last executing test programs: 3m46.558597654s ago: executing program 32 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r2, 0x209, 0x70bd29, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)={0x24, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}}, 0x0) 3m22.503600851s ago: executing program 33 (id=205): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x23d, &(0x7f0000000700)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) 2m40.55835397s ago: executing program 2 (id=506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000940)={"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"}) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0xee, 0x3f, 0xb1, 0x40, 0xab4, 0x11, 0xcafb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x4f, 0xd, 0x0, 0xf3, 0x1d, 0x63, 0x9}}]}}]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m38.076195825s ago: executing program 2 (id=524): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x408ca, 0x4) write$binfmt_elf64(r1, &(0x7f0000001040)=ANY=[], 0xfffffe3e) 2m37.156297959s ago: executing program 2 (id=531): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000440)=r0}, 0x23) 2m36.979754939s ago: executing program 2 (id=533): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x8) 2m36.822026677s ago: executing program 2 (id=535): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x7, 0x1, 0x44, @mcast2, @local, 0x700, 0x20, 0x3ff, 0x1000}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m36.314283674s ago: executing program 2 (id=539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="0049cef4df796851925f86c004000000e4cf62dc777d55387afc4a70d087ede499a199c4d7e87a07cdb3e45fc513a1f97b0b9047144790d8f3affa2044cbd987208cf1dcd4ec17f5138b1f4efbdc2a7be39782db000000000000002c2e5cf00c404f4a3246fb740282b4265c2c2c686173682c00181f302d7cd22530b02054463a3dd16b847ce0f9c3bd119a1498eb8cc1ae04dee8bfa77d492c96fd54cb0abb83366c6b4d4785b8103b6ea5ce14afc0ebaae0f62832e93c0cd17b2130111d313bea3d9ab4738453538e448d770b602e104974e6cd92f7d589103fde2331f870b425e8776f9e2152dec6551ec1f61ced64b19c9e56"], 0x5, 0x18e, &(0x7f0000002780)="$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") ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 2m36.157504374s ago: executing program 34 (id=539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="0049cef4df796851925f86c004000000e4cf62dc777d55387afc4a70d087ede499a199c4d7e87a07cdb3e45fc513a1f97b0b9047144790d8f3affa2044cbd987208cf1dcd4ec17f5138b1f4efbdc2a7be39782db000000000000002c2e5cf00c404f4a3246fb740282b4265c2c2c686173682c00181f302d7cd22530b02054463a3dd16b847ce0f9c3bd119a1498eb8cc1ae04dee8bfa77d492c96fd54cb0abb83366c6b4d4785b8103b6ea5ce14afc0ebaae0f62832e93c0cd17b2130111d313bea3d9ab4738453538e448d770b602e104974e6cd92f7d589103fde2331f870b425e8776f9e2152dec6551ec1f61ced64b19c9e56"], 0x5, 0x18e, &(0x7f0000002780)="$eJzs299ummAYx/EfCurcZtzcTpYdkOxgO5lOzf54tt3DbsAoM0ZcTe2JpknTi+gF9KwXV5P2BmoDERqxTRMrYPX7OeLHI/CivviQiADsLVu2DBmyvPCxUD6pGGkPCUBC5pJu5gD2U/bq3rXetQHATpv9kUaSLq+PO8pa0fbgrCTpd1DP5FZeMDuVPpiLupFXIdpfnEufg+2NF6sNSFkqhvXiStnb/5dPwfFf6pVeqyTvHuWN3i7q3XD7909th4C9YqgazUsrMvrXd51vYbb8XA9zzs+NSG6GOe/naufA7cZ1CgDWlHlk/mcj89+MzH8Az9d4Mh20Xdc53N4Fw5S2YBiT6SDJYeQkxX8sO8n30FY6H1xw15n692ejC+ZG9nNhPVRK+cIEIHa1o+GoNp5Mv/aH7Z7Tc/43fjVaP5rf6z9bNb/zz2up/wewO+5+9NMeCQAAAAAAAAAAAAAAWFdF79IeAgAAAICE+P///RvvE0tpnyMAAAAAAAAAAAAAAAAAAACwK24DAAD//3/aFdo=") ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) 1m47.974605316s ago: executing program 6 (id=967): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x22004091) 1m46.510245507s ago: executing program 6 (id=991): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r0, 0x400, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) open$dir(&(0x7f0000000040)='./file0\x00', 0x180043, 0x0) 1m45.498123001s ago: executing program 6 (id=999): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x11e, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg$qrtr(r0, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x38, 0x10000) 1m42.813452675s ago: executing program 6 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m42.713241554s ago: executing program 6 (id=1030): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 1m42.609919243s ago: executing program 6 (id=1033): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000027) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r2, r3, 0x1, 0x0) 1m42.502544223s ago: executing program 35 (id=1033): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000027) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r2, r3, 0x1, 0x0) 1m19.813417957s ago: executing program 3 (id=1266): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="60e2", 0x2}], 0x1}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r2, 0x2}, 0x8) 1m18.866039831s ago: executing program 3 (id=1279): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x440, 0x1) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x42) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x44000004) 1m18.815842921s ago: executing program 3 (id=1280): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,iocharset=cp1251,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00adca557fbacb07714e5048fdbb8ca64b82a3ee49ae15880f4063cb735138b33e541eee"], 0x1, 0x1535, &(0x7f0000001380)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x44, 0x0, 0x0, 0x40}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7fffffffffffffff) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x164) 1m18.440144269s ago: executing program 3 (id=1284): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000540)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@minixdf}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 1m17.715736724s ago: executing program 3 (id=1290): mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f00004ba000/0x2000)=nil, 0x2000}}) 1m14.929875108s ago: executing program 3 (id=1321): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1m14.504096815s ago: executing program 36 (id=1321): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 41.934094641s ago: executing program 8 (id=1594): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/241, 0xf1}, 0x5}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 41.82498893s ago: executing program 8 (id=1595): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x400000000, 0xe, 0xfffc, 0xffef, 0x2000000, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0xc0304d18, 0x0) 41.678084489s ago: executing program 8 (id=1597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c) 41.565955159s ago: executing program 8 (id=1598): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@barrier}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) waitid(0x0, 0x0, 0x0, 0x2100000a, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x11d, 0x1, 0x0, 0x0) 40.902769375s ago: executing program 8 (id=1601): sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)}], 0x2, 0x0, 0x1250}}], 0x1, 0x200c4800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x20, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0xf, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000180)) 39.576608367s ago: executing program 8 (id=1608): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=""/60, 0x3c}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) shutdown(r0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="85", 0x1}], 0x1}}], 0x1, 0x40880c0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}]}}], 0x40000000000010e, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000280)=0x40) 39.445224906s ago: executing program 37 (id=1608): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=""/60, 0x3c}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) shutdown(r0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="85", 0x1}], 0x1}}], 0x1, 0x40880c0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}]}}], 0x40000000000010e, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000280)=0x40) 35.378768342s ago: executing program 9 (id=1645): timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) tkill(r2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) 34.422500296s ago: executing program 9 (id=1656): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r5, @ANYBLOB="140006005d756d6d79300000000000000000000014000400"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 33.46798979s ago: executing program 9 (id=1662): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0x0, 0x40000}, {0x6}]}, 0x10) unshare(0x20000400) 33.306308419s ago: executing program 9 (id=1664): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 32.632576715s ago: executing program 9 (id=1667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 32.255281643s ago: executing program 9 (id=1670): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24000044) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 31.77260525s ago: executing program 38 (id=1670): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24000044) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 5.255315802s ago: executing program 0 (id=1892): open(0x0, 0x40982, 0xe6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$P9_RSTAT(r2, &(0x7f0000000280)={0x58, 0x7d, 0x2, {0x0, 0x51, 0x4, 0x5, {0x2, 0x2, 0x3}, 0x40000, 0x7, 0x5, 0xb0b, 0x2, '@{', 0x2, '{)', 0x4, '@(#!', 0x16, 'trusted.overlay.upper\x00'}}, 0x58) 5.215793061s ago: executing program 4 (id=1894): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000300)="6f04", 0x2}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee01}}}], 0x20}, 0x1000c801) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 5.119094661s ago: executing program 0 (id=1895): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0xa4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/139, 0xffc3}, {&(0x7f0000000400)=""/238, 0xee}], 0x2) 5.07657072s ago: executing program 4 (id=1896): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x9, 0xfffffffffffffffd, 0x73, 0x0, 0x0, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0x5000, 0x2002d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.839351479s ago: executing program 0 (id=1899): r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100)={0xa0000013}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000580)={0xa0002008}) 4.734119388s ago: executing program 4 (id=1900): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$inet(r0, 0x0, 0x10) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)='Y', 0x1}], 0x1}, 0x40041) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="c1", 0x1}], 0x1}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) 4.589161688s ago: executing program 0 (id=1902): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) recvmmsg(r0, &(0x7f0000000ac0), 0x40001de, 0x10002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4c844) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.789656563s ago: executing program 4 (id=1907): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) dup(r0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 3.187554809s ago: executing program 5 (id=1908): socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80801) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast2}], 0x10) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.051915498s ago: executing program 5 (id=1910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.865517817s ago: executing program 5 (id=1911): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e24, 0x2, 0xc8, 0x80012d50, 0x12d5c}}, 0x44) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000280)={{0x84, @multicast1, 0x4e1d, 0x3, 'ovf\x00', 0x0, 0x60000003, 0x16}, {@rand_addr=0x64010102, 0x4e21, 0x1, 0x8, 0x4, 0x3}}, 0x44) 2.726207956s ago: executing program 0 (id=1912): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r1, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)) 2.567203326s ago: executing program 5 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000000800000000000000000500010006"], 0x1c}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2.405269854s ago: executing program 7 (id=1915): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.944498202s ago: executing program 4 (id=1919): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0xb, 0x80006, 0x200006, 0x8, 0x1, "4279437600b7fe42d53c7543032c6500", 0xa, 0x0, 0x5, 0x2, 0x1, 0xfd, 0x9d}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x103080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 1.943195262s ago: executing program 5 (id=1920): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, 0x0, 0x0, 0xff0d, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 1.73817668s ago: executing program 0 (id=1922): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x0, 0x30, 0x2, "ffb3"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.67633628s ago: executing program 7 (id=1923): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 1.508559199s ago: executing program 7 (id=1924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.326579878s ago: executing program 7 (id=1926): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x12000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x3], [0x0, 0x1001000, 0x800001, 0x4], [0x0, 0x401, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)=r6) 1.209007567s ago: executing program 7 (id=1927): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, 0x0, r2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x52) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="71756965742c6469725f756d61736b3d30303030303030303030303030303030303030303030372c63726561746f723d3d0f1bef2c696f636870727365743d6d61637475726b6973682c7175690a586765742c636f6465706167653d6370383693f4d0e8144ef60d6d61736b3d30303030303030303030303030303030303030313236342c756d61736b3d30303030303030303030303030303030303132373231322c71756965742c00"], 0x2, 0x36d, &(0x7f0000000500)="$eJzs3c9LFUEAB/Dv7PudYpsaRresoJM87VBEUIS3/oEOIZmuIG4GalBSaB06RXQLgo7dOkf9C3WJ/oE6eZBOdREJN2Z29u2+dWbfD5+r4vcDPvftzu+Znd2x3lsQ0bF1a/Lnh8sb8keUABQAXAMcAFWgCOA0RqqPFlfmV3xvNiuhgoohfwTCmGJXmJlFzxRVxlMxNFe+K6I/uY/2RxAEwa+Wof7kUhY6OCI893dxgIo+O9Xxau4l68p6GwEq+RTlEEn0sNjClrnHiYjoONHXf0dfJfr1/bvjABf1ffhRuv5HkiuIpqvdFvD0ZP7l6blub2LU9f9x3JuBkO2jWkTE6z21hJNt6ESrRFNaKpVSamcQN3cZ4chq6gBhWFU2VUaVxanNzfve2LpK4AVuaIlgw+p1Nhy6EVtpy+GvUcPaNENW3bP1qTqUZB1KlvIPdZzjl028NWc39a3cukziq/gupoSLd5jFgN5ZDIRsHBXdBWp6d9Sm875Xt6eoTjJX1bLeVMv47Dulwp2NeuDzx7iWNVu7VlGQZTGRqYj00NclAN5YWkHtHmyeFHTvjNtrp2INGWNNNN5vG2MNp2PV5kq+Nzbz0A8HfbBmz7YXjPf34rW4I0bxG58w2eh/2dUFOdVbzsz0zC9UyLAV6o36mBRVSEs/NlGD7UFHZyZh+18Q0u/T87CZi1e4j6sYWH6yujDt+95SbhtyTjQeik6VnMtj2wgHoh6Oco/8nQiDqtyQzd2zTHeCIDAeKppbLNpw2sqiHBXVVuZw6Fx536iymmb1n1L2VkGsh22YOHTTHjieNlXdtQ4zVdHXGrHk1aKT6H/D3GW/G8OIuIRL5f0dkFFW075/ptFxBVTaOlNqXWR6+9nCtN/1jERHyPLLc3rOwcjdzesHXRzKn7zvEuH6L7FeqatZR764GauRoFXiiRTHLSugQfV6Il5tCP33+4w1V599BdcXbfjeRNaa6/wl4EJip8zNQZTj83SyLqKb9UP4r5IVU7Fq6R2riW0xiR+4l7j/JyIiIiIiIiIiIiIiIiIiIiIiIiKiIyH+T//uHj9OsKM/h2T+JEZs4xh+8QYRERERERERERERERERERERERERERER0d4knv8LFNQTY8o9f/5v9MXe7T7/t9DG839Fy0d8ElEL/wMAAP//Kg5jdA==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000001040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c696f636861727365743d69736f383835392d372c6e6f6e756d7461696c3d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c636865636b3d6e6f726d616c2c636f6465706167653d3737352c696f636861727365743d63703933322c696f636861727365743d63703935302c726f6469722c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303230302c72cc02000000000000636b6673726f6f743d696f636861727365742c00"], 0x2, 0x28a, &(0x7f00000011c0)="$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") 738.595684ms ago: executing program 1 (id=1929): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x20000000) lseek(r2, 0x101, 0x0) getdents(r2, 0x0, 0x0) 688.839274ms ago: executing program 5 (id=1930): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b95477511ba86ecaf919bc87db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) sendto$packet(r0, &(0x7f0000000580)="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", 0xfb, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 567.880263ms ago: executing program 1 (id=1931): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 438.954303ms ago: executing program 1 (id=1932): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 277.991612ms ago: executing program 1 (id=1933): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001500e999"], 0xb8}}, 0x20040014) 182.471771ms ago: executing program 1 (id=1934): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 78.51466ms ago: executing program 1 (id=1935): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="ae"], 0x20}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="060100"}) 63.36388ms ago: executing program 4 (id=1936): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r3, 0x1) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 0s ago: executing program 7 (id=1937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000000)=@v3={0x3000000, [{0x0, 0x6d9a}, {0x0, 0xe50}], 0xee01}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000240)=0x8, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) kernel console output (not intermixed with test programs): 98247][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.241419][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.257519][ T6388] device veth0_vlan entered promiscuous mode [ 152.290223][ T6388] device veth1_vlan entered promiscuous mode [ 152.358388][ T6388] device veth0_macvtap entered promiscuous mode [ 152.387268][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.409646][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.475703][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.498412][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.518177][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.553956][ T6388] device veth1_macvtap entered promiscuous mode [ 152.636367][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.658512][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.682419][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.723534][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.753337][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.784416][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.813579][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.834611][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.852122][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.865455][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.876556][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.896596][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.918345][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.948890][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.971002][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.988997][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.007746][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.023867][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.059252][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.110672][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.167579][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.205611][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.228848][ T6388] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.244665][ T6388] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.275206][ T6388] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.304483][ T6388] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.374986][ T6589] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 153.413170][ T6589] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 153.457403][ T6589] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 153.495195][ T6589] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 153.585578][ T6589] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 153.655078][ T6589] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 153.686079][ T6589] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 153.715848][ T6588] netlink: 'syz.1.595': attribute type 13 has an invalid length. [ 153.743079][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.596'. [ 153.755732][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.596'. [ 153.783368][ T6591] device erspan0 entered promiscuous mode [ 153.795700][ T6591] device gretap0 entered promiscuous mode [ 153.815297][ T6591] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 153.838252][ T6591] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 153.875487][ T6593] netlink: 28 bytes leftover after parsing attributes in process `syz.5.596'. [ 153.895004][ T6593] netlink: 28 bytes leftover after parsing attributes in process `syz.5.596'. [ 153.927652][ T4763] usb 7-1: USB disconnect, device number 2 [ 154.095785][ T4754] hid-generic 0005:9C3F:0006.0003: item fetching failed at offset 0/2 [ 154.110764][ T4754] hid-generic: probe of 0005:9C3F:0006.0003 failed with error -22 [ 154.151632][ T4757] Bluetooth: hci4: command 0x0419 tx timeout [ 154.185366][ T4453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.205145][ T4453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.236862][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.280046][ T4453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.299383][ T4453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.329259][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.455421][ T6607] loop1: detected capacity change from 0 to 256 [ 154.779373][ T6607] capability: warning: `syz.1.599' uses 32-bit capabilities (legacy support in use) [ 154.791711][ T6616] program syz.1.599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.006532][ T6628] overlayfs: failed to clone upperpath [ 155.149021][ T4763] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.404717][ T4763] usb 4-1: Using ep0 maxpacket: 16 [ 155.589200][ T4763] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.659252][ T6080] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 155.672110][ T4763] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 155.702912][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.615'. [ 155.859185][ T4763] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 155.868320][ T4763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.917884][ T4763] usb 4-1: Product: syz [ 155.929413][ T4763] usb 4-1: Manufacturer: syz [ 155.934069][ T4763] usb 4-1: SerialNumber: syz [ 156.049223][ T6080] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.066102][ T6080] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.088494][ T6080] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 156.106153][ T6080] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.136283][ T6080] usb 8-1: config 0 descriptor?? [ 156.253237][ T4763] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 156.299658][ T4763] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 156.630207][ T6080] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 156.641578][ T6080] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 156.679175][ T4763] usb 4-1: 2:1 : bogus bTerminalLink 6 [ 156.830448][ T6080] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 156.933685][ T4763] usb 4-1: USB disconnect, device number 4 [ 156.977586][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 157.547172][ T6740] capability: warning: `syz.6.636' uses deprecated v2 capabilities in a way that may be insecure [ 157.648648][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.638'. [ 157.775045][ T6750] loop3: detected capacity change from 0 to 64 [ 158.374563][ T6774] Invalid ELF header len 1 [ 158.596406][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.7.649'. [ 158.622117][ T4749] usb 8-1: USB disconnect, device number 2 [ 158.657612][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.649'. [ 158.721965][ T6797] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.731255][ T6797] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.740061][ T6797] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.748831][ T6797] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.778340][ T6797] device lo entered promiscuous mode [ 158.866058][ T6797] device tunl0 entered promiscuous mode [ 158.906691][ T6797] device gre0 entered promiscuous mode [ 159.035443][ T6797] device gretap0 entered promiscuous mode [ 159.082452][ T6797] device erspan0 entered promiscuous mode [ 159.117995][ T6797] device ip_vti0 entered promiscuous mode [ 159.143860][ T6797] device ip6_vti0 entered promiscuous mode [ 159.177242][ T6797] device sit0 entered promiscuous mode [ 159.230336][ T6797] device ip6tnl0 entered promiscuous mode [ 159.260628][ T6797] device ip6gre0 entered promiscuous mode [ 159.290224][ T6797] device ip6gretap0 entered promiscuous mode [ 159.326994][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.334790][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.344591][ T6797] device bridge0 entered promiscuous mode [ 159.380060][ T6797] device vcan0 entered promiscuous mode [ 159.396704][ T6797] device bond0 entered promiscuous mode [ 159.402484][ T6797] device bond_slave_0 entered promiscuous mode [ 159.409534][ T6797] device bond_slave_1 entered promiscuous mode [ 159.449222][ T6797] device team0 entered promiscuous mode [ 159.454824][ T6797] device team_slave_0 entered promiscuous mode [ 159.462624][ T6797] device team_slave_1 entered promiscuous mode [ 159.497570][ T6797] device dummy0 entered promiscuous mode [ 159.511314][ T6810] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 159.547004][ T6797] device nlmon0 entered promiscuous mode [ 159.570901][ T6797] device caif0 entered promiscuous mode [ 159.599948][ T6797] device batadv0 entered promiscuous mode [ 159.637590][ T6797] device vxcan0 entered promiscuous mode [ 159.659606][ T6797] device vxcan1 entered promiscuous mode [ 159.685304][ T6797] device veth0 entered promiscuous mode [ 159.718292][ T6797] device veth1 entered promiscuous mode [ 159.747212][ T6797] device wg0 entered promiscuous mode [ 159.772590][ T6797] device wg1 entered promiscuous mode [ 159.796557][ T6797] device wg2 entered promiscuous mode [ 159.818267][ T6797] device veth0_to_bridge entered promiscuous mode [ 159.866076][ T6797] device veth1_to_bridge entered promiscuous mode [ 159.915618][ T6797] device veth0_to_bond entered promiscuous mode [ 159.957946][ T6797] device veth1_to_bond entered promiscuous mode [ 160.011911][ T6797] device veth0_to_team entered promiscuous mode [ 160.064226][ T6797] device veth1_to_team entered promiscuous mode [ 160.125201][ T6797] device veth0_to_batadv entered promiscuous mode [ 160.150022][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.172592][ T6797] device batadv_slave_0 entered promiscuous mode [ 160.206968][ T6797] device veth1_to_batadv entered promiscuous mode [ 160.220630][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.253646][ T6797] device batadv_slave_1 entered promiscuous mode [ 160.291186][ T6797] device xfrm0 entered promiscuous mode [ 160.321919][ T6797] device veth0_to_hsr entered promiscuous mode [ 160.389730][ T6797] device veth1_to_hsr entered promiscuous mode [ 160.453535][ T6797] device hsr0 entered promiscuous mode [ 160.492529][ T6797] device veth1_virt_wifi entered promiscuous mode [ 160.515186][ T6797] device veth0_virt_wifi entered promiscuous mode [ 160.532053][ T6797] device virt_wifi0 entered promiscuous mode [ 160.634942][ T6797] device vlan0 entered promiscuous mode [ 160.649347][ T6797] device vlan1 entered promiscuous mode [ 160.706081][ T6797] device macvlan0 entered promiscuous mode [ 160.742468][ T6797] device macvlan1 entered promiscuous mode [ 160.751906][ T6797] device ipvlan0 entered promiscuous mode [ 160.757802][ T6797] device ipvlan1 entered promiscuous mode [ 160.861445][ T6797] device macvtap0 entered promiscuous mode [ 160.890304][ T6797] device macsec0 entered promiscuous mode [ 160.936125][ T6797] device geneve0 entered promiscuous mode [ 160.979578][ T6797] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.988713][ T6797] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.998991][ T6797] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.007916][ T6797] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.017192][ T6797] device geneve1 entered promiscuous mode [ 161.048465][ T6797] device netdevsim0 entered promiscuous mode [ 161.071356][ T6797] device netdevsim1 entered promiscuous mode [ 161.088598][ T6797] device netdevsim2 entered promiscuous mode [ 161.113597][ T6797] device netdevsim3 entered promiscuous mode [ 161.149774][ T6797] device wlan0 entered promiscuous mode [ 161.174965][ T6797] device wlan1 entered promiscuous mode [ 161.196517][ T6797] device gre1 entered promiscuous mode [ 161.335757][ T6797] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.344783][ T6797] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.353724][ T6797] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.362640][ T6797] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.373839][ T6797] device vxlan0 entered promiscuous mode [ 161.395378][ T6804] netlink: 'syz.7.654': attribute type 1 has an invalid length. [ 161.416887][ T6804] netlink: 'syz.7.654': attribute type 4 has an invalid length. [ 161.455283][ T6804] netlink: 9491 bytes leftover after parsing attributes in process `syz.7.654'. [ 161.488578][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 161.511605][ T6814] device bridge_slave_1 left promiscuous mode [ 161.535279][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.596774][ T6814] device bridge_slave_0 left promiscuous mode [ 161.604607][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.772197][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.662'. [ 162.157178][ T6861] fuse: Bad value for 'fd' [ 162.171577][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.672'. [ 162.246608][ T6859] team0: Port device team_slave_0 removed [ 162.308656][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 163.062694][ T6895] loop7: detected capacity change from 0 to 128 [ 163.162884][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.6.687'. [ 163.198122][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.687'. [ 163.216974][ T6902] netlink: 9 bytes leftover after parsing attributes in process `syz.6.687'. [ 163.282414][ T6895] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.294005][ T6907] fuse: Bad value for 'fd' [ 163.340817][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 163.371785][ T6895] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.712161][ T6930] fuse: Bad value for 'fd' [ 163.777954][ T6936] loop7: detected capacity change from 0 to 128 [ 163.870506][ T6936] FAT-fs (loop7): Directory bread(block 32) failed [ 163.877206][ T6936] FAT-fs (loop7): Directory bread(block 33) failed [ 163.968503][ T6936] FAT-fs (loop7): Directory bread(block 34) failed [ 164.007787][ T6936] FAT-fs (loop7): Directory bread(block 35) failed [ 164.040309][ T6936] FAT-fs (loop7): Directory bread(block 36) failed [ 164.086621][ T6936] FAT-fs (loop7): Directory bread(block 37) failed [ 164.095855][ T6936] FAT-fs (loop7): Directory bread(block 38) failed [ 164.116830][ T6936] FAT-fs (loop7): Directory bread(block 39) failed [ 164.135228][ T6936] FAT-fs (loop7): Directory bread(block 40) failed [ 164.184650][ T6936] FAT-fs (loop7): Directory bread(block 41) failed [ 164.421537][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.710'. [ 164.843681][ T6971] tipc: Started in network mode [ 164.879137][ T6971] tipc: Node identity f60c2a678066, cluster identity 4711 [ 164.901098][ T6971] tipc: Enabled bearer , priority 0 [ 164.942116][ T6973] syzkaller0: MTU too low for tipc bearer [ 164.947909][ T6973] tipc: Disabling bearer [ 165.469236][ T4752] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 165.739116][ T4752] usb 8-1: Using ep0 maxpacket: 32 [ 165.869193][ T4752] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.902096][ T4752] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.919826][ T4752] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.934227][ T4752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.944444][ T26] audit: type=1326 audit(1783178701.750:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.3.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccc436ee59 code=0x0 [ 166.002780][ T4752] usb 8-1: config 0 descriptor?? [ 166.050434][ T4752] hub 8-1:0.0: USB hub found [ 166.269202][ T4752] hub 8-1:0.0: 1 port detected [ 166.682948][ T7013] __nla_validate_parse: 1 callbacks suppressed [ 166.682967][ T7013] netlink: 32 bytes leftover after parsing attributes in process `syz.6.728'. [ 166.745323][ T7013] device bond0 left promiscuous mode [ 166.919094][ T4754] hub 8-1:0.0: activate --> -90 [ 166.960767][ T7021] device lo left promiscuous mode [ 166.996961][ T7021] device tunl0 left promiscuous mode [ 167.010883][ T7021] device gre0 left promiscuous mode [ 167.016265][ T7021] device gretap0 left promiscuous mode [ 167.037883][ T7021] device erspan0 left promiscuous mode [ 167.068103][ T7021] device ip_vti0 left promiscuous mode [ 167.109622][ T7021] device ip6_vti0 left promiscuous mode [ 167.132432][ T7021] device sit0 left promiscuous mode [ 167.138136][ T7021] device ip6tnl0 left promiscuous mode [ 167.171705][ T7021] device ip6gre0 left promiscuous mode [ 167.199244][ T7021] device ip6gretap0 left promiscuous mode [ 167.229204][ T7021] device bridge0 left promiscuous mode [ 167.253020][ T7021] device vcan0 left promiscuous mode [ 167.258609][ T7021] device team0 left promiscuous mode [ 167.290760][ T7021] device dummy0 left promiscuous mode [ 167.296289][ T7021] device nlmon0 left promiscuous mode [ 167.329044][ T7021] device caif0 left promiscuous mode [ 167.334517][ T7021] device batadv0 left promiscuous mode [ 167.373626][ T7021] device vxcan0 left promiscuous mode [ 167.386730][ T7021] device vxcan1 left promiscuous mode [ 167.398056][ T7021] device veth0 left promiscuous mode [ 167.409177][ T7021] device veth1 left promiscuous mode [ 167.422978][ T4235] usb 8-1: USB disconnect, device number 3 [ 167.429607][ T7021] device wg0 left promiscuous mode [ 167.445252][ T7021] device wg1 left promiscuous mode [ 167.468202][ T7021] device wg2 left promiscuous mode [ 167.480668][ T7021] device veth0_to_bridge left promiscuous mode [ 167.487072][ T7021] device veth1_to_bridge left promiscuous mode [ 167.507380][ T7021] device veth0_to_bond left promiscuous mode [ 167.520383][ T7021] device bond_slave_0 left promiscuous mode [ 167.526458][ T7021] device veth1_to_bond left promiscuous mode [ 167.546449][ T7021] device bond_slave_1 left promiscuous mode [ 167.559242][ T7021] device veth1_to_team left promiscuous mode [ 167.598164][ T7021] device team_slave_1 left promiscuous mode [ 167.616147][ T7021] device veth0_to_batadv left promiscuous mode [ 167.630927][ T7021] device batadv_slave_0 left promiscuous mode [ 167.643991][ T7021] device veth1_to_batadv left promiscuous mode [ 167.657093][ T7021] device batadv_slave_1 left promiscuous mode [ 167.657711][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 167.671881][ T7021] device xfrm0 left promiscuous mode [ 167.684280][ T7021] device veth0_to_hsr left promiscuous mode [ 167.699719][ T7021] device veth1_to_hsr left promiscuous mode [ 167.712118][ T7021] device hsr0 left promiscuous mode [ 167.732684][ T7021] device veth1_virt_wifi left promiscuous mode [ 167.748102][ T7021] device veth0_virt_wifi left promiscuous mode [ 167.761717][ T7021] device virt_wifi0 left promiscuous mode [ 167.774040][ T7021] device vlan0 left promiscuous mode [ 167.786235][ T7021] device vlan1 left promiscuous mode [ 167.820382][ T7021] device macvlan0 left promiscuous mode [ 167.836383][ T7021] device macvlan1 left promiscuous mode [ 167.850222][ T7021] device ipvlan0 left promiscuous mode [ 167.866772][ T7021] device ipvlan1 left promiscuous mode [ 167.879773][ T7021] device macvtap0 left promiscuous mode [ 167.885472][ T7021] device macsec0 left promiscuous mode [ 167.913626][ T7021] device geneve0 left promiscuous mode [ 167.941893][ T7021] device geneve1 left promiscuous mode [ 167.957761][ T7021] device netdevsim0 left promiscuous mode [ 167.976099][ T7021] device netdevsim1 left promiscuous mode [ 168.001819][ T7021] device netdevsim2 left promiscuous mode [ 168.025749][ T7021] device netdevsim3 left promiscuous mode [ 168.036856][ T7040] loop1: detected capacity change from 0 to 764 [ 168.045629][ T7041] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.070681][ T7021] device wlan0 left promiscuous mode [ 168.085433][ T7021] device wlan1 left promiscuous mode [ 168.091175][ T7021] device gre1 left promiscuous mode [ 168.099056][ T7021] device vxlan0 left promiscuous mode [ 168.187563][ T7040] rock: directory entry would overflow storage [ 168.235805][ T7040] rock: sig=0x5245, size=8, remaining=5 [ 168.389854][ T7046] syz.6.740 uses obsolete (PF_INET,SOCK_PACKET) [ 168.433512][ T7046] loop6: detected capacity change from 0 to 256 [ 169.019015][ T4235] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 169.434354][ T4235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 169.447391][ T4235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.463106][ T4235] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.495441][ T4235] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 169.523316][ T4235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.563012][ T4235] usb 8-1: config 0 descriptor?? [ 170.031806][ T4235] hid-generic 0003:0457:07DA.0005: item fetching failed at offset 0/34 [ 170.048658][ T4235] hid-generic: probe of 0003:0457:07DA.0005 failed with error -22 [ 170.252615][ T4235] usb 8-1: USB disconnect, device number 4 [ 170.511222][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 170.755780][ T6080] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 170.805387][ T7119] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 170.944201][ T7125] device ip6gretap1 entered promiscuous mode [ 171.854665][ T7147] netlink: 'syz.6.772': attribute type 3 has an invalid length. [ 171.883387][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.7.773'. [ 173.211052][ T7162] xt_hashlimit: max too large, truncated to 1048576 [ 173.794564][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.7.780'. [ 174.655363][ T7198] netlink: 'syz.3.786': attribute type 4 has an invalid length. [ 174.699083][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 174.735959][ T7202] netlink: 'syz.3.786': attribute type 4 has an invalid length. [ 175.165388][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.793'. [ 175.964596][ T7254] tipc: Started in network mode [ 176.020476][ T7254] tipc: Node identity ac1414aa, cluster identity 4711 [ 176.088967][ T7254] tipc: Enabled bearer , priority 10 [ 176.117166][ T7257] netlink: 'syz.1.803': attribute type 13 has an invalid length. [ 176.157305][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 176.232528][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 176.269271][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 176.327653][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 176.360892][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 176.409257][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 176.442715][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 176.498701][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.527056][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.622419][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 176.680994][ T7269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.808'. [ 176.739150][ T7269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.808'. [ 177.042655][ T6080] tipc: Node number set to 2886997162 [ 177.099852][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.5.814'. [ 177.347572][ T7300] netlink: 'syz.6.816': attribute type 2 has an invalid length. [ 177.407868][ T7300] netlink: 'syz.6.816': attribute type 1 has an invalid length. [ 177.439457][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.816'. [ 177.695397][ T7312] loop1: detected capacity change from 0 to 512 [ 177.773506][ T7312] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 177.885522][ T7312] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 177.928961][ T7312] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c014e028, mo2=0002] [ 177.990196][ T7312] EXT4-fs (loop1): orphan cleanup on readonly fs [ 178.026787][ T7312] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 178.037423][ T7312] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 178.053396][ T7312] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 178.067781][ T7312] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.820: bg 0: block 40: padding at end of block bitmap is not set [ 178.087549][ T7312] EXT4-fs (loop1): Remounting filesystem read-only [ 178.097261][ T7312] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 178.106949][ T7312] EXT4-fs (loop1): Remounting filesystem read-only [ 178.136289][ T7331] netlink: 156 bytes leftover after parsing attributes in process `syz.3.824'. [ 178.152828][ T7312] EXT4-fs (loop1): 1 truncate cleaned up [ 178.158541][ T7312] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,noblock_validity,dioread_lock,nouid32,nomblk_io_submit,. Quota mode: writeback. [ 178.403991][ T7312] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 178.553560][ T7352] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 178.553560][ T7352] The task syz.6.827 (7352) triggered the difference, watch for misbehavior. [ 178.788943][ T4754] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 179.173597][ T4754] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 179.191880][ T4754] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 26232, setting to 8 [ 179.231272][ T4754] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 179.261909][ T4754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.569044][ T4754] usb 2-1: string descriptor 0 read error: -71 [ 179.609203][ T6080] libceph: connect (1)[c::]:6789 error -101 [ 179.622009][ T6080] libceph: mon0 (1)[c::]:6789 connect error [ 179.659457][ T4754] usb 2-1: USB disconnect, device number 5 [ 179.781615][ T7381] ceph: No mds server is up or the cluster is laggy [ 179.905202][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.935355][ T6080] libceph: connect (1)[c::]:6789 error -101 [ 179.945715][ T6080] libceph: mon0 (1)[c::]:6789 connect error [ 180.104499][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.840'. [ 180.200586][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.840'. [ 180.265171][ T7410] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 180.326414][ T7410] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 180.369764][ T7417] netlink: 68 bytes leftover after parsing attributes in process `syz.5.843'. [ 181.030172][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 181.106640][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 181.887993][ T7477] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.856'. [ 182.003632][ T7482] batman_adv: batadv0: Adding interface: dummy0 [ 182.013034][ T7482] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.093734][ T7482] batman_adv: batadv0: Interface activated: dummy0 [ 182.135285][ T7486] batadv0: mtu less than device minimum [ 182.162624][ T7486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 182.176003][ T7486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 182.188670][ T7486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 182.201223][ T7486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 182.213946][ T7486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 182.226529][ T7486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 182.239122][ T7486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 182.251654][ T7486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 182.264206][ T7486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 182.499367][ T7470] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.856'. [ 182.512058][ T7494] netlink: 'syz.6.861': attribute type 9 has an invalid length. [ 182.550135][ T7494] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.861'. [ 183.252069][ T7508] loop2: detected capacity change from 0 to 7 [ 183.268956][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 183.290200][ T7508] loop2: [ 183.293217][ T7508] loop2: partition table partially beyond EOD, truncated [ 183.644217][ T7528] loop1: detected capacity change from 0 to 512 [ 183.822829][ T7528] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.875: iget: bad i_size value: 38620345925642 [ 183.859214][ T4752] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 183.874834][ T7528] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.875: couldn't read orphan inode 15 (err -117) [ 183.897749][ T7528] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.084729][ T7528] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.875: bg 0: block 5: invalid block bitmap [ 184.125615][ T7528] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 380 with error 28 [ 184.153897][ T7528] EXT4-fs (loop1): This should not happen!! Data will be lost [ 184.153897][ T7528] [ 184.184784][ T7528] EXT4-fs (loop1): Total free blocks count 0 [ 184.199825][ T7528] EXT4-fs (loop1): Free/Dirty block details [ 184.205923][ T7528] EXT4-fs (loop1): free_blocks=0 [ 184.239251][ T4752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 184.251403][ T7528] EXT4-fs (loop1): dirty_blocks=384 [ 184.256687][ T7528] EXT4-fs (loop1): Block reservation details [ 184.289129][ T7528] EXT4-fs (loop1): i_reserved_data_blocks=384 [ 184.303675][ T4752] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 184.325401][ T4752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.367178][ T7539] EXT4-fs (loop1): shut down requested (0) [ 184.375534][ T4752] usb 4-1: config 0 descriptor?? [ 184.419252][ T7526] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 184.476363][ T7554] netlink: 'syz.6.884': attribute type 1 has an invalid length. [ 184.494503][ T7554] netlink: 'syz.6.884': attribute type 4 has an invalid length. [ 184.518395][ T7554] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.884'. [ 184.883357][ T4752] wacom 0003:056A:0084.0006: unknown main item tag 0x4 [ 184.905243][ T4752] wacom 0003:056A:0084.0006: unknown main item tag 0xd [ 184.927738][ T4752] wacom 0003:056A:0084.0006: hidraw0: USB HID v9.62 Device [HID 056a:0084] on usb-dummy_hcd.3-1/input0 [ 185.112084][ T7571] netlink: 40 bytes leftover after parsing attributes in process `syz.6.891'. [ 185.135317][ T4235] usb 4-1: USB disconnect, device number 5 [ 185.190750][ T7550] loop7: detected capacity change from 0 to 40427 [ 185.251074][ T7550] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 185.271072][ T7550] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 185.284403][ T7574] fido_id[7574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 185.364340][ T7550] F2FS-fs (loop7): Found nat_bits in checkpoint [ 185.520558][ T7550] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 185.539234][ T7550] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 185.693432][ T7550] attempt to access beyond end of device [ 185.693432][ T7550] loop7: rw=2049, want=77960, limit=40427 [ 185.978957][ T4752] Bluetooth: hci1: command 0x0406 tx timeout [ 185.999050][ T4752] Bluetooth: hci2: command 0x0406 tx timeout [ 186.040205][ T7589] device vlan0 entered promiscuous mode [ 186.255619][ T7589] device vlan0 left promiscuous mode [ 187.262923][ T7571] loop6: detected capacity change from 0 to 65536 [ 187.716433][ T7550] syz.7.883 (7550): drop_caches: 2 [ 187.897958][ T7571] XFS (loop6): Mounting V5 Filesystem [ 188.055670][ T7571] XFS (loop6): Ending clean mount [ 188.171282][ T5051] XFS (loop6): Unmounting Filesystem [ 189.063347][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.903'. [ 189.489659][ T7645] loop6: detected capacity change from 0 to 4096 [ 189.656854][ T26] audit: type=1800 audit(1783178725.460:493): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.914" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 189.820723][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 189.826813][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 189.930273][ T7656] ceph: No mds server is up or the cluster is laggy [ 189.958665][ T7668] libceph: secret too big 32 [ 190.142172][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 190.148259][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 190.186664][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.6.924'. [ 190.416579][ T7679] bridge0: port 3(erspan0) entered blocking state [ 190.462445][ T7679] bridge0: port 3(erspan0) entered disabled state [ 190.516447][ T7679] device erspan0 entered promiscuous mode [ 190.557166][ T7679] bridge0: port 3(erspan0) entered blocking state [ 190.564479][ T7679] bridge0: port 3(erspan0) entered forwarding state [ 190.685770][ T7681] device erspan0 left promiscuous mode [ 190.711737][ T7681] bridge0: port 3(erspan0) entered disabled state [ 190.769011][ T7686] netlink: 'syz.7.925': attribute type 10 has an invalid length. [ 190.901293][ T7686] team0: Device veth1_vlan failed to register rx_handler [ 190.964334][ T7690] netlink: 24 bytes leftover after parsing attributes in process `syz.6.928'. [ 191.252869][ T7711] netlink: 'syz.6.937': attribute type 1 has an invalid length. [ 191.268140][ T7711] netlink: 'syz.6.937': attribute type 1 has an invalid length. [ 191.277554][ T7711] netlink: 264 bytes leftover after parsing attributes in process `syz.6.937'. [ 191.294281][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'. [ 191.306021][ T7711] netlink: 'syz.6.937': attribute type 1 has an invalid length. [ 191.318641][ T7711] netlink: 'syz.6.937': attribute type 1 has an invalid length. [ 191.327944][ T7711] netlink: 264 bytes leftover after parsing attributes in process `syz.6.937'. [ 191.347046][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'. [ 191.859024][ T4749] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 192.105096][ T4749] usb 7-1: Using ep0 maxpacket: 32 [ 192.229265][ T4749] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 192.239322][ T7735] fuse: root generation should be zero [ 192.247378][ T4749] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 192.256636][ T4749] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 192.272965][ T4749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.284258][ T4749] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 192.301969][ T4749] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 192.346035][ T4749] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 192.355800][ T4749] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.378175][ T4749] usb 7-1: config 0 descriptor?? [ 192.647285][ T4749] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 192.798530][ T26] audit: type=1326 audit(1783178728.600:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.5.959" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9340c23e59 code=0x0 [ 192.846381][ T4757] usb 7-1: USB disconnect, device number 3 [ 192.871576][ T4757] usblp0: removed [ 193.070708][ T7771] loop7: detected capacity change from 0 to 4096 [ 193.144740][ T7772] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.028743][ T7807] xt_hashlimit: size too large, truncated to 1048576 [ 194.153022][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.159547][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.047934][ T7877] fuse: Bad value for 'fd' [ 197.219311][ T7855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.361212][ T7855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.345515][ T7855] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.354670][ T7855] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.370003][ T7855] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.384762][ T7855] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.692067][ T7860] netlink: 180 bytes leftover after parsing attributes in process `syz.6.999'. [ 198.715628][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1022'. [ 199.152354][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1036'. [ 199.456559][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1040'. [ 199.523555][ T7960] HTB: quantum of class 80090008 is big. Consider r2q change. [ 199.673060][ T7955] chnl_net:caif_netlink_parms(): no params data found [ 199.782621][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 199.847056][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 199.859303][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 199.866705][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 199.874486][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 199.882378][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 199.890299][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 199.899057][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 199.914599][ T7974] team0: Port device syz_tun removed [ 199.922026][ T7974] batman_adv: batadv0: Interface deactivated: dummy0 [ 199.929332][ T7974] batman_adv: batadv0: Removing interface: dummy0 [ 199.936905][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 199.950800][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.958361][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.971186][ T7974] device bridge_slave_0 left promiscuous mode [ 199.977834][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.988782][ T7974] device bridge_slave_1 left promiscuous mode [ 200.003115][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.031876][ T7974] bond0: (slave bond_slave_0): Releasing backup interface [ 200.063359][ T7974] bond0: (slave bond_slave_1): Releasing backup interface [ 200.127450][ T7974] team0: Port device team_slave_0 removed [ 200.161756][ T7974] team0: Port device team_slave_1 removed [ 200.179525][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.187083][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.199397][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.207026][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.231976][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 200.265015][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1052'. [ 200.299069][ T7995] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.307866][ T7995] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.316992][ T7995] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.325784][ T7995] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.378235][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1052'. [ 200.435277][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.454564][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.465673][ T7955] device bridge_slave_0 entered promiscuous mode [ 200.474750][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.482230][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.490747][ T7955] device bridge_slave_1 entered promiscuous mode [ 200.551297][ T7955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.580331][ T7955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.655001][ T7955] team0: Port device team_slave_0 added [ 200.677181][ T7955] team0: Port device team_slave_1 added [ 200.728553][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.738188][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.767334][ T7955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.836791][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.844264][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.873827][ T7955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.948191][ T7955] device hsr_slave_0 entered promiscuous mode [ 200.957525][ T7955] device hsr_slave_1 entered promiscuous mode [ 201.126239][ T7955] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 201.147226][ T7955] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 201.157860][ T7955] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 201.168332][ T7955] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 201.256426][ T7955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.287518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.298567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.321350][ T7955] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.335675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.344450][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 201.354929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.378535][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.385704][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.409340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.419086][ T4234] Bluetooth: hci3: command 0x0409 tx timeout [ 201.441684][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.455282][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.469841][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.477112][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.496813][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.530875][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.587339][ T8027] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 201.596591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.615802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.617092][ T8027] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.1065'. [ 201.659031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.687693][ T7955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.700534][ T7955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.715528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.741347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.758519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.777764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.828211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.214732][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.237241][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.259464][ T7955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.939643][ T4232] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 202.970095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.005304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.070227][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.096558][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.138644][ T7955] device veth0_vlan entered promiscuous mode [ 203.157017][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.183975][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.191465][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 203.220614][ T7955] device veth1_vlan entered promiscuous mode [ 203.304491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 203.321423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.329493][ T4232] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 203.337708][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.358200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.375364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.389817][ T4232] usb 4-1: config 0 has no interface number 0 [ 203.402391][ T7955] device veth0_macvtap entered promiscuous mode [ 203.422222][ T8076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1082'. [ 203.482213][ T7955] device veth1_macvtap entered promiscuous mode [ 203.499172][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 203.546987][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.578290][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.591292][ T4232] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 203.613650][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.619954][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.651024][ T4232] usb 4-1: Product: syz [ 203.655254][ T4232] usb 4-1: Manufacturer: syz [ 203.659900][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.670393][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.700340][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.710275][ T4232] usb 4-1: SerialNumber: syz [ 203.726156][ T4232] usb 4-1: config 0 descriptor?? [ 203.731404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.760710][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.783528][ T4232] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 203.796669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.799038][ T4232] usb 4-1: No valid video chain found. [ 203.831024][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.849997][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.870117][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.916081][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.952442][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.986427][ T4232] usb 4-1: USB disconnect, device number 6 [ 203.993973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.011379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.044391][ T7955] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.069443][ T7955] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.098606][ T7955] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.120538][ T7955] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.307942][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.319771][ T8092] overlayfs: failed to clone lowerpath [ 204.340606][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.360661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.408692][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.438356][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.463515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.710101][ T8104] bridge0: port 3(erspan0) entered blocking state [ 204.741595][ T8104] bridge0: port 3(erspan0) entered disabled state [ 204.772069][ T8104] device erspan0 entered promiscuous mode [ 204.830728][ T8104] bridge0: port 3(erspan0) entered blocking state [ 204.837241][ T8104] bridge0: port 3(erspan0) entered forwarding state [ 204.904403][ T8108] netlink: 'syz.8.1035': attribute type 10 has an invalid length. [ 205.023291][ T8108] team0: Device veth1_vlan failed to register rx_handler [ 205.123664][ T8105] device erspan0 left promiscuous mode [ 205.187348][ T8105] bridge0: port 3(erspan0) entered disabled state [ 205.578998][ T4757] Bluetooth: hci3: command 0x040f tx timeout [ 206.361180][ T8134] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1102'. [ 206.407990][ T8134] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1102'. [ 206.749041][ T7] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 207.008924][ T7] usb 9-1: Using ep0 maxpacket: 16 [ 207.169245][ T7] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.198942][ T7] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.234327][ T7] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 207.297169][ T7] usb 9-1: config 0 interface 0 has no altsetting 0 [ 207.321111][ T7] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 207.348877][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.389789][ T7] usb 9-1: config 0 descriptor?? [ 207.659107][ T4746] Bluetooth: hci3: command 0x0419 tx timeout [ 208.154812][ T4231] usb 9-1: USB disconnect, device number 2 [ 210.105491][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.112976][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.999930][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.064712][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.705374][ T8188] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.721832][ T8188] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.734831][ T8188] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.747456][ T8188] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.214925][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1138'. [ 212.323594][ T8224] netlink: 'syz.5.1138': attribute type 1 has an invalid length. [ 212.986018][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1144'. [ 213.385631][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1147'. [ 213.704582][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1149'. [ 214.152673][ T8276] overlayfs: failed to clone upperpath [ 215.090582][ T8349] sctp: [Deprecated]: syz.3.1170 (pid 8349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.090582][ T8349] Use struct sctp_sack_info instead [ 216.153869][ T8413] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1185'. [ 216.193974][ T8414] lo: Caught tx_queue_len zero misconfig [ 216.280445][ T8418] fuse: Bad value for 'fd' [ 216.431897][ T8424] netlink: 'syz.7.1191': attribute type 18 has an invalid length. [ 216.443887][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1191'. [ 216.459165][ T8426] device batadv_slave_0 entered promiscuous mode [ 216.513391][ T8424] netlink: 'syz.7.1191': attribute type 18 has an invalid length. [ 216.526058][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1191'. [ 216.600627][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1192'. [ 217.032027][ T8446] netlink: 'syz.1.1200': attribute type 4 has an invalid length. [ 217.103600][ T8449] netlink: 'syz.1.1200': attribute type 4 has an invalid length. [ 217.341813][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1205'. [ 218.002416][ T8477] device syzkaller0 entered promiscuous mode [ 218.037368][ T8477] device syzkaller0 left promiscuous mode [ 218.116146][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'. [ 218.854606][ T8506] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1223'. [ 219.623983][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1237'. [ 219.646019][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1237'. [ 219.662528][ T8537] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.671556][ T8537] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.680510][ T8537] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.689290][ T8537] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.712165][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1237'. [ 219.761077][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1237'. [ 219.834996][ T8544] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1239'. [ 219.860642][ T8542] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 220.197306][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1243'. [ 220.676253][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1251'. [ 221.304829][ T8600] netlink: 'syz.1.1262': attribute type 1 has an invalid length. [ 221.320880][ T8600] netlink: 'syz.1.1262': attribute type 22 has an invalid length. [ 222.284017][ T8633] net_ratelimit: 12 callbacks suppressed [ 222.284035][ T8633] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 222.806111][ T8648] loop3: detected capacity change from 0 to 256 [ 222.882894][ T8648] exfat: Deprecated parameter 'namecase' [ 222.908472][ T8648] exfat: Deprecated parameter 'namecase' [ 222.961531][ T8655] __nla_validate_parse: 1 callbacks suppressed [ 222.961548][ T8655] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.1282'. [ 222.993982][ T8648] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 222.999858][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1282'. [ 223.238712][ T8659] loop3: detected capacity change from 0 to 1024 [ 223.275659][ T8659] EXT4-fs (loop3): Ignoring removed bh option [ 223.335617][ T8659] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,minixdf,. Quota mode: none. [ 223.491153][ T8659] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.1284: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 223.518324][ T8659] EXT4-fs (loop3): Remounting filesystem read-only [ 223.525894][ T8659] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 223.622798][ T8659] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.1284: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 223.760752][ T8659] EXT4-fs (loop3): Remounting filesystem read-only [ 223.980529][ T4188] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /181/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 224.041406][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 224.055276][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1292'. [ 224.067441][ T4188] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /181/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 224.097930][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 224.106504][ T4188] EXT4-fs error (device loop3): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 224.141790][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 224.148352][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 224.164071][ T4188] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /181/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 224.201261][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 224.207920][ T4188] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /181/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 224.239693][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 224.246448][ T4188] EXT4-fs error (device loop3): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 224.282574][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 224.295399][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 224.324890][ T4188] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /181/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 224.377719][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 224.391004][ T4231] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 224.406773][ T4188] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /181/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 224.455745][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 224.465742][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 224.490344][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1297'. [ 224.510506][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 224.565361][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 224.596866][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 224.654861][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 224.679130][ T4231] usb 9-1: Using ep0 maxpacket: 8 [ 224.699695][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 224.725233][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 224.751984][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1300'. [ 224.839259][ T4231] usb 9-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1023 [ 224.860415][ T4231] usb 9-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.927338][ T4231] usb 9-1: config 1 interface 0 has no altsetting 0 [ 225.120888][ T8703] smc: net device bond0 applied user defined pnetid SYZ2 [ 225.130608][ T8703] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1303'. [ 225.149267][ T4231] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 225.161425][ T4231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.174573][ T4231] usb 9-1: Product: syz [ 225.181783][ T4231] usb 9-1: Manufacturer: syz [ 225.186670][ T4231] usb 9-1: SerialNumber: syz [ 225.229396][ T8675] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.249805][ T8675] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.299598][ T8703] smc: removing net device bond0 with user defined pnetid SYZ2 [ 225.315141][ T8703] bond0 (unregistering): Released all slaves [ 225.557848][ T4231] usb 9-1: USB disconnect, device number 3 [ 226.407203][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1316'. [ 226.576752][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1316'. [ 227.362342][ T8322] device hsr_slave_0 left promiscuous mode [ 227.376432][ T8322] device hsr_slave_1 left promiscuous mode [ 227.448355][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.466858][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.978092][ T8322] team0 (unregistering): Port device team_slave_1 removed [ 227.995617][ T8322] team0 (unregistering): Port device team_slave_0 removed [ 228.011675][ T8322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.045134][ T8322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.252639][ T8322] bond0 (unregistering): Released all slaves [ 228.797833][ T8860] loop8: detected capacity change from 0 to 256 [ 228.864827][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 229.240798][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.247999][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.287994][ T8817] device bridge_slave_0 entered promiscuous mode [ 229.359485][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.376850][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.418518][ T8817] device bridge_slave_1 entered promiscuous mode [ 229.487740][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.542771][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.578953][ T4746] Bluetooth: hci1: command 0x0409 tx timeout [ 229.694057][ T8817] team0: Port device team_slave_0 added [ 229.714506][ T8817] team0: Port device team_slave_1 added [ 229.799584][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.847494][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.945604][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.995729][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.030460][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.118885][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.287746][ T8817] device hsr_slave_0 entered promiscuous mode [ 230.333688][ T8817] device hsr_slave_1 entered promiscuous mode [ 230.386242][ T8817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.399477][ T8817] Cannot create hsr debugfs directory [ 231.335722][ T8817] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 231.376594][ T8817] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 231.426423][ T8817] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 231.503313][ T8817] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 231.658962][ T4746] Bluetooth: hci1: command 0x041b tx timeout [ 231.730809][ T26] audit: type=1326 audit(1783178767.540:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.1.1352" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd10324ce59 code=0x0 [ 231.804164][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.845549][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.857194][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.893380][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.908985][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 231.940552][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.950200][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.969748][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.976939][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.069253][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.090943][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.130016][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.189393][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.196513][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.249405][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.303113][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.343898][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.395836][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.457535][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.567978][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1356'. [ 232.643575][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.660321][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.795346][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.834575][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.865733][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.894310][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.937491][ T8817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.971998][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1360'. [ 233.172041][ T8979] device bridge_slave_1 left promiscuous mode [ 233.178412][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.233026][ T8979] device bridge_slave_0 left promiscuous mode [ 233.279221][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.322367][ T8979] team0: Port device bridge0 removed [ 233.398226][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1365'. [ 233.698514][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.729442][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.739245][ T4757] Bluetooth: hci1: command 0x040f tx timeout [ 233.768236][ T9004] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1374'. [ 233.864005][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.211297][ T9025] No such timeout policy "syz1" [ 234.639134][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.670154][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.764685][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.825797][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.861503][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.887614][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.929948][ T8817] device veth0_vlan entered promiscuous mode [ 234.990803][ T8817] device veth1_vlan entered promiscuous mode [ 235.095572][ T8817] device veth0_macvtap entered promiscuous mode [ 235.143263][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.159852][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.191178][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.211517][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.244620][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.308450][ T8817] device veth1_macvtap entered promiscuous mode [ 235.331190][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 235.354855][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 235.395985][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 235.414335][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.449605][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.488903][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.536609][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.589321][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.716323][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.740558][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.780532][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.819475][ T4746] Bluetooth: hci1: command 0x0419 tx timeout [ 235.841256][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.867826][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.904757][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.935830][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.969835][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.994849][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.021053][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.065890][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1387'. [ 236.124023][ T8817] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.161024][ T8817] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.191002][ T8817] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.224526][ T8817] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.495006][ T8312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.517528][ T8312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.558087][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 236.607176][ T8306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.627772][ T8306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.651329][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.730392][ T26] audit: type=1804 audit(1783178772.540:496): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1390" name="file1" dev="ramfs" ino=53261 res=1 errno=0 [ 237.810367][ T9123] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 237.818329][ T9123] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 239.433961][ T9192] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.1408'. [ 239.464715][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1408'. [ 240.163279][ T26] audit: type=1326 audit(1783178775.970:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.7.1403" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1140f1e59 code=0x0 [ 240.414173][ T9216] sd 0:0:1:0: PR command failed: 2 [ 240.428959][ T9216] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 240.435860][ T9216] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 241.771863][ T9247] netlink: 'syz.9.1425': attribute type 1 has an invalid length. [ 242.182964][ T9266] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 242.818277][ T9278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1435'. [ 242.948108][ T9283] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.1436'. [ 242.983828][ T9283] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1436'. [ 243.062028][ T9285] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 243.099226][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'. [ 243.139268][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1439'. [ 243.468324][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1442'. [ 243.996181][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1451'. [ 244.061062][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1452'. [ 244.126112][ T9316] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 244.172495][ T9316] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 244.745483][ T9343] fuse: Bad value for 'fd' [ 245.358270][ T9339] loop9: detected capacity change from 0 to 32768 [ 245.377677][ T9364] __nla_validate_parse: 1 callbacks suppressed [ 245.377695][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1469'. [ 245.416307][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1470'. [ 245.585499][ T9339] XFS (loop9): Mounting V5 Filesystem [ 245.600383][ T9374] mmap: syz.5.1471 (9374) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 245.635105][ T9378] overlayfs: upper fs does not support file handles, falling back to index=off. [ 245.862752][ T9339] XFS (loop9): Ending clean mount [ 245.951280][ T9339] XFS (loop9): Quotacheck needed: Please wait. [ 246.046059][ T9393] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1477'. [ 246.113529][ T9339] XFS (loop9): Quotacheck: Done. [ 246.284225][ T8817] XFS (loop9): Unmounting Filesystem [ 246.494808][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1481'. [ 247.076251][ T9431] ceph: No mds server is up or the cluster is laggy [ 247.144477][ T9448] syz.1.1490[9448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.144704][ T9448] syz.1.1490[9448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.644152][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1504'. [ 247.694177][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1504'. [ 247.703785][ T9477] netlink: 'syz.7.1504': attribute type 19 has an invalid length. [ 247.713324][ T9477] netlink: 'syz.7.1504': attribute type 20 has an invalid length. [ 247.808998][ T4234] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 247.852509][ T26] audit: type=1326 audit(1783178783.660:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.7.1508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1140f1e59 code=0x7ffc0000 [ 247.911364][ T26] audit: type=1326 audit(1783178783.690:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.7.1508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1140f1e59 code=0x7ffc0000 [ 247.973932][ T26] audit: type=1326 audit(1783178783.690:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.7.1508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1140f1e59 code=0x7ffc0000 [ 248.018442][ T26] audit: type=1326 audit(1783178783.690:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.7.1508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1140f1e59 code=0x7ffc0000 [ 248.089101][ T26] audit: type=1326 audit(1783178783.690:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.7.1508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa1140f1e59 code=0x7ffc0000 [ 248.131973][ T9498] fuse: Bad value for 'fd' [ 248.149295][ T26] audit: type=1326 audit(1783178783.690:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.7.1508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1140f1e59 code=0x7ffc0000 [ 248.209185][ T4234] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 248.226799][ T4234] usb 9-1: config 0 has no interface number 0 [ 248.236592][ T26] audit: type=1326 audit(1783178783.690:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.7.1508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1140f1e59 code=0x7ffc0000 [ 248.264957][ T4234] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 248.297154][ T4234] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 248.312252][ T26] audit: type=1326 audit(1783178783.690:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.7.1508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1140f1e59 code=0x7ffc0000 [ 248.340012][ T26] audit: type=1326 audit(1783178783.690:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.7.1508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1140f1e59 code=0x7ffc0000 [ 248.367583][ T26] audit: type=1326 audit(1783178783.690:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.7.1508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1140f1e59 code=0x7ffc0000 [ 248.446228][ T9512] overlayfs: failed to clone upperpath [ 248.509249][ T4234] usb 9-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 248.530198][ T4234] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.545897][ T9515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1519'. [ 248.560785][ T4234] usb 9-1: Product: syz [ 248.567331][ T4234] usb 9-1: Manufacturer: syz [ 248.584819][ T4234] usb 9-1: SerialNumber: syz [ 248.607704][ T4234] usb 9-1: config 0 descriptor?? [ 248.633327][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1519'. [ 248.650580][ T4234] cypress_m8 9-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 248.670267][ T4234] nokiaca42v2: probe of ttyUSB0 failed with error -22 [ 248.936891][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1526'. [ 250.152936][ T9563] loop9: detected capacity change from 0 to 128 [ 250.267801][ T9563] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 250.287447][ T9563] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.568319][ T6066] usb 9-1: USB disconnect, device number 4 [ 250.610674][ T6066] cypress_m8 9-1:0.35: device disconnected [ 250.748909][ T23] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 251.719109][ T23] usb 10-1: Using ep0 maxpacket: 16 [ 251.839171][ T23] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 251.847402][ T23] usb 10-1: config 0 has no interface number 0 [ 251.889004][ T23] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 251.939000][ T23] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 252.129184][ T23] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 252.168910][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.179213][ T23] usb 10-1: Product: syz [ 252.183515][ T23] usb 10-1: Manufacturer: syz [ 252.208776][ T23] usb 10-1: SerialNumber: syz [ 252.249638][ T23] usb 10-1: config 0 descriptor?? [ 252.279928][ T9576] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 252.309004][ T9576] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 252.545280][ T9576] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 252.560232][ T9576] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 252.799127][ T23] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 254.019426][ T9622] 9pnet: bogus RWRITE count (2 > 1) [ 254.047001][ T9587] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.056162][ T9587] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.066800][ T9587] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.076819][ T9587] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.299323][ T23] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 254.318919][ T23] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 254.339050][ T23] asix: probe of 10-1:0.34 failed with error -71 [ 254.355861][ T23] usb 10-1: USB disconnect, device number 2 [ 254.409398][ T9587] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.418399][ T9587] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.427696][ T9587] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.437054][ T9587] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.736960][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1544'. [ 255.123766][ T9637] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.1557'. [ 255.154655][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1557'. [ 255.302002][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1561'. [ 255.581628][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.588091][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.824460][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1575'. [ 256.898508][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1575'. [ 257.152003][ T9722] overlayfs: failed to clone upperpath [ 257.185372][ T9726] overlayfs: failed to clone upperpath [ 260.045893][ T9826] loop8: detected capacity change from 0 to 512 [ 260.266936][ T9826] EXT4-fs (loop8): Ignoring removed nobh option [ 260.379902][ T9826] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 260.401413][ T9826] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.662019][ T7955] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /89/bus: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 260.803558][ T7955] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 260.878026][ T7955] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 261.859086][ T9863] overlayfs: failed to clone upperpath [ 262.435094][ T9756] Set syz1 is full, maxelem 65536 reached [ 262.835937][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1615'. [ 262.906625][ T9873] chnl_net:caif_netlink_parms(): no params data found [ 263.016536][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 263.016625][ T26] audit: type=1804 audit(1783178798.820:518): pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1618" name="file1" dev="ramfs" ino=56727 res=1 errno=0 [ 263.050345][ T9897] overlayfs: failed to clone upperpath [ 263.189399][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.196740][ T9873] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.205909][ T9873] device bridge_slave_0 entered promiscuous mode [ 263.216497][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.226271][ T9873] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.234591][ T9873] device bridge_slave_1 entered promiscuous mode [ 263.262572][ T9873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.274966][ T9873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.310794][ T9873] team0: Port device team_slave_0 added [ 263.322535][ T9873] team0: Port device team_slave_1 added [ 263.362629][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.391469][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.463985][ T9873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.509207][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.529306][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.569651][ T9873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.732624][ T9873] device hsr_slave_0 entered promiscuous mode [ 263.757752][ T9873] device hsr_slave_1 entered promiscuous mode [ 263.771156][ T9873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.787294][ T9873] Cannot create hsr debugfs directory [ 264.167965][ T9916] fuse: Bad value for 'fd' [ 264.459037][ T6067] Bluetooth: hci3: command 0x0409 tx timeout [ 264.772886][ T9920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1628'. [ 265.269717][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1633'. [ 265.596479][ T9956] overlayfs: failed to clone upperpath [ 265.702647][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1638'. [ 265.765970][ T9959] device team1 entered promiscuous mode [ 265.782121][ T9959] 8021q: adding VLAN 0 to HW filter on device team1 [ 265.807635][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1638'. [ 265.932517][ T9962] device team2 entered promiscuous mode [ 265.950005][ T9962] 8021q: adding VLAN 0 to HW filter on device team2 [ 266.093156][ T9981] netlink: 'syz.9.1643': attribute type 3 has an invalid length. [ 266.121150][ T9981] netlink: 'syz.9.1643': attribute type 3 has an invalid length. [ 266.244374][ T9873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.280209][ T9873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.316442][ T9873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.346316][ T9873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.548862][ T6067] Bluetooth: hci3: command 0x041b tx timeout [ 266.658307][ T9873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.714496][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.729889][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.771209][ T9873] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.815719][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.845388][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.866832][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.874033][ T8322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.918509][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.948093][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.978606][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.985817][ T8322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.050250][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.078320][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.108757][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.127402][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.189620][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.242014][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.272228][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.293498][T10029] netlink: 'syz.9.1656': attribute type 11 has an invalid length. [ 267.303381][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.314362][T10029] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1656'. [ 267.333984][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.367427][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.400962][ T9873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.424498][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.455762][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.481165][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.745335][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.759511][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.787482][ T9873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.867529][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.892395][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.953696][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.972817][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.007907][ T9873] device veth0_vlan entered promiscuous mode [ 268.022803][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.043258][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.085183][ T9873] device veth1_vlan entered promiscuous mode [ 268.207298][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.225972][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.244594][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.261204][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.274379][ T9873] device veth0_macvtap entered promiscuous mode [ 268.286392][T10070] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1663'. [ 268.306102][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.313667][T10070] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.345511][ T9873] device veth1_macvtap entered promiscuous mode [ 268.346899][T10072] loop9: detected capacity change from 0 to 128 [ 268.395895][T10070] netlink: 'syz.7.1663': attribute type 10 has an invalid length. [ 268.420418][T10070] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.427649][T10070] bridge0: port 2(bridge_slave_1) entered listening state [ 268.435022][T10070] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.442184][T10070] bridge0: port 1(bridge_slave_0) entered listening state [ 268.455362][T10072] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 268.471194][T10072] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.486405][T10070] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 268.523271][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.536804][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.562923][T10072] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz.9.1664: Invalid inode table block 14395694394777257927 in block_group 0 [ 268.596440][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.611812][T10072] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 268.621757][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 268.622426][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.637928][T10072] EXT4-fs error (device loop9): ext4_dirty_inode:6077: inode #12: comm syz.9.1664: mark_inode_dirty error [ 268.650816][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.661614][T10072] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz.9.1664: Invalid inode table block 14395694394777257927 in block_group 0 [ 268.677267][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.687527][T10072] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 268.700538][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.711261][T10072] EXT4-fs error (device loop9): ext4_dirty_inode:6077: inode #12: comm syz.9.1664: mark_inode_dirty error [ 268.723490][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.734799][T10072] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz.9.1664: Invalid inode table block 14395694394777257927 in block_group 0 [ 268.773091][T10072] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 268.785696][ T9873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.793433][T10072] EXT4-fs error (device loop9): ext4_ext_truncate:4487: inode #12: comm syz.9.1664: mark_inode_dirty error [ 268.820612][T10072] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz.9.1664: Invalid inode table block 14395694394777257927 in block_group 0 [ 268.827556][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.851877][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.880191][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.899281][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.944281][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.955463][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.966236][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.976903][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.994457][ T9873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.107712][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.121372][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.159751][ T9873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.196600][ T9873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.219039][ T9873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.243310][ T9873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.505115][T10078] ceph: No mds server is up or the cluster is laggy [ 269.529392][ T8379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.551535][T10081] ceph: No mds server is up or the cluster is laggy [ 269.569198][ T8379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.584005][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.644676][ T8306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.669684][ T8306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.677268][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.888090][T10113] netlink: 'syz.7.1674': attribute type 27 has an invalid length. [ 270.252776][T10124] UBIFS error (pid: 10124): cannot open "./file0", error -22 [ 270.309288][T10126] VFS: Mount too revealing [ 270.622324][T10113] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.629618][T10113] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.702278][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 271.354555][T10113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.427726][T10113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.023679][T10113] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.032706][T10113] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.041904][T10113] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.050842][T10113] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.180539][T10113] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.189610][T10113] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.198503][T10113] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.207873][T10113] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.275101][T10116] netlink: 'syz.7.1674': attribute type 27 has an invalid length. [ 272.313439][T10116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.321252][T10116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.331234][T10116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.340759][T10116] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.351939][T10116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.388881][ T6067] Bluetooth: hci1: command 0x0409 tx timeout [ 272.772636][T10128] chnl_net:caif_netlink_parms(): no params data found [ 273.036857][T10128] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.069100][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.122413][T10128] device bridge_slave_0 entered promiscuous mode [ 273.154614][T10128] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.181046][T10128] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.221985][T10128] device bridge_slave_1 entered promiscuous mode [ 273.327230][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.401168][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.533698][T10128] team0: Port device team_slave_0 added [ 273.591805][T10128] team0: Port device team_slave_1 added [ 273.678276][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.719268][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.806788][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.841556][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.848555][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.944092][ T26] audit: type=1326 audit(1783178809.750:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9340c23e59 code=0x7ffc0000 [ 274.002978][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.024750][ T26] audit: type=1326 audit(1783178809.780:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9340c23e59 code=0x7ffc0000 [ 274.136348][ T26] audit: type=1326 audit(1783178809.780:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9340c23e59 code=0x7ffc0000 [ 274.191330][T10128] device hsr_slave_0 entered promiscuous mode [ 274.223633][T10128] device hsr_slave_1 entered promiscuous mode [ 274.232565][T10128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.250589][ T26] audit: type=1326 audit(1783178809.780:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9340c23e59 code=0x7ffc0000 [ 274.286616][T10128] Cannot create hsr debugfs directory [ 274.339983][ T26] audit: type=1326 audit(1783178809.780:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9340c23e59 code=0x7ffc0000 [ 274.432834][ T26] audit: type=1326 audit(1783178809.780:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9340c23e59 code=0x7ffc0000 [ 274.462593][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 274.544339][ T26] audit: type=1326 audit(1783178809.780:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9340c23e59 code=0x7ffc0000 [ 274.669048][ T26] audit: type=1326 audit(1783178809.780:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9340c23e59 code=0x7ffc0000 [ 274.804394][ T26] audit: type=1326 audit(1783178809.780:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9340c23e59 code=0x7ffc0000 [ 274.941106][T10254] syz.0.1708 (10254): attempted to duplicate a private mapping with mremap. This is not supported. [ 274.975596][ T26] audit: type=1326 audit(1783178809.780:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f9340c23e59 code=0x7ffc0000 [ 275.070609][T10256] fuse: blksize only supported for fuseblk [ 275.877960][T10128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.949474][T10128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.976540][T10128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 276.012427][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.019953][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.040419][T10128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 276.134502][T10300] device bridge_slave_1 left promiscuous mode [ 276.149051][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.194997][T10300] device bridge_slave_0 left promiscuous mode [ 276.228275][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.491370][T10128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.539136][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 276.563101][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.582146][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.647839][T10128] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.676950][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.693503][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.718098][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.725298][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.762804][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.781744][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.821395][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.842722][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.849883][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.886532][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.930223][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.962459][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.003669][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.052495][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.075200][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.112311][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.160764][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.191405][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.264463][T10128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.293298][T10128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.317237][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.334654][T10332] overlayfs: failed to clone upperpath [ 277.352793][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.863470][ T8313] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.935536][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.953648][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.008207][ T8313] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.056227][T10128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.101269][T10361] overlayfs: failed to clone upperpath [ 278.116973][ T8313] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.141496][ T4766] Bluetooth: hci4: command 0x0406 tx timeout [ 278.157639][T10365] overlayfs: failed to clone upperpath [ 278.235994][ T8313] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.620332][ T4746] Bluetooth: hci1: command 0x0419 tx timeout [ 278.907399][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.946419][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.026659][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.050411][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.071725][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.090341][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.101251][T10128] device veth0_vlan entered promiscuous mode [ 279.128526][T10128] device veth1_vlan entered promiscuous mode [ 279.195649][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.212259][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.236084][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.262188][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.291109][T10128] device veth0_macvtap entered promiscuous mode [ 279.334343][T10128] device veth1_macvtap entered promiscuous mode [ 279.421816][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.452930][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.483955][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.521786][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.552958][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.616061][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.658414][T10128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.726833][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.740150][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.758334][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.779530][ T8322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.795503][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 279.840041][T10431] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.848983][T10431] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.857749][T10431] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.866598][T10431] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.881076][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 280.014155][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.044202][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.072121][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.123631][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.156555][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.191170][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.235919][T10128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.277440][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1756'. [ 280.323337][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 280.360104][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.393914][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.426091][T10128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.453028][T10128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.494729][T10128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.524265][T10128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.806088][ T8322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.821662][ T8322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.863756][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.912580][ T8313] device hsr_slave_0 left promiscuous mode [ 280.927923][ T8313] device hsr_slave_1 left promiscuous mode [ 280.976025][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.002796][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.031998][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.061122][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.077963][ T8313] device bridge_slave_1 left promiscuous mode [ 281.084842][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.116410][ T8313] device bridge_slave_0 left promiscuous mode [ 281.139140][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.187773][ T8313] device veth1_macvtap left promiscuous mode [ 281.204767][ T8313] device veth0_macvtap left promiscuous mode [ 281.251608][ T8313] device veth1_vlan left promiscuous mode [ 281.257578][ T8313] device veth0_vlan left promiscuous mode [ 281.486319][T10470] loop0: detected capacity change from 0 to 32768 [ 281.609926][T10470] XFS (loop0): Mounting V5 Filesystem [ 281.772415][T10470] XFS (loop0): Ending clean mount [ 282.068672][ T9873] XFS (loop0): Unmounting Filesystem [ 282.243216][ T8313] team0 (unregistering): Port device team_slave_1 removed [ 282.324084][ T8313] team0 (unregistering): Port device team_slave_0 removed [ 282.357265][ T8313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.398476][ T8313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.621753][ T8313] bond0 (unregistering): Released all slaves [ 282.786670][ T8306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.828385][ T8306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.863457][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.888142][T10513] loop0: detected capacity change from 0 to 32768 [ 282.910648][T10518] lo speed is unknown, defaulting to 1000 [ 282.910665][T10516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1770'. [ 283.016115][T10513] find_entry called with index >= next_index [ 283.039183][T10513] find_entry called with index >= next_index [ 283.046827][T10513] find_entry called with index >= next_index [ 283.056130][T10516] smc: adding net device bond0 with user defined pnetid SYZ2 [ 283.081937][T10513] find_entry called with index >= next_index [ 283.134807][T10513] find_entry called with index >= next_index [ 283.165631][T10518] lo speed is unknown, defaulting to 1000 [ 283.175404][T10518] lo speed is unknown, defaulting to 1000 [ 283.189504][T10513] add_index: next_index = 0. Resetting! [ 283.195204][T10513] find_entry called with index >= next_index [ 283.248941][T10513] find_entry called with index >= next_index [ 283.255039][T10513] find_entry called with index >= next_index [ 283.469703][T10513] non-latin1 character 0x3ff found in JFS file name [ 283.496263][T10513] mount with iocharset=utf8 to access [ 283.577035][T10545] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 283.839095][T10518] infiniband sz1: set active [ 283.844654][T10518] infiniband sz1: added lo [ 283.882572][ T4766] lo speed is unknown, defaulting to 1000 [ 283.925886][T10554] device wireguard0 entered promiscuous mode [ 284.008557][T10554] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 284.100361][T10554] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 284.174700][T10518] RDS/IB: sz1: added [ 284.251641][T10518] smc: adding ib device sz1 with port count 1 [ 284.258120][T10518] smc: ib device sz1 port 1 has pnetid [ 284.354436][ T4766] lo speed is unknown, defaulting to 1000 [ 284.464587][T10518] lo speed is unknown, defaulting to 1000 [ 284.692043][T10581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1783'. [ 285.679348][T10593] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 285.720714][T10593] 8021q: VLANs not supported on vxcan1 [ 285.933944][T10518] lo speed is unknown, defaulting to 1000 [ 286.379310][ T4746] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 286.423009][T10615] fuse: Bad value for 'fd' [ 286.456996][T10518] lo speed is unknown, defaulting to 1000 [ 286.749467][ T4746] usb 5-1: config 0 has no interfaces? [ 286.814013][T10518] lo speed is unknown, defaulting to 1000 [ 286.909372][ T4746] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 286.941494][ T4746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.982919][ T4746] usb 5-1: Product: syz [ 286.987152][ T4746] usb 5-1: Manufacturer: syz [ 287.009016][ T4746] usb 5-1: SerialNumber: syz [ 287.056997][ T4746] usb 5-1: config 0 descriptor?? [ 287.152846][T10641] fuse: Bad value for 'fd' [ 287.208628][T10518] lo speed is unknown, defaulting to 1000 [ 287.308659][T10647] fuse: Bad value for 'fd' [ 287.332743][ T4746] usb 5-1: USB disconnect, device number 2 [ 287.656509][T10518] lo speed is unknown, defaulting to 1000 [ 288.147870][T10669] lo speed is unknown, defaulting to 1000 [ 288.961051][T10518] lo speed is unknown, defaulting to 1000 [ 289.484573][T10669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1806'. [ 289.523522][T10669] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 289.948379][T10733] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1823'. [ 290.383223][T10743] loop0: detected capacity change from 0 to 32768 [ 290.439785][T10747] netlink: 'syz.1.1828': attribute type 39 has an invalid length. [ 290.531802][T10743] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1825 (10743) [ 290.577494][T10743] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 290.587070][T10743] BTRFS info (device loop0): using free space tree [ 290.593687][T10743] BTRFS info (device loop0): has skinny extents [ 290.916535][T10743] BTRFS info (device loop0): enabling ssd optimizations [ 291.712699][T10805] overlayfs: failed to clone upperpath [ 292.258429][T10821] device vti0 entered promiscuous mode [ 294.028393][T10896] overlayfs: failed to clone upperpath [ 294.243858][T10909] autofs4:pid:10909:autofs_fill_super: called with bogus options [ 294.303267][T10911] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 294.410935][T10911] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 295.548639][T10952] team0: Port device bridge4 added [ 295.555145][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.587455][T10952] bridge0: port 3(team0) entered blocking state [ 295.593945][T10952] bridge0: port 3(team0) entered disabled state [ 295.601836][T10952] device team0 entered promiscuous mode [ 295.607417][T10952] device team_slave_0 entered promiscuous mode [ 295.614050][T10952] device team_slave_1 entered promiscuous mode [ 295.621242][T10952] device bridge4 entered promiscuous mode [ 295.627415][T10952] bridge0: port 3(team0) entered blocking state [ 295.633742][T10952] bridge0: port 3(team0) entered listening state [ 298.129063][ T4746] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 298.390620][ T4746] usb 5-1: Using ep0 maxpacket: 16 [ 298.509128][ T4746] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.540736][ T4746] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.722921][ T4746] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.746741][ T4746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.766208][ T4746] usb 5-1: Product: syz [ 298.775090][ T4746] usb 5-1: Manufacturer: syz [ 298.784606][ T4746] usb 5-1: SerialNumber: syz [ 299.119177][ T4746] usb 5-1: 0:2 : does not exist [ 299.179937][ T4746] usb 5-1: USB disconnect, device number 3 [ 299.430699][ T8573] udevd[8573]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.119415][ T4746] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 300.127731][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1925'. [ 300.389013][ T4746] usb 1-1: Using ep0 maxpacket: 8 [ 300.509168][ T4746] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.529497][ T4746] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 300.549262][ T4746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.587778][ T4746] usb 1-1: config 0 descriptor?? [ 300.651352][ T4746] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 301.532067][T11181] ------------[ cut here ]------------ [ 301.559505][T11181] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 301.567710][T11181] WARNING: CPU: 0 PID: 11181 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 301.611925][T11181] Modules linked in: [ 301.616119][T11181] CPU: 0 PID: 11181 Comm: syz.1.1935 Not tainted syzkaller #0 [ 301.644771][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.679044][T11181] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 301.692043][T11181] Code: 42 7b f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 60 1e 39 8b 4c 89 e6 89 ea e8 45 5b 71 00 <0f> 0b e9 07 fd ff ff e8 09 24 36 f8 0f 0b e9 b1 fe ff ff e8 fd 23 [ 301.713317][T11181] RSP: 0018:ffffc90002e8f9e0 EFLAGS: 00010246 [ 301.720280][T11181] RAX: bee5d69e9aec7a00 RBX: 0000000000400000 RCX: 0000000000080000 [ 301.728413][T11181] RDX: ffffc90003c63000 RSI: 00000000000041c9 RDI: 00000000000041ca [ 301.738147][T11181] RBP: 0000000000000004 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 301.754047][T11181] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88805df2c000 [ 301.768094][T11181] R13: ffff88805df2d290 R14: ffff888077450e00 R15: ffff88805df2e268 [ 301.780995][T11181] FS: 00007fd1014a56c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 301.796422][T11181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.805779][T11181] CR2: 00007f9340e732f8 CR3: 00000000573f3000 CR4: 00000000003506f0 [ 301.819605][T11181] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 301.827900][T11181] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 301.837833][T11181] Call Trace: [ 301.842712][T11181] [ 301.845764][T11181] ? netif_carrier_on+0xe1/0x120 [ 301.850896][T11181] ieee80211_ocb_leave+0x27f/0x320 [ 301.856328][T11181] __cfg80211_leave_ocb+0x219/0x400 [ 301.861821][T11181] cfg80211_leave_ocb+0x53/0x70 [ 301.866808][T11181] cfg80211_change_iface+0x4ec/0xe10 [ 301.872281][T11181] __cfg80211_wext_siwmode+0x1c2/0x290 [ 301.878008][T11181] ? wext_ioctl_dispatch+0xaf/0x470 [ 301.883479][T11181] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 301.889309][T11181] ? apparmor_capable+0x12c/0x190 [ 301.902658][T11181] ? full_name_hash+0x8e/0xe0 [ 301.907487][T11181] ioctl_standard_call+0xc6/0x250 [ 301.916078][T11181] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 301.926779][T11181] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 301.935936][T11181] wext_ioctl_dispatch+0x3da/0x470 [ 301.947157][T11181] ? wext_ioctl_dispatch+0x470/0x470 [ 301.957325][T11181] ? iw_handler_get_private+0x1e0/0x1e0 [ 301.967529][T11181] wext_handle_ioctl+0x114/0x1d0 [ 301.976022][T11181] ? call_commit_handler+0xf0/0xf0 [ 301.986952][T11181] sock_ioctl+0x143/0x700 [ 301.994806][T11181] ? sock_poll+0x420/0x420 [ 302.000477][T11181] ? bpf_lsm_file_ioctl+0x5/0x10 [ 302.005533][T11181] ? security_file_ioctl+0x7c/0xa0 [ 302.011013][T11181] ? sock_poll+0x420/0x420 [ 302.015544][T11181] __se_sys_ioctl+0xfa/0x170 [ 302.020300][T11181] do_syscall_64+0x4c/0xa0 [ 302.024949][T11181] ? clear_bhb_loop+0x30/0x80 [ 302.029925][T11181] ? clear_bhb_loop+0x30/0x80 [ 302.034730][T11181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.042274][T11181] RIP: 0033:0x7fd10324ce59 [ 302.046807][T11181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.077459][T11181] RSP: 002b:00007fd1014a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.086085][T11181] RAX: ffffffffffffffda RBX: 00007fd1034d4fa0 RCX: 00007fd10324ce59 [ 302.094399][T11181] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000006 [ 302.103380][T11181] RBP: 00007fd1032e2e6f R08: 0000000000000000 R09: 0000000000000000 [ 302.111728][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.120092][T11181] R13: 00007fd1034d5038 R14: 00007fd1034d4fa0 R15: 00007ffede6ecda8 [ 302.128190][T11181] [ 302.131737][T11181] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 302.139049][T11181] CPU: 0 PID: 11181 Comm: syz.1.1935 Not tainted syzkaller #0 [ 302.146538][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.156618][T11181] Call Trace: [ 302.159922][T11181] [ 302.162879][T11181] dump_stack_lvl+0x188/0x250 [ 302.167638][T11181] ? show_regs_print_info+0x20/0x20 [ 302.172882][T11181] ? load_image+0x410/0x410 [ 302.177449][T11181] panic+0x2f8/0x850 [ 302.179489][ T4746] gspca_vc032x: reg_w err -71 [ 302.181379][T11181] ? bpf_jit_dump+0xd0/0xd0 [ 302.186212][ T4746] vc032x: probe of 1-1:0.0 failed with error -71 [ 302.190584][T11181] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 302.190614][T11181] __warn+0x248/0x2b0 [ 302.190637][T11181] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 302.190662][T11181] report_bug+0x1b9/0x2e0 [ 302.190701][T11181] handle_bug+0x3a/0x70 [ 302.190720][T11181] exc_invalid_op+0x16/0x40 [ 302.190739][T11181] asm_exc_invalid_op+0x16/0x20 [ 302.231152][ T4746] usb 1-1: USB disconnect, device number 2 [ 302.231894][T11181] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 302.244768][T11181] Code: 42 7b f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 60 1e 39 8b 4c 89 e6 89 ea e8 45 5b 71 00 <0f> 0b e9 07 fd ff ff e8 09 24 36 f8 0f 0b e9 b1 fe ff ff e8 fd 23 [ 302.264410][T11181] RSP: 0018:ffffc90002e8f9e0 EFLAGS: 00010246 [ 302.270513][T11181] RAX: bee5d69e9aec7a00 RBX: 0000000000400000 RCX: 0000000000080000 [ 302.278518][T11181] RDX: ffffc90003c63000 RSI: 00000000000041c9 RDI: 00000000000041ca [ 302.286521][T11181] RBP: 0000000000000004 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 302.294522][T11181] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88805df2c000 [ 302.302531][T11181] R13: ffff88805df2d290 R14: ffff888077450e00 R15: ffff88805df2e268 [ 302.310556][T11181] ? netif_carrier_on+0xe1/0x120 [ 302.315542][T11181] ieee80211_ocb_leave+0x27f/0x320 [ 302.320700][T11181] __cfg80211_leave_ocb+0x219/0x400 [ 302.325949][T11181] cfg80211_leave_ocb+0x53/0x70 [ 302.330844][T11181] cfg80211_change_iface+0x4ec/0xe10 [ 302.336180][T11181] __cfg80211_wext_siwmode+0x1c2/0x290 [ 302.341697][T11181] ? wext_ioctl_dispatch+0xaf/0x470 [ 302.346933][T11181] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 302.352607][T11181] ? apparmor_capable+0x12c/0x190 [ 302.357674][T11181] ? full_name_hash+0x8e/0xe0 [ 302.362407][T11181] ioctl_standard_call+0xc6/0x250 [ 302.367506][T11181] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 302.373175][T11181] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 302.378848][T11181] wext_ioctl_dispatch+0x3da/0x470 [ 302.384007][T11181] ? wext_ioctl_dispatch+0x470/0x470 [ 302.389323][T11181] ? iw_handler_get_private+0x1e0/0x1e0 [ 302.394909][T11181] wext_handle_ioctl+0x114/0x1d0 [ 302.399896][T11181] ? call_commit_handler+0xf0/0xf0 [ 302.405064][T11181] sock_ioctl+0x143/0x700 [ 302.409431][T11181] ? sock_poll+0x420/0x420 [ 302.413903][T11181] ? bpf_lsm_file_ioctl+0x5/0x10 [ 302.418885][T11181] ? security_file_ioctl+0x7c/0xa0 [ 302.424029][T11181] ? sock_poll+0x420/0x420 [ 302.428490][T11181] __se_sys_ioctl+0xfa/0x170 [ 302.433119][T11181] do_syscall_64+0x4c/0xa0 [ 302.437574][T11181] ? clear_bhb_loop+0x30/0x80 [ 302.442293][T11181] ? clear_bhb_loop+0x30/0x80 [ 302.447015][T11181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.452943][T11181] RIP: 0033:0x7fd10324ce59 [ 302.457445][T11181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.477089][T11181] RSP: 002b:00007fd1014a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.485553][T11181] RAX: ffffffffffffffda RBX: 00007fd1034d4fa0 RCX: 00007fd10324ce59 [ 302.493557][T11181] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000006 [ 302.501563][T11181] RBP: 00007fd1032e2e6f R08: 0000000000000000 R09: 0000000000000000 [ 302.509568][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.517570][T11181] R13: 00007fd1034d5038 R14: 00007fd1034d4fa0 R15: 00007ffede6ecda8 [ 302.525594][T11181] [ 302.528951][T11181] Kernel Offset: disabled [ 302.533703][T11181] Rebooting in 86400 seconds..