T8] usb 10-1: USB disconnect, device number 4 [ 411.194388][ T8] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 411.454482][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 411.515422][ T8] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.523587][ T8] usb 10-1: config 0 has no interface number 0 [ 411.545328][ T8] usb 10-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 411.568647][ T8] usb 10-1: config 0 interface 1 has no altsetting 0 [ 411.578290][ T8] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 411.588532][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.599614][ T8] usb 10-1: Product: syz [ 411.603913][ T8] usb 10-1: Manufacturer: syz [ 411.624905][ T8] usb 10-1: SerialNumber: syz [ 411.655344][ T8] usb 10-1: config 0 descriptor?? [ 411.881726][ T8] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 411.901485][ T8] cx231xx 10-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 412.025084][ T8] cx231xx 10-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 412.037079][ T8] cx231xx 10-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 412.051402][ T8] cx231xx 10-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 412.069088][ T8] cx231xx 10-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 412.092416][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d646800: rx timeout, send abort [ 412.103134][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d646800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 412.125267][ T8] cx231xx 10-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 412.133255][ T8] cx231xx 10-1:0.1: Failed to set devmode to analog: error: -71 [ 412.195417][ T8] i2c i2c-2: Added multiplexed i2c bus 4 [ 412.219670][ T8] i2c i2c-2: Added multiplexed i2c bus 5 [ 412.236457][ T8] cx231xx 10-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 412.253206][ T8] cx231xx 10-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 412.306501][ T8] cx231xx: probe of 10-1:0.1 failed with error -71 [ 412.334550][ T8] usb 10-1: USB disconnect, device number 5 [ 413.171800][T12206] loop3: detected capacity change from 0 to 512 [ 413.203226][T12206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.217335][T12206] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.329226][T11331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.139128][ T28] audit: type=1326 audit(1750798739.056:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7fc00000 [ 414.202114][ T28] audit: type=1326 audit(1750798739.056:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb5b918e929 code=0x7fc00000 [ 414.305745][ T28] audit: type=1326 audit(1750798739.056:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7fc00000 [ 414.336906][ T28] audit: type=1326 audit(1750798739.056:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7fc00000 [ 414.376090][T12249] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 414.384217][ T28] audit: type=1326 audit(1750798739.056:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7fc00000 [ 414.440922][ T28] audit: type=1326 audit(1750798739.056:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7fc00000 [ 414.589959][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1706'. [ 414.803905][T12270] xt_hashlimit: max too large, truncated to 1048576 [ 414.871488][T12270] xt_limit: Overflow, try lower: 0/0 [ 414.924571][T12262] loop9: detected capacity change from 0 to 1024 [ 415.463923][T12262] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 415.571631][T12262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.673440][T12262] EXT4-fs error (device loop9): ext4_xattr_inode_iget:440: inode #11: comm syz.9.1708: missing EA_INODE flag [ 415.808812][T12262] EXT4-fs (loop9): Remounting filesystem read-only [ 416.017521][T11270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.258616][T12290] syz.8.1713: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 417.278445][T12290] CPU: 0 PID: 12290 Comm: syz.8.1713 Not tainted 6.6.94-syzkaller #0 [ 417.286532][T12290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 417.296701][T12290] Call Trace: [ 417.300006][T12290] [ 417.302949][T12290] dump_stack_lvl+0x16c/0x230 [ 417.307659][T12290] ? show_regs_print_info+0x20/0x20 [ 417.312878][T12290] ? load_image+0x3b0/0x3b0 [ 417.317401][T12290] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 417.324003][T12290] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 417.330530][T12290] warn_alloc+0x210/0x300 [ 417.334885][T12290] ? zone_watermark_ok_safe+0x230/0x230 [ 417.340455][T12290] ? _raw_spin_unlock+0x28/0x40 [ 417.345337][T12290] ? __kasan_kmalloc+0x8f/0xa0 [ 417.350157][T12290] __vmalloc_node_range+0x662/0x1320 [ 417.355471][T12290] ? __asan_memset+0x22/0x40 [ 417.360108][T12290] ? free_vm_area+0x50/0x50 [ 417.364644][T12290] ? kvmalloc_node+0x70/0x180 [ 417.369397][T12290] ? rcu_is_watching+0x15/0xb0 [ 417.374190][T12290] ? kvmalloc_node+0x70/0x180 [ 417.378910][T12290] ? trace_kmalloc+0x1f/0xa0 [ 417.383513][T12290] kvmalloc_node+0x13f/0x180 [ 417.388128][T12290] ? hash_ipportnet_create+0x361/0xff0 [ 417.393606][T12290] hash_ipportnet_create+0x361/0xff0 [ 417.398924][T12290] ? __lock_acquire+0x7c80/0x7c80 [ 417.404274][T12290] ? __nla_parse+0x40/0x50 [ 417.408724][T12290] ? hash_ipportip6_gc+0x5b0/0x5b0 [ 417.413937][T12290] ip_set_create+0xa87/0x18e0 [ 417.418637][T12290] ? ip_set_create+0x4b2/0x18e0 [ 417.423506][T12290] ? ip_set_protocol+0x5d0/0x5d0 [ 417.428584][T12290] nfnetlink_rcv_msg+0xb49/0x1130 [ 417.433630][T12290] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.439725][T12290] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 417.444963][T12290] ? nfnetlink_unbind+0x160/0x160 [ 417.450083][T12290] ? __dev_queue_xmit+0x1a64/0x35a0 [ 417.455302][T12290] ? __netlink_deliver_tap+0x5ab/0x830 [ 417.460779][T12290] ? netlink_deliver_tap+0x19c/0x1b0 [ 417.466089][T12290] ? netlink_unicast+0x72b/0x8c0 [ 417.471044][T12290] ? netlink_sendmsg+0x8c1/0xbe0 [ 417.476043][T12290] ? ____sys_sendmsg+0x5bf/0x950 [ 417.480997][T12290] ? ___sys_sendmsg+0x220/0x290 [ 417.485857][T12290] ? __se_sys_sendmsg+0x1a5/0x270 [ 417.490981][T12290] ? do_syscall_64+0x55/0xb0 [ 417.495608][T12290] netlink_rcv_skb+0x216/0x480 [ 417.500403][T12290] ? nfnetlink_unbind+0x160/0x160 [ 417.505460][T12290] ? netlink_ack+0x1110/0x1110 [ 417.510308][T12290] ? apparmor_capable+0x137/0x1a0 [ 417.515363][T12290] ? bpf_lsm_capable+0x9/0x10 [ 417.520058][T12290] ? security_capable+0x89/0xb0 [ 417.524934][T12290] nfnetlink_rcv+0x274/0x2180 [ 417.529650][T12290] ? __local_bh_enable_ip+0x12e/0x1c0 [ 417.535053][T12290] ? lockdep_hardirqs_on+0x98/0x150 [ 417.540365][T12290] ? __local_bh_enable_ip+0x12e/0x1c0 [ 417.545786][T12290] ? _local_bh_enable+0xa0/0xa0 [ 417.550872][T12290] ? __dev_queue_xmit+0x245/0x35a0 [ 417.556097][T12290] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 417.561677][T12290] ? __dev_queue_xmit+0x245/0x35a0 [ 417.566847][T12290] ? ref_tracker_free+0x634/0x7d0 [ 417.571897][T12290] ? __copy_skb_header+0xa7/0x550 [ 417.576953][T12290] ? refcount_inc+0x70/0x70 [ 417.581492][T12290] ? __skb_clone+0x63/0x790 [ 417.586059][T12290] ? __skb_clone+0x480/0x790 [ 417.590676][T12290] ? __netlink_deliver_tap+0x7e8/0x830 [ 417.596162][T12290] ? netlink_deliver_tap+0x2e/0x1b0 [ 417.601388][T12290] ? __lock_acquire+0x7c80/0x7c80 [ 417.606440][T12290] ? netlink_deliver_tap+0x2e/0x1b0 [ 417.611677][T12290] netlink_unicast+0x750/0x8c0 [ 417.616475][T12290] netlink_sendmsg+0x8c1/0xbe0 [ 417.621298][T12290] ? netlink_getsockopt+0x580/0x580 [ 417.626526][T12290] ? aa_sock_msg_perm+0x94/0x150 [ 417.631490][T12290] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 417.636824][T12290] ? security_socket_sendmsg+0x80/0xa0 [ 417.642312][T12290] ? netlink_getsockopt+0x580/0x580 [ 417.647624][T12290] ____sys_sendmsg+0x5bf/0x950 [ 417.652421][T12290] ? __asan_memset+0x22/0x40 [ 417.657060][T12290] ? __sys_sendmsg_sock+0x30/0x30 [ 417.662148][T12290] ? __import_iovec+0x5f2/0x860 [ 417.667040][T12290] ? import_iovec+0x73/0xa0 [ 417.671577][T12290] ___sys_sendmsg+0x220/0x290 [ 417.676284][T12290] ? __sys_sendmsg+0x270/0x270 [ 417.681110][T12290] __se_sys_sendmsg+0x1a5/0x270 [ 417.685981][T12290] ? __x64_sys_sendmsg+0x80/0x80 [ 417.690961][T12290] ? lockdep_hardirqs_on+0x98/0x150 [ 417.696181][T12290] do_syscall_64+0x55/0xb0 [ 417.700620][T12290] ? clear_bhb_loop+0x40/0x90 [ 417.705308][T12290] ? clear_bhb_loop+0x40/0x90 [ 417.710016][T12290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.715934][T12290] RIP: 0033:0x7fd024b8e929 [ 417.720361][T12290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.740098][T12290] RSP: 002b:00007fd025a02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.748545][T12290] RAX: ffffffffffffffda RBX: 00007fd024db5fa0 RCX: 00007fd024b8e929 [ 417.756555][T12290] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 417.764548][T12290] RBP: 00007fd024c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 417.772549][T12290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.780534][T12290] R13: 0000000000000000 R14: 00007fd024db5fa0 R15: 00007ffd7eb7abc8 [ 417.788548][T12290] [ 417.793453][T12290] Mem-Info: [ 417.796669][T12290] active_anon:13965 inactive_anon:0 isolated_anon:0 [ 417.796669][T12290] active_file:15816 inactive_file:40385 isolated_file:0 [ 417.796669][T12290] unevictable:768 dirty:241 writeback:0 [ 417.796669][T12290] slab_reclaimable:11471 slab_unreclaimable:120879 [ 417.796669][T12290] mapped:29931 shmem:9999 pagetables:732 [ 417.796669][T12290] sec_pagetables:0 bounce:0 [ 417.796669][T12290] kernel_misc_reclaimable:0 [ 417.796669][T12290] free:1311566 free_pcp:8304 free_cma:0 [ 417.842388][T12290] Node 0 active_anon:55860kB inactive_anon:0kB active_file:63264kB inactive_file:161336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119724kB dirty:964kB writeback:0kB shmem:38460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12624kB pagetables:2928kB sec_pagetables:0kB all_unreclaimable? no [ 417.874993][T12290] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 417.905426][T12290] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.933251][T12290] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 417.939314][T12290] Node 0 DMA32 free:1333416kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:55812kB inactive_anon:0kB active_file:63264kB inactive_file:160004kB unevictable:1536kB writepending:964kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:12448kB local_pcp:2092kB free_cma:0kB [ 417.970184][T12290] lowmem_reserve[]: 0 0 1 1 1 [ 417.974938][T12290] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.002604][T12290] lowmem_reserve[]: 0 0 0 0 0 [ 418.007722][T12290] Node 1 Normal free:3897484kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20768kB local_pcp:11040kB free_cma:0kB [ 418.037673][T12290] lowmem_reserve[]: 0 0 0 0 0 [ 418.042423][T12290] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 418.055202][T12290] Node 0 DMA32: 20*4kB (E) 5*8kB (UE) 15*16kB (ME) 282*32kB (UME) 338*64kB (UME) 101*128kB (UM) 41*256kB (ME) 8*512kB (UM) 5*1024kB (UM) 10*2048kB (UME) 305*4096kB (UM) = 1333416kB [ 418.073472][T12290] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 418.085545][T12290] Node 1 Normal: 225*4kB (UME) 69*8kB (UME) 34*16kB (UME) 74*32kB (UME) 16*64kB (UME) 5*128kB (UE) 1*256kB (U) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3897484kB [ 418.103449][T12290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.113083][T12290] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.122661][T12290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.132518][T12290] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.141870][T12290] 66169 total pagecache pages [ 418.146627][T12290] 0 pages in swap cache [ 418.150792][T12290] Free swap = 124364kB [ 418.155226][T12290] Total swap = 124996kB [ 418.159396][T12290] 2097051 pages RAM [ 418.163211][T12290] 0 pages HighMem/MovableOnly [ 418.168100][T12290] 416120 pages reserved [ 418.172274][T12290] 0 pages cma reserved [ 422.794515][T12386] loop9: detected capacity change from 0 to 128 [ 422.804748][T12386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 422.813120][T12386] System zones: 1-3, 19-19, 35-36 [ 422.826925][T12386] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 422.840137][T12386] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 422.897515][T12386] EXT4-fs warning (device loop9): verify_group_input:151: Cannot add at group 1281 (only 1 groups) [ 422.932344][T11270] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 423.000581][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1744'. [ 423.016388][T12390] vlan2: entered promiscuous mode [ 425.620159][T12445] netlink: 'syz.3.1764': attribute type 2 has an invalid length. [ 425.650482][T12445] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1764'. [ 427.813268][T12472] loop3: detected capacity change from 0 to 512 [ 427.865594][T12478] loop9: detected capacity change from 0 to 2048 [ 428.896192][T12472] EXT4-fs (loop3): 1 truncate cleaned up [ 428.903495][T12472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.908756][T12478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.137281][T12488] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1778'. [ 429.356509][T11331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.804580][ T28] audit: type=1326 audit(1750799010.625:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.8.1779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd024b8e929 code=0x0 [ 431.964992][T12526] loop3: detected capacity change from 0 to 16 [ 431.977273][T12526] erofs: (device loop3): mounted with root inode @ nid 36. [ 432.001890][T12526] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 432.033045][T12526] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 433.465963][T12556] loop9: detected capacity change from 0 to 2048 [ 433.511306][T12556] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 433.535126][T12556] UDF-fs: Scanning with blocksize 512 failed [ 433.555048][T12556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.298950][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1806'. [ 434.301756][ T28] audit: type=1326 audit(1750799015.215:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 434.372116][ T28] audit: type=1326 audit(1750799015.255:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 434.395338][T12565] netlink: 'syz.2.1803': attribute type 3 has an invalid length. [ 434.403757][ T28] audit: type=1326 audit(1750799015.265:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 434.461729][ T28] audit: type=1326 audit(1750799015.265:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 434.497925][ T28] audit: type=1326 audit(1750799015.265:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 434.522224][ T28] audit: type=1326 audit(1750799015.265:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 434.552100][ T28] audit: type=1326 audit(1750799015.265:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 434.606987][ T28] audit: type=1326 audit(1750799015.275:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 434.663867][ T28] audit: type=1326 audit(1750799015.275:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 434.718814][T12572] syz_tun: entered promiscuous mode [ 434.729844][T12572] macsec1: entered promiscuous mode [ 434.736809][T12572] macsec1: entered allmulticast mode [ 434.742788][T12572] syz_tun: entered allmulticast mode [ 437.291894][T12599] loop9: detected capacity change from 0 to 1024 [ 437.531233][T11189] hfsplus: b-tree write err: -5, ino 4 [ 437.887485][T12611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1821'. [ 440.276985][T12635] loop3: detected capacity change from 0 to 8 [ 440.284188][T12635] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 440.485100][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.502268][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.028027][T12680] loop9: detected capacity change from 0 to 256 [ 443.040826][T12680] exfat: Unknown parameter 'zero_size_dir' [ 444.126555][T12693] syz.9.1849[12693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.126706][T12693] syz.9.1849[12693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.151851][T12689] loop3: detected capacity change from 0 to 2048 [ 444.216434][T12693] mmap: syz.9.1849 (12693) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 444.236716][T12689] UDF-fs: bad mount option "noNtrict" or missing value [ 447.941813][T12744] loop9: detected capacity change from 0 to 2048 [ 447.974679][T12744] UDF-fs: bad mount option "noNtrict" or missing value [ 449.835355][T12761] bridge0: port 3(syz_tun) entered blocking state [ 449.842590][T12761] bridge0: port 3(syz_tun) entered disabled state [ 449.858070][T12761] syz_tun: entered allmulticast mode [ 449.936654][T12761] bridge0: port 3(syz_tun) entered blocking state [ 449.943262][T12761] bridge0: port 3(syz_tun) entered forwarding state [ 450.041520][T12768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1873'. [ 450.084748][T12777] net_ratelimit: 10 callbacks suppressed [ 450.084770][T12777] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 450.105139][T12768] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1873'. [ 450.138362][T12768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1873'. [ 450.154590][T12768] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1873'. [ 451.697314][T12785] ptrace attach of "./syz-executor exec"[12801] was attempted by "./syz-executor exec"[12785] [ 453.882452][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 453.882469][ T28] audit: type=1326 audit(1750799034.795:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.8.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 453.938094][ T28] audit: type=1326 audit(1750799034.795:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.8.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 453.969576][T12836] trusted_key: encrypted_key: insufficient parameters specified [ 453.999056][ T28] audit: type=1326 audit(1750799034.855:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.8.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 454.087157][T12840] overlayfs: failed to clone upperpath [ 454.134737][ T28] audit: type=1326 audit(1750799034.855:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.8.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 454.189718][ T28] audit: type=1326 audit(1750799034.855:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.8.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 454.989630][ T28] audit: type=1326 audit(1750799034.875:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.8.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 455.167502][ T28] audit: type=1326 audit(1750799034.875:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.8.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 455.206819][ T28] audit: type=1326 audit(1750799034.875:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.8.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 455.294599][ T28] audit: type=1326 audit(1750799034.875:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.8.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 455.344563][ T28] audit: type=1326 audit(1750799034.875:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.8.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 455.500195][T12850] vlan3: entered promiscuous mode [ 455.524480][T12850] vlan2: entered promiscuous mode [ 455.529642][T12850] gretap0: entered promiscuous mode [ 455.829133][T12839] loop3: detected capacity change from 0 to 32768 [ 455.884493][T12839] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1895 (12839) [ 455.964460][T12839] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 455.992303][T12839] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 456.047824][T12839] BTRFS info (device loop3): force zlib compression, level 3 [ 456.081267][T12839] BTRFS info (device loop3): force clearing of disk cache [ 456.114345][T12839] BTRFS info (device loop3): setting nodatasum [ 456.120588][T12839] BTRFS info (device loop3): use zlib compression, level 3 [ 456.150076][T12839] BTRFS info (device loop3): allowing degraded mounts [ 456.161704][T12839] BTRFS info (device loop3): enabling disk space caching [ 456.178782][T12839] BTRFS info (device loop3): disk space caching is enabled [ 456.519847][T12839] BTRFS info (device loop3): enabling ssd optimizations [ 456.529888][T12839] BTRFS info (device loop3): auto enabling async discard [ 456.718778][T12839] BTRFS info (device loop3): rebuilding free space tree [ 456.774413][T12839] BTRFS info (device loop3): disabling free space tree [ 456.781662][T12839] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 456.826077][T12839] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 457.653646][T11331] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 458.082187][T12887] netlink: 'syz.2.1909': attribute type 4 has an invalid length. [ 458.169248][T12888] netlink: 'syz.2.1909': attribute type 4 has an invalid length. [ 458.331315][T12892] netlink: 'syz.3.1906': attribute type 7 has an invalid length. [ 458.362504][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 459.246884][T12921] netlink: 'syz.9.1920': attribute type 12 has an invalid length. [ 460.532078][T12933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.604454][T12935] @: renamed from bond_slave_0 (while UP) [ 460.761906][T12933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.951587][T12933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.375109][T12933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.444638][T12951] xt_connbytes: Forcing CT accounting to be enabled [ 462.453713][T12951] set match dimension is over the limit! [ 462.934607][T12953] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1932'. [ 463.095801][T12933] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.136232][T12933] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.180208][T12933] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.224504][T12962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.248520][T12933] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.123322][T13002] loop9: detected capacity change from 0 to 512 [ 465.143903][T13002] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 465.234382][T13002] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.1949: iget: bogus i_mode (5) [ 465.256265][T13001] vlan3: entered promiscuous mode [ 465.261368][T13001] vlan2: entered promiscuous mode [ 465.294505][T13002] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1949: couldn't read orphan inode 15 (err -117) [ 465.308779][T13001] gretap0: entered promiscuous mode [ 465.339564][T13002] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.355970][T13002] ext2 filesystem being mounted at /91/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.375357][T13011] netlink: 'syz.8.1954': attribute type 4 has an invalid length. [ 465.442541][T13012] netlink: 'syz.8.1954': attribute type 4 has an invalid length. [ 465.478610][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1955'. [ 465.513733][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1955'. [ 465.603792][T11270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.605199][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1956'. [ 465.698716][T13019] syzkaller1: entered promiscuous mode [ 465.716348][T13019] syzkaller1: entered allmulticast mode [ 465.735547][T13017] erspan0: entered allmulticast mode [ 465.758462][T13017] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 465.792718][T13022] loop9: detected capacity change from 0 to 2048 [ 465.854525][T13022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.999590][T13029] netlink: 'syz.8.1961': attribute type 4 has an invalid length. [ 466.075551][T13029] netlink: 'syz.8.1961': attribute type 4 has an invalid length. [ 466.773000][T13043] netlink: 'syz.9.1965': attribute type 4 has an invalid length. [ 466.869556][T13046] netlink: 'syz.9.1965': attribute type 4 has an invalid length. [ 468.905369][T13057] TCP: out of memory -- consider tuning tcp_mem [ 471.502699][T13075] syz.8.1976(13075): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 473.547512][T13091] lo: entered allmulticast mode [ 473.647551][T13091] tunl0: entered allmulticast mode [ 473.710549][T13091] gre0: entered allmulticast mode [ 473.791000][T13091] gretap0: entered allmulticast mode [ 473.839503][T13091] erspan0: entered allmulticast mode [ 473.975019][T13091] ip_vti0: entered allmulticast mode [ 473.987934][T13091] ip6_vti0: entered allmulticast mode [ 474.085682][T13091] sit0: entered allmulticast mode [ 474.214963][T13091] ip6tnl0: entered allmulticast mode [ 474.264231][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 474.264250][ T28] audit: type=1326 audit(1750799055.175:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.8.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 474.322414][T13091] ip6gre0: entered allmulticast mode [ 474.371636][ T28] audit: type=1326 audit(1750799055.175:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.8.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 474.403503][ T28] audit: type=1326 audit(1750799055.225:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.8.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 474.424849][T13091] bridge0: port 3(syz_tun) entered disabled state [ 474.468714][T13091] ip6gretap0: entered allmulticast mode [ 474.472413][ T28] audit: type=1326 audit(1750799055.225:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.8.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 474.527629][T13091] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.535446][T13091] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.542291][ T28] audit: type=1326 audit(1750799055.225:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.8.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 474.583429][T13091] bridge0: entered allmulticast mode [ 474.615478][ T28] audit: type=1326 audit(1750799055.225:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.8.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 474.659042][ T28] audit: type=1326 audit(1750799055.225:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.8.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 474.665712][T13091] vcan0: entered allmulticast mode [ 474.712455][T13091] bond0: entered allmulticast mode [ 474.718629][T13091] @: entered allmulticast mode [ 474.723707][T13091] bond_slave_1: entered allmulticast mode [ 474.739979][ T28] audit: type=1326 audit(1750799055.285:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.8.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 474.782066][ T28] audit: type=1326 audit(1750799055.285:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.8.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x7ffc0000 [ 474.811235][T13091] team0: entered allmulticast mode [ 474.817319][ T28] audit: type=1326 audit(1750799055.315:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.8.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd024bc11e5 code=0x7ffc0000 [ 474.842321][T13091] team_slave_0: entered allmulticast mode [ 474.872129][T13091] team_slave_1: entered allmulticast mode [ 474.949113][T13091] dummy0: entered allmulticast mode [ 475.017837][T13091] nlmon0: entered allmulticast mode [ 475.041981][T13091] caif0: entered allmulticast mode [ 475.088928][T13091] batadv0: entered allmulticast mode [ 475.286252][T13091] veth0: entered allmulticast mode [ 475.321274][T13091] veth1: entered allmulticast mode [ 476.372451][T13091] wg0: entered allmulticast mode [ 476.426216][T13091] wg1: entered allmulticast mode [ 476.492936][T13091] wg2: entered allmulticast mode [ 476.566708][T13091] veth0_to_bridge: entered allmulticast mode [ 476.699417][T13091] veth1_to_bridge: entered allmulticast mode [ 476.782656][T13091] veth0_to_bond: entered allmulticast mode [ 476.873649][T13091] veth1_to_bond: entered allmulticast mode [ 476.953024][T13091] veth0_to_team: entered allmulticast mode [ 477.063639][T13091] veth1_to_team: entered allmulticast mode [ 477.147665][T13091] veth0_to_batadv: entered allmulticast mode [ 477.161259][T13091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.192166][T13091] batadv_slave_0: entered allmulticast mode [ 477.234843][T13091] veth1_to_batadv: entered allmulticast mode [ 477.252452][T13091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.304739][T13091] batadv_slave_1: entered allmulticast mode [ 477.385057][T13091] xfrm0: entered allmulticast mode [ 477.424951][T13091] veth0_to_hsr: entered allmulticast mode [ 478.060007][T13091] hsr_slave_0: entered allmulticast mode [ 478.096433][T13091] veth1_to_hsr: entered allmulticast mode [ 478.141543][T13091] hsr_slave_1: entered allmulticast mode [ 478.164012][T13091] hsr0: entered allmulticast mode [ 478.196311][T13091] veth1_virt_wifi: entered allmulticast mode [ 478.263520][T13091] veth0_virt_wifi: entered allmulticast mode [ 478.280614][T13091] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 478.303679][T13091] veth1_vlan: entered allmulticast mode [ 478.370464][T13091] veth0_vlan: entered allmulticast mode [ 478.419194][T13091] vlan0: entered allmulticast mode [ 478.430039][T13091] vlan1: entered allmulticast mode [ 478.494414][T13091] macvlan0: entered allmulticast mode [ 478.552247][T13091] macvlan1: entered allmulticast mode [ 478.563911][T13091] ipvlan0: entered allmulticast mode [ 478.584299][T13091] ipvlan1: entered allmulticast mode [ 478.611957][T13091] veth1_macvtap: entered allmulticast mode [ 478.649597][T13091] veth0_macvtap: entered allmulticast mode [ 478.688627][T13091] macvtap0: entered allmulticast mode [ 478.721803][T13091] macsec0: entered allmulticast mode [ 478.771008][T13091] geneve0: entered allmulticast mode [ 478.787737][T13138] loop3: detected capacity change from 0 to 32768 [ 478.827738][T13091] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.827958][T13138] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 478.827958][T13138] [ 478.837011][T13091] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.855141][T13138] ERROR: (device loop3): remounting filesystem as read-only [ 478.857411][T13091] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.872642][T13138] xtLookup: xtSearch returned -5 [ 478.873383][T13091] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.878787][T13138] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 478.878787][T13138] [ 478.911504][T13139] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 478.911504][T13139] [ 478.912794][T13091] geneve1: entered allmulticast mode [ 478.921739][T13139] xtLookup: xtSearch returned -5 [ 478.923086][T13139] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 478.923086][T13139] [ 478.943604][T13139] xtLookup: xtSearch returned -5 [ 478.952199][T13139] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 478.952199][T13139] [ 478.965620][T13139] xtLookup: xtSearch returned -5 [ 478.976317][T13139] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 478.976317][T13139] [ 478.987244][T13091] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 479.027898][T13091] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 479.055207][T13091] netdevsim netdevsim9 netdevsim2: entered allmulticast mode [ 479.083505][T13091] netdevsim netdevsim9 netdevsim3: entered allmulticast mode [ 479.113897][T13091] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 479.153119][T13091] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 479.174567][T13091] veth2: entered allmulticast mode [ 479.179948][T13091] veth3: entered allmulticast mode [ 479.388372][T13145] netlink: 'syz.2.1997': attribute type 39 has an invalid length. [ 479.425068][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 479.471299][T13148] fuse: Unknown parameter 'fd0x0000000000000005' [ 479.774245][T13096] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 480.074251][T13096] usb 4-1: Using ep0 maxpacket: 16 [ 480.082439][T13096] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 480.092135][T13096] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 480.101435][T13096] usb 4-1: config 1 has no interface number 1 [ 480.107649][T13096] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 480.120571][T13096] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 481.095415][T13096] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 481.105605][T13096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.113652][T13096] usb 4-1: Product: syz [ 481.117913][T13096] usb 4-1: Manufacturer: syz [ 481.122555][T13096] usb 4-1: SerialNumber: syz [ 481.226586][T13167] netlink: 176 bytes leftover after parsing attributes in process `syz.8.2003'. [ 481.354550][T13096] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 481.373444][T13096] usb 4-1: 2:1: All rates were zero [ 481.420644][T13096] usb 4-1: USB disconnect, device number 3 [ 482.420883][T13188] lo: entered promiscuous mode [ 482.462817][T13188] tunl0: entered promiscuous mode [ 482.506489][T13188] gre0: entered promiscuous mode [ 482.710490][T13188] erspan0: entered promiscuous mode [ 482.717224][T13188] erspan0: left allmulticast mode [ 482.769547][T13188] ip_vti0: entered promiscuous mode [ 482.799768][T13188] ip6_vti0: entered promiscuous mode [ 482.846077][T13188] sit0: entered promiscuous mode [ 482.978560][T13188] ip6tnl0: entered promiscuous mode [ 483.056918][T13188] ip6gre0: entered promiscuous mode [ 483.109581][T13188] ip6gretap0: entered promiscuous mode [ 483.148422][T13188] vcan0: entered promiscuous mode [ 483.192953][T13188] dummy0: entered promiscuous mode [ 483.269987][T13188] nlmon0: entered promiscuous mode [ 483.291341][T13188] caif0: entered promiscuous mode [ 483.308152][T13188] batadv0: entered promiscuous mode [ 483.409608][T13188] veth0: entered promiscuous mode [ 483.471902][T13188] veth1: entered promiscuous mode [ 483.539922][T13188] wg1: entered promiscuous mode [ 483.607423][T13188] wg2: entered promiscuous mode [ 483.647879][T13188] veth0_to_bridge: entered promiscuous mode [ 483.715620][T13188] bridge_slave_0: entered promiscuous mode [ 483.854505][T13188] veth1_to_bridge: entered promiscuous mode [ 483.925444][T13188] bridge_slave_1: entered promiscuous mode [ 483.992851][T13188] veth0_to_bond: entered promiscuous mode [ 484.021385][T13188] bond_slave_0: entered promiscuous mode [ 484.051641][T13188] veth1_to_bond: entered promiscuous mode [ 484.095071][T13188] bond_slave_1: entered promiscuous mode [ 484.160583][T13201] loop9: detected capacity change from 0 to 2048 [ 484.170715][T13188] veth0_to_team: entered promiscuous mode [ 484.207920][T13201] loop9: p2 < > p3 p4 < > [ 484.212426][T13201] loop9: partition table partially beyond EOD, truncated [ 484.244571][T13201] loop9: p2 start 4294902784 is beyond EOD, truncated [ 484.251519][T13201] loop9: p3 start 3724543488 is beyond EOD, truncated [ 484.269951][T13188] veth1_to_team: entered promiscuous mode [ 484.352112][T13188] veth0_to_batadv: entered promiscuous mode [ 484.369173][T13188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.413777][T13188] batadv_slave_0: entered promiscuous mode [ 484.469677][T13188] veth1_to_batadv: entered promiscuous mode [ 484.479568][T13188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.515135][T13188] batadv_slave_1: entered promiscuous mode [ 484.529807][T13209] netlink: 'syz.9.2022': attribute type 1 has an invalid length. [ 484.552023][T13188] xfrm0: entered promiscuous mode [ 484.604423][T13188] veth0_to_hsr: entered promiscuous mode [ 484.680731][T13188] veth1_to_hsr: entered promiscuous mode [ 484.803424][T13188] hsr0: entered promiscuous mode [ 484.855752][T13188] veth1_virt_wifi: entered promiscuous mode [ 484.946699][T13188] veth0_virt_wifi: entered promiscuous mode [ 484.959862][T13188] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 485.225174][T13188] vlan0: entered promiscuous mode [ 485.289525][T13188] vlan1: entered promiscuous mode [ 485.427324][T13188] macvlan1: entered promiscuous mode [ 485.756107][T13188] ipvlan0: entered promiscuous mode [ 485.774254][T13188] ipvlan1: entered promiscuous mode [ 486.064363][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 486.064381][ T28] audit: type=1326 audit(1750799066.975:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.9.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5cb8e929 code=0x7ffc0000 [ 486.142552][ T28] audit: type=1326 audit(1750799067.005:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.9.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5cb8e929 code=0x7ffc0000 [ 486.172753][ T28] audit: type=1326 audit(1750799067.035:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.9.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e5cb8e929 code=0x7ffc0000 [ 486.195276][ T28] audit: type=1326 audit(1750799067.035:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.9.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5cb8e929 code=0x7ffc0000 [ 486.218523][ T28] audit: type=1326 audit(1750799067.035:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.9.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5cb8e929 code=0x7ffc0000 [ 486.241128][T13188] macvtap0: entered promiscuous mode [ 486.241138][ T28] audit: type=1326 audit(1750799067.035:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.9.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7e5cb8e929 code=0x7ffc0000 [ 486.270044][ T28] audit: type=1326 audit(1750799067.035:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.9.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5cb8e929 code=0x7ffc0000 [ 486.293005][ T28] audit: type=1326 audit(1750799067.035:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.9.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7e5cb8e929 code=0x7ffc0000 [ 486.316762][ T28] audit: type=1326 audit(1750799067.135:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13235 comm="syz.9.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e5cbc11e5 code=0x7ffc0000 [ 486.708348][ T28] audit: type=1326 audit(1750799067.135:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.9.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5cb8e929 code=0x7ffc0000 [ 487.036765][T13188] macsec0: entered promiscuous mode [ 487.150765][T13188] geneve0: entered promiscuous mode [ 487.225700][T13233] loop9: detected capacity change from 0 to 2048 [ 487.251318][T13188] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.252126][T13233] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 487.267666][T13188] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.287635][T13188] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.298870][T13188] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.308607][T13188] geneve1: entered promiscuous mode [ 487.335960][T11270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 487.375830][T13188] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 487.407655][T13188] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 487.435178][T13188] bridge1: entered promiscuous mode [ 487.448771][T13188] bridge2: entered promiscuous mode [ 487.468139][T13188] bond1: entered promiscuous mode [ 487.480749][T13188] bridge3: entered promiscuous mode [ 487.494825][T13188] veth2: entered promiscuous mode [ 487.513826][T13188] gre1: entered promiscuous mode [ 487.526646][T13188] bridge0: entered promiscuous mode [ 487.533658][T13188] veth4: entered promiscuous mode [ 487.550991][T13188] veth5: entered promiscuous mode [ 487.556408][T13188] veth6: entered promiscuous mode [ 487.561641][T13188] veth7: entered promiscuous mode [ 487.570189][T13188] hsr1: entered promiscuous mode [ 487.576023][T13188] hsr1: left allmulticast mode [ 487.597778][T13188] bond2: entered promiscuous mode [ 487.611420][T13188] gre2: entered promiscuous mode [ 487.624353][T13188] bridge4: entered promiscuous mode [ 487.650647][T13188] bond0: entered promiscuous mode [ 487.671893][T13188] bond3: entered promiscuous mode [ 487.684919][T13188] veth8: entered promiscuous mode [ 487.692895][T13188] veth9: entered promiscuous mode [ 487.704831][T13188] syztnl0: entered promiscuous mode [ 487.712265][T13188] bridge5: entered promiscuous mode [ 487.718023][T13222] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 487.727628][T13188] mac80211_hwsim hwsim9 pimreg: entered promiscuous mode [ 487.744380][T13188] veth10: entered promiscuous mode [ 487.751126][T13188] veth11: entered promiscuous mode [ 487.762427][T13188] netdevsim netdevsim2 eth0: entered promiscuous mode [ 487.781912][T13188] netdevsim netdevsim2 eth1: entered promiscuous mode [ 487.789082][T13188] netdevsim netdevsim2 eth2: entered promiscuous mode [ 487.796538][T13188] netdevsim netdevsim2 eth3: entered promiscuous mode [ 487.934719][T13222] usb 10-1: Using ep0 maxpacket: 16 [ 487.946049][T13222] usb 10-1: config 0 has no interfaces? [ 487.976797][T13222] usb 10-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=b7.b4 [ 487.987169][T13222] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.996708][T13222] usb 10-1: Product: syz [ 488.001354][T13222] usb 10-1: Manufacturer: syz [ 488.009401][T13222] usb 10-1: SerialNumber: syz [ 488.021790][T13222] usb 10-1: config 0 descriptor?? [ 488.215445][T13261] netlink: 'syz.2.2034': attribute type 16 has an invalid length. [ 488.223352][T13261] netlink: 'syz.2.2034': attribute type 17 has an invalid length. [ 488.279990][T13222] usb 10-1: USB disconnect, device number 6 [ 488.575499][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 489.763885][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2041'. [ 491.560198][T13299] netlink: 'syz.2.2048': attribute type 39 has an invalid length. [ 491.569678][T13298] loop3: detected capacity change from 0 to 1024 [ 491.594253][T13298] EXT4-fs: Ignoring removed bh option [ 491.602829][T13299] syz_tun (unregistering): left allmulticast mode [ 491.614214][T13298] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 491.679243][T13298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.839437][T11331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.917920][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2052'. [ 492.083286][T13319] loop3: detected capacity change from 0 to 2048 [ 492.111199][T13314] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.116635][T13319] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.133964][T13314] bond2: (slave bond3): Enslaving as an active interface with an up link [ 492.215107][T13314] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2052'. [ 492.227340][T13314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.479221][T13332] wg2: entered promiscuous mode [ 492.489374][T13332] wg2: entered allmulticast mode [ 492.897145][T13343] bridge: RTM_NEWNEIGH with invalid ether address [ 493.110821][T13348] loop9: detected capacity change from 0 to 1024 [ 493.122200][T13348] EXT4-fs: inline encryption not supported [ 493.136259][T13348] EXT4-fs: Ignoring removed bh option [ 493.190218][T13348] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.227806][T13349] xt_hashlimit: size too large, truncated to 1048576 [ 493.659425][T11270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.200419][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2079'. [ 497.417066][T13401] loop3: detected capacity change from 0 to 64 [ 497.510430][T13403] gtp0: entered promiscuous mode [ 497.517043][T13401] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2081'. [ 497.965142][T13413] loop9: detected capacity change from 0 to 128 [ 497.987294][T13413] FAT-fs (loop9): bogus number of FAT sectors [ 498.007370][T13413] FAT-fs (loop9): Can't find a valid FAT filesystem [ 498.110739][T13413] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2086'. [ 498.143766][T13413] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2086'. [ 498.848372][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'. [ 498.928589][T13429] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 499.038746][T13427] vlan3: entered allmulticast mode [ 499.048491][T13427] bond1: entered allmulticast mode [ 499.053889][T13427] gretap1: entered allmulticast mode [ 499.384238][T13435] xt_nat: multiple ranges no longer supported [ 500.360126][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 500.360143][ T28] audit: type=1326 audit(1750799081.275:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 500.463097][ T28] audit: type=1326 audit(1750799081.305:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 500.555199][ T28] audit: type=1326 audit(1750799081.305:405): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 500.586625][ T28] audit: type=1326 audit(1750799081.305:406): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 500.609694][ T28] audit: type=1326 audit(1750799081.305:407): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 500.633182][ T28] audit: type=1326 audit(1750799081.305:408): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 500.665768][ T28] audit: type=1326 audit(1750799081.305:409): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 500.890211][ T28] audit: type=1326 audit(1750799081.305:410): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 501.283906][ T28] audit: type=1326 audit(1750799081.305:411): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 501.395845][ T28] audit: type=1326 audit(1750799081.305:412): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 501.558488][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2099'. [ 501.857457][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.864024][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.606335][T13096] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 502.806057][T13096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.834179][T13096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.844507][T13096] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 502.878533][T13096] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.901771][T13096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.922482][T13096] usb 4-1: config 0 descriptor?? [ 502.928281][T13469] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 502.928281][T13469] The task syz.8.2104 (13469) triggered the difference, watch for misbehavior. [ 503.868625][T13459] loop3: detected capacity change from 0 to 256 [ 503.895910][T13459] FAT-fs (loop3): bogus sectors per cluster 255 [ 503.911722][T13459] FAT-fs (loop3): Can't find a valid FAT filesystem [ 503.945942][T13096] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 503.976957][T13096] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 504.089659][T13096] usb 4-1: USB disconnect, device number 4 [ 507.149530][T13225] IPVS: starting estimator thread 0... [ 507.262141][T13502] IPVS: using max 17 ests per chain, 40800 per kthread [ 507.273538][T13507] loop3: detected capacity change from 0 to 1024 [ 509.491613][T13522] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.499487][T13522] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.840410][T13542] loop9: detected capacity change from 0 to 164 [ 511.006404][T13522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.141606][T13522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.108718][T13522] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.146932][T13522] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.176818][T13522] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.186876][T13522] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.048390][T13522] syz_tun: left allmulticast mode [ 514.181081][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2134'. [ 514.514000][T13593] overlayfs: failed to clone upperpath [ 514.745501][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2143'. [ 520.282092][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 520.282108][ T28] audit: type=1326 audit(1750799101.195:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 520.339442][ T28] audit: type=1326 audit(1750799101.225:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 520.365352][ T28] audit: type=1326 audit(1750799101.225:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 520.595956][ T28] audit: type=1326 audit(1750799101.245:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 520.634256][ T28] audit: type=1326 audit(1750799101.245:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 520.684953][T13643] macsec2: entered promiscuous mode [ 520.690397][T13643] veth1_to_batadv: entered promiscuous mode [ 520.714453][ T28] audit: type=1326 audit(1750799101.255:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 520.754184][ T28] audit: type=1326 audit(1750799101.255:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 520.764486][T13648] GUP no longer grows the stack in syz.3.2154 (13648): 200000003000-20000000a000 (200000002000) [ 520.795308][T13647] batadv_slave_1: entered promiscuous mode [ 520.814163][ T28] audit: type=1326 audit(1750799101.255:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 520.868997][ T28] audit: type=1326 audit(1750799101.255:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 520.896628][T13647] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2155'. [ 520.916634][T13648] CPU: 0 PID: 13648 Comm: syz.3.2154 Not tainted 6.6.94-syzkaller #0 [ 520.924214][ T28] audit: type=1326 audit(1750799101.255:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b918e929 code=0x7ffc0000 [ 520.924755][T13648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.924771][T13648] Call Trace: [ 520.924782][T13648] [ 520.924793][T13648] dump_stack_lvl+0x16c/0x230 [ 520.968303][T13648] ? show_regs_print_info+0x20/0x20 [ 520.973707][T13648] ? load_image+0x3b0/0x3b0 [ 520.978273][T13648] ? find_vma+0x12e/0x1b0 [ 520.982690][T13648] __get_user_pages+0xfb9/0x1470 [ 520.987727][T13648] ? populate_vma_page_range+0x370/0x370 [ 520.993449][T13648] __gup_longterm_locked+0x1f92/0x2920 [ 520.998991][T13648] ? __might_fault+0xaa/0x120 [ 521.003722][T13648] ? __lock_acquire+0x7c80/0x7c80 [ 521.008814][T13648] ? pin_user_pages_remote+0x210/0x210 [ 521.014635][T13648] ? __might_sleep+0xe0/0xe0 [ 521.019295][T13648] pin_user_pages_remote+0x171/0x210 [ 521.024658][T13648] ? pin_user_pages_fast+0xe0/0xe0 [ 521.029932][T13648] ? down_read+0x1ac/0x2e0 [ 521.034410][T13648] process_vm_rw+0x5d4/0xb60 [ 521.039072][T13648] ? __ia32_sys_process_vm_writev+0xf0/0xf0 [ 521.045604][T13648] ? _raw_spin_unlock+0x40/0x40 [ 521.050623][T13648] ? lock_chain_count+0x20/0x20 [ 521.055532][T13648] ? lock_chain_count+0x20/0x20 [ 521.060445][T13648] __x64_sys_process_vm_writev+0xe0/0xf0 [ 521.066144][T13648] do_syscall_64+0x55/0xb0 [ 521.070622][T13648] ? clear_bhb_loop+0x40/0x90 [ 521.075351][T13648] ? clear_bhb_loop+0x40/0x90 [ 521.080106][T13648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.086596][T13648] RIP: 0033:0x7f95fed8e929 [ 521.091071][T13648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.110742][T13648] RSP: 002b:00007f95ffc40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 521.119217][T13648] RAX: ffffffffffffffda RBX: 00007f95fefb6080 RCX: 00007f95fed8e929 [ 521.127243][T13648] RDX: 0000000000000002 RSI: 0000200000001a00 RDI: 0000000000000191 [ 521.135266][T13648] RBP: 00007f95fee10b39 R08: 0000000000000002 R09: 0000000000000000 [ 521.143289][T13648] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000000 [ 521.151401][T13648] R13: 0000000000000001 R14: 00007f95fefb6080 R15: 00007ffd90618178 [ 521.159453][T13648] [ 521.445791][T13646] batadv_slave_1: left promiscuous mode [ 523.404978][T13226] Process accounting resumed [ 523.586319][T13678] Process accounting resumed [ 524.053450][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 524.231750][T13689] loop3: detected capacity change from 0 to 2048 [ 524.274148][T13689] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.391259][T13694] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2168'. [ 524.421349][T13694] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 524.947454][T13703] batman_adv: batadv0: Adding interface: ip6gretap1 [ 524.974366][T13703] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.091276][T13703] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 525.113990][T13704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.163903][T13704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.192784][T13704] batman_adv: batadv0: Removing interface: ip6gretap1 [ 525.248029][T13704] batadv0 (unregistering): left allmulticast mode [ 526.022707][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2175'. [ 526.154595][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 526.585707][T13720] netlink: 'syz.2.2177': attribute type 13 has an invalid length. [ 526.605542][T13720] netlink: 'syz.2.2177': attribute type 17 has an invalid length. [ 526.636439][T13720] lo: left promiscuous mode [ 526.670276][T13720] tunl0: left promiscuous mode [ 526.703193][T13720] gre0: left promiscuous mode [ 526.956733][T13720] ip_vti0: left promiscuous mode [ 526.972675][T13720] ip6_vti0: left promiscuous mode [ 526.995018][T13720] sit0: left promiscuous mode [ 527.031262][T13720] ip6tnl0: left promiscuous mode [ 527.049181][T13720] ip6gre0: left promiscuous mode [ 527.087081][T13720] ip6gretap0: left promiscuous mode [ 527.265503][T13720] vcan0: left promiscuous mode [ 527.272255][T13720] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.314949][T13720] dummy0: left promiscuous mode [ 527.349988][T13720] nlmon0: left promiscuous mode [ 527.399826][T13720] caif0: left promiscuous mode [ 527.431733][T13720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.527162][T13729] netlink: 'syz.3.2179': attribute type 1 has an invalid length. [ 528.536608][T13729] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2179'. [ 536.082269][T13799] xt_HMARK: proto mask must be zero with L3 mode [ 536.117415][T13797] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2202'. [ 536.135972][T13797] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2202'. [ 538.376094][T13829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2213'. [ 539.070540][T13845] ptrace attach of "./syz-executor exec"[11331] was attempted by "ߖ鷴)Qo \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H%3{- ^Qǚ4e3\x0b>sF̗H]+\ [ 539.924451][T13846] netlink: 'syz.8.2220': attribute type 4 has an invalid length. [ 540.025170][T13846] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.2220'. [ 540.783531][T13859] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.371239][T13861] loop9: detected capacity change from 0 to 32768 [ 541.838433][T13861] Dev loop9 SGI disklabel: csum bad, label corrupted [ 542.314883][T13870] syz.3.2227[13870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.315027][T13870] syz.3.2227[13870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 543.062911][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'. [ 543.364198][T13878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.721767][T13886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2231'. [ 543.939260][T13891] loop9: detected capacity change from 0 to 2048 [ 543.965437][T13891] EXT4-fs: Ignoring removed mblk_io_submit option [ 544.016180][T13891] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.020474][T13895] bridge0: left promiscuous mode [ 544.043903][T13895] bridge0: entered allmulticast mode [ 544.076942][T13898] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 544.122412][T13898] EXT4-fs (loop9): Remounting filesystem read-only [ 544.244749][T11270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.359749][T13952] ip6gretap0: entered promiscuous mode [ 547.378430][T13952] vlan2: entered promiscuous mode [ 549.281410][T13970] loop9: detected capacity change from 0 to 512 [ 549.327895][T13970] EXT4-fs (loop9): Test dummy encryption mode enabled [ 549.360283][T13970] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 549.461952][T13970] EXT4-fs (loop9): 1 truncate cleaned up [ 550.097890][T13970] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.408592][T13980] syz_tun: entered allmulticast mode [ 550.438802][T13979] syz_tun: left allmulticast mode [ 550.561484][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 550.561499][ T28] audit: type=1326 audit(1750799131.475:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 550.627069][T13960] sd 0:0:1:0: device reset [ 550.649640][ T28] audit: type=1326 audit(1750799131.515:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 550.696578][ T28] audit: type=1326 audit(1750799131.535:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95fed8d290 code=0x7ffc0000 [ 550.719697][ T28] audit: type=1326 audit(1750799131.535:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 550.759832][ T28] audit: type=1326 audit(1750799131.545:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 550.829830][ T28] audit: type=1326 audit(1750799131.545:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 550.830208][T13970] fscrypt (loop9): Error allocating 'xts(aes)' transform: -4 [ 550.902305][ T28] audit: type=1326 audit(1750799131.565:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x7ffc0000 [ 551.029119][T11270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.982124][T14027] overlayfs: failed to clone upperpath [ 554.059971][T14032] bridge0: port 4(vxlan0) entered blocking state [ 554.067164][T14032] bridge0: port 4(vxlan0) entered disabled state [ 554.073820][T14032] vxlan0: entered allmulticast mode [ 554.082237][T14032] vxlan0: entered promiscuous mode [ 554.764947][T14039] loop9: detected capacity change from 0 to 64 [ 555.105787][ T28] audit: type=1326 audit(1750799135.985:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.8.2281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd024b8e929 code=0x0 [ 555.110242][T14042] bridge0: port 3(syz_tun) entered disabled state [ 555.143849][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2280'. [ 555.281122][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'. [ 556.544184][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 556.841423][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 556.869929][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 556.880210][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 556.899916][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 556.911773][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 556.940119][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 558.917202][ T58] hsr_slave_0: left promiscuous mode [ 558.932939][ T58] hsr_slave_1: left promiscuous mode [ 558.939346][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.949761][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.969521][ T58] vxlan0: left allmulticast mode [ 558.975380][ T58] vxlan0: left promiscuous mode [ 558.980604][ T58] bridge0: port 4(vxlan0) entered disabled state [ 559.004482][ T58] bridge_slave_1: left promiscuous mode [ 559.011626][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.029081][ T58] bridge_slave_0: left promiscuous mode [ 559.035870][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.046531][ T5784] Bluetooth: hci2: command tx timeout [ 560.111284][T14100] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2296'. [ 560.129672][T14100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2296'. [ 561.134445][ T5784] Bluetooth: hci2: command tx timeout [ 561.205562][T14107] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 561.659969][ T58] team0 (unregistering): Port device team_slave_1 removed [ 561.736455][ T58] team0 (unregistering): Port device team_slave_0 removed [ 561.814196][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.893515][ T58] bond0 (unregistering): (slave 5@): Releasing backup interface [ 562.477840][T14118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2300'. [ 563.092051][ T58] bond0 (unregistering): Released all slaves [ 563.214370][ T5784] Bluetooth: hci2: command tx timeout [ 563.300649][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.321251][T14117] netlink: 'syz.2.2300': attribute type 10 has an invalid length. [ 563.331178][T14117] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 563.370990][T14072] chnl_net:caif_netlink_parms(): no params data found [ 565.284354][ T5784] Bluetooth: hci2: command tx timeout [ 565.360417][T14072] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.385090][T14072] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.392420][T14072] bridge_slave_0: entered allmulticast mode [ 565.407347][T14072] bridge_slave_0: entered promiscuous mode [ 565.419147][T14072] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.428273][T14072] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.435655][T14072] bridge_slave_1: entered allmulticast mode [ 565.443342][T14072] bridge_slave_1: entered promiscuous mode [ 567.246723][T14072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.296439][T14072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.275043][T14072] team0: Port device team_slave_0 added [ 568.377061][T14072] team0: Port device team_slave_1 added [ 568.477473][T14072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.491148][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.517896][T14072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.544245][T14072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.556222][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.583220][T14072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.687468][T14072] hsr_slave_0: entered promiscuous mode [ 568.700164][T14072] hsr_slave_1: entered promiscuous mode [ 568.709963][T14072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.725119][T14072] Cannot create hsr debugfs directory [ 569.737916][T14169] vlan3: entered promiscuous mode [ 569.743331][T14169] bond0: entered promiscuous mode [ 569.749089][T14169] bond_slave_0: entered promiscuous mode [ 569.755391][T14169] bond_slave_1: entered promiscuous mode [ 569.761482][T14169] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 572.910021][T14072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 572.945985][T14072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 572.978482][T14072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 573.022753][T14072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 573.056171][T14213] netlink: 'syz.8.2324': attribute type 4 has an invalid length. [ 573.408950][T14072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.468699][T14072] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.503183][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.510468][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.563396][T14229] netlink: 'syz.3.2326': attribute type 4 has an invalid length. [ 573.609051][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.616313][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.637861][T14227] netlink: 'syz.3.2326': attribute type 4 has an invalid length. [ 573.840427][T14240] netlink: 'syz.8.2330': attribute type 11 has an invalid length. [ 574.009972][T14244] loop3: detected capacity change from 0 to 512 [ 574.038098][T14244] EXT4-fs: Ignoring removed nobh option [ 574.086324][T14244] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2331: invalid indirect mapped block 256 (level 2) [ 574.111266][T14244] EXT4-fs (loop3): 2 truncates cleaned up [ 574.123244][T14244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.441299][T14072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.521413][T11331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.626718][T14072] veth0_vlan: entered promiscuous mode [ 574.695544][T14072] veth1_vlan: entered promiscuous mode [ 574.833811][T14072] veth0_macvtap: entered promiscuous mode [ 574.884749][T14072] veth1_macvtap: entered promiscuous mode [ 574.967995][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.024143][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.055537][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.104185][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.149475][T14072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.163128][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.174230][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.187694][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.213412][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.236747][T14072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.280903][T14072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.322699][T14072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.362654][T14072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.425530][T14072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.721875][T11189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.746634][T11189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.839793][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.883820][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.028824][T14282] loop3: detected capacity change from 0 to 128 [ 576.361135][T14282] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 576.596002][T14282] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 577.188106][T11331] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 579.433128][ T28] audit: type=1326 audit(1750799160.345:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.3.2347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95fed8e929 code=0x0 [ 580.794282][T13219] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 581.605090][T13219] usb 1-1: Using ep0 maxpacket: 8 [ 581.612817][T13219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.633182][T13219] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 581.652800][T13219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.680832][T13219] usb 1-1: config 0 descriptor?? [ 581.860263][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2355'. [ 582.139045][T13219] lenovo 0003:17EF:6062.0005: item 0 2 0 9 parsing failed [ 582.165030][T13219] lenovo 0003:17EF:6062.0005: hid_parse failed [ 582.182121][T13219] lenovo: probe of 0003:17EF:6062.0005 failed with error -22 [ 582.399460][T14353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.414906][T14353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.437363][T13219] usb 1-1: USB disconnect, device number 4 [ 582.620717][T14393] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 582.664409][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 582.682533][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 582.834381][T14394] ceph: No mds server is up or the cluster is laggy [ 582.966835][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 582.978654][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 583.502570][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 583.546232][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 583.615514][T14407] netlink: 'syz.0.2363': attribute type 4 has an invalid length. [ 585.875909][T14452] bridge_slave_0: left allmulticast mode [ 585.900890][T14452] bridge_slave_0: left promiscuous mode [ 585.916151][T14452] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.124628][T14452] bridge_slave_1: left allmulticast mode [ 586.135503][T14452] bridge_slave_1: left promiscuous mode [ 586.142911][T14452] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.163307][T14452] bond0: (slave bond_slave_0): Releasing backup interface [ 586.425567][T14452] bond_slave_0: left promiscuous mode [ 586.585217][T14452] bond0: (slave bond_slave_1): Releasing backup interface [ 586.697581][T14452] bond_slave_1: left promiscuous mode [ 587.055364][T14452] team0: Port device team_slave_0 removed [ 587.140741][T14452] team0: Port device team_slave_1 removed [ 587.171026][T14452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.198951][T14452] bond0: (slave wlan1): Releasing backup interface [ 587.207479][T14452] mac80211_hwsim hwsim23 wlan1: left promiscuous mode [ 587.216505][T14452] bond1: (slave gretap1): Releasing backup interface [ 587.224564][T14452] gretap1: left allmulticast mode [ 593.195676][T14564] netlink: 'syz.8.2394': attribute type 4 has an invalid length. [ 593.215389][T14564] netlink: 'syz.8.2394': attribute type 4 has an invalid length. [ 606.085393][T14692] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.837289][T14692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.984865][T14692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.664796][T14692] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.673717][T14692] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.683091][T14692] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.692427][T14692] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.815102][T14692] batadv0: left promiscuous mode [ 608.868075][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 608.998506][T14707] hsr_slave_1 (unregistering): left promiscuous mode [ 609.014368][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2419'. [ 609.028889][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2419'. [ 609.160360][T14752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2421'. [ 609.264702][T14754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2424'. [ 609.297445][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 609.724861][ T3522] ------------[ cut here ]------------ [ 609.731293][ T3522] WARNING: CPU: 0 PID: 3522 at io_uring/io_uring.c:3213 io_ring_exit_work+0x39e/0x7e0 [ 609.741487][ T3522] Modules linked in: [ 609.745502][ T3522] CPU: 0 PID: 3522 Comm: kworker/u4:11 Not tainted 6.6.94-syzkaller #0 [ 609.753781][ T3522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.764133][ T3522] Workqueue: iou_exit io_ring_exit_work [ 609.769745][ T3522] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 609.775646][ T3522] Code: e8 07 bf 27 f7 48 89 df 48 c7 c6 e0 c9 5d 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 6c 9d bd f9 e9 64 ff ff ff e8 e2 be 27 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 609.795481][ T3522] RSP: 0000:ffffc9000ca97a40 EFLAGS: 00010293 [ 609.801598][ T3522] RAX: ffffffff8a5dd6ee RBX: 0000000100007824 RCX: ffff88802e919e00 [ 609.809967][ T3522] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 609.818252][ T3522] RBP: ffffc9000ca97bb0 R08: ffffc9000ca979c7 R09: 1ffff92001952f38 [ 609.826405][ T3522] R10: dffffc0000000000 R11: fffff52001952f39 R12: 0000000100007821 [ 609.834580][ T3522] R13: ffff888026682288 R14: ffff888026682510 R15: dffffc0000000000 [ 609.842595][ T3522] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 609.852456][ T3522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.859193][ T3522] CR2: 0000001b32a10ff8 CR3: 0000000064c23000 CR4: 00000000003506f0 [ 609.867347][ T3522] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 609.875414][ T3522] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 609.883526][ T3522] Call Trace: [ 609.887309][ T3522] [ 609.890292][ T3522] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 609.896245][ T3522] ? _raw_spin_unlock_irq+0x23/0x50 [ 609.901864][ T3522] ? process_scheduled_works+0x957/0x15b0 [ 609.907712][ T3522] ? process_scheduled_works+0x957/0x15b0 [ 609.913701][ T3522] process_scheduled_works+0xa45/0x15b0 [ 609.919519][ T3522] ? assign_work+0x400/0x400 [ 609.924225][ T3522] ? assign_work+0x39e/0x400 [ 609.928867][ T3522] worker_thread+0xa55/0xfc0 [ 609.933506][ T3522] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 609.939691][ T3522] ? _raw_spin_unlock+0x40/0x40 [ 609.944754][ T3522] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 609.950823][ T3522] kthread+0x2fa/0x390 [ 609.955105][ T3522] ? pr_cont_work+0x560/0x560 [ 609.959916][ T3522] ? kthread_blkcg+0xd0/0xd0 [ 609.964642][ T3522] ret_from_fork+0x48/0x80 [ 609.969316][ T3522] ? kthread_blkcg+0xd0/0xd0 [ 609.974230][ T3522] ret_from_fork_asm+0x11/0x20 [ 609.979074][ T3522] [ 609.982217][ T3522] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 609.989531][ T3522] CPU: 0 PID: 3522 Comm: kworker/u4:11 Not tainted 6.6.94-syzkaller #0 [ 609.998063][ T3522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 610.008170][ T3522] Workqueue: iou_exit io_ring_exit_work [ 610.013801][ T3522] Call Trace: [ 610.017109][ T3522] [ 610.020084][ T3522] dump_stack_lvl+0x16c/0x230 [ 610.024811][ T3522] ? show_regs_print_info+0x20/0x20 [ 610.030052][ T3522] ? load_image+0x3b0/0x3b0 [ 610.034621][ T3522] panic+0x2c0/0x710 [ 610.038558][ T3522] ? bpf_jit_dump+0xd0/0xd0 [ 610.043104][ T3522] ? ret_from_fork_asm+0x11/0x20 [ 610.048091][ T3522] __warn+0x2e0/0x470 [ 610.052121][ T3522] ? io_ring_exit_work+0x39e/0x7e0 [ 610.057277][ T3522] ? io_ring_exit_work+0x39e/0x7e0 [ 610.062430][ T3522] report_bug+0x2be/0x4f0 [ 610.066813][ T3522] ? io_ring_exit_work+0x39e/0x7e0 [ 610.071974][ T3522] ? io_ring_exit_work+0x39e/0x7e0 [ 610.077152][ T3522] ? io_ring_exit_work+0x3a0/0x7e0 [ 610.082317][ T3522] handle_bug+0xcf/0x120 [ 610.086615][ T3522] exc_invalid_op+0x1a/0x50 [ 610.091188][ T3522] asm_exc_invalid_op+0x1a/0x20 [ 610.096152][ T3522] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 610.101904][ T3522] Code: e8 07 bf 27 f7 48 89 df 48 c7 c6 e0 c9 5d 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 6c 9d bd f9 e9 64 ff ff ff e8 e2 be 27 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 610.121530][ T3522] RSP: 0000:ffffc9000ca97a40 EFLAGS: 00010293 [ 610.127617][ T3522] RAX: ffffffff8a5dd6ee RBX: 0000000100007824 RCX: ffff88802e919e00 [ 610.135607][ T3522] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 610.143590][ T3522] RBP: ffffc9000ca97bb0 R08: ffffc9000ca979c7 R09: 1ffff92001952f38 [ 610.151573][ T3522] R10: dffffc0000000000 R11: fffff52001952f39 R12: 0000000100007821 [ 610.159592][ T3522] R13: ffff888026682288 R14: ffff888026682510 R15: dffffc0000000000 [ 610.167597][ T3522] ? io_ring_exit_work+0x39e/0x7e0 [ 610.172762][ T3522] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 610.178607][ T3522] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.183825][ T3522] ? process_scheduled_works+0x957/0x15b0 [ 610.189564][ T3522] ? process_scheduled_works+0x957/0x15b0 [ 610.195302][ T3522] process_scheduled_works+0xa45/0x15b0 [ 610.200889][ T3522] ? assign_work+0x400/0x400 [ 610.205500][ T3522] ? assign_work+0x39e/0x400 [ 610.210107][ T3522] worker_thread+0xa55/0xfc0 [ 610.214716][ T3522] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 610.220640][ T3522] ? _raw_spin_unlock+0x40/0x40 [ 610.225529][ T3522] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 610.231460][ T3522] kthread+0x2fa/0x390 [ 610.235542][ T3522] ? pr_cont_work+0x560/0x560 [ 610.240240][ T3522] ? kthread_blkcg+0xd0/0xd0 [ 610.244878][ T3522] ret_from_fork+0x48/0x80 [ 610.249316][ T3522] ? kthread_blkcg+0xd0/0xd0 [ 610.253917][ T3522] ret_from_fork_asm+0x11/0x20 [ 610.258711][ T3522] [ 610.262015][ T3522] Kernel Offset: disabled [ 610.266488][ T3522] Rebooting in 86400 seconds..