last executing test programs: 6m3.314226088s ago: executing program 32 (id=40): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000cb00fbdcbfb3e488ccf78f0085c3176e5686c5720895"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[]) 5m5.479639309s ago: executing program 3 (id=167): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7f", 0xa2}], 0x1}, 0x0) 5m4.78774512s ago: executing program 3 (id=168): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp6\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/4108, 0x100c}], 0x1, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) 4m59.783286219s ago: executing program 3 (id=173): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500050002000000050001000700000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x30008092}, 0x4000080) 4m59.178971913s ago: executing program 3 (id=177): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000011fc010000000000000000000000000000fc000000000000ff007195db315e7500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200250000000000000014000e"], 0x104}}, 0x0) 4m53.817568563s ago: executing program 3 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) add_key$user(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000001c0)=@userptr={0x0, 0x1, 0x4, 0x352c34c113f2f238, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0ed290c8"}, 0x0, 0x2, {0x0}}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}}, 0x0) 4m41.411265232s ago: executing program 3 (id=211): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) socket(0xa, 0x3, 0x6) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150f, &(0x7f0000000480)="$eJzs3AuYjtX6MPD7Xms9DE16m+QwrLXuhzcNliFJDklySJJkS5JTQmiSJCExzpKGJMlxkhyGkBymMWmcz4eckyRpkiQkJFnfNW199t7tvfv2/9/3ub7/3L/rei7rfp/3Xu/9vPfzeg7v9c63PUfXbV6vVlMigv8W/Os/yQAQAwDDAeA6AAgAoFJcpbic9fkkJv/3XoT9uR5Ku9oVsKuJ+5+7cf9zN+5/7sb9z924/7kb9z934/7nbtx/xnKz7XOKXs9L7l34/n9uxsf//0Gyy03+cmO5G3v9Bync/9yN+5+7cf9zN+5/7sb9z924/7kb9z934/4zlpv91+8d83cH/xOWq73/McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLHc77KxQA/Da+2nUxxhhjjDHGGGPsz+PzXu0KGGOMMcYYY4wx9n8fggAJCgLIA3khBvJBfrgGYuFaKADXQQSuhzi4AQrCjVAICkMRKArxUAyKgwYDFghCKAElIQo3QSm4GRKgNJSBsuCgHCRCeagAt0BFuBUqwW1QGW6HKlAVqkF1uANqwJ1QE+6CWnA31IY6UBfqwT1QH+6FBnAfNIT7oRE8AI3hQWgCf4Gm8BA0g4ehOTwCLeBRaAmtoDW0gbb/pfwXoC+8CP2gPyTDABgIg2AwDIGhMAyGw0swAl6GkfAKpMAoGA2vwhh4DcbC6zAO3oDx8CZMgIkwCSbDFJgKqfAWTIO3YTq8AzNgJsyC2ZAGc2AuvAvzYD4sgPdgIbwPi2AxLIGlkA4fQAYsg0z4EJbDR5AFK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A4fww7YCbtgN+yBvbAPPoH98CkcgM/gIHz+H+af+4f8XggIKFCgQoV5MA/GYAzmx/wYi7FYAAtgBCMYh3FYEAtiISyERbAIxmM8FsfiaNAgIaG6vCeVwlKYgAlYBsugQ4eJmIgV8BasiBWxElbCylgZq2BVrIrVsTrWwBpYE2tiLayFtbE21sW6eA/eg/diA2yADbEhNsJG2BgbYxNsgk2xKTbDZtgcm2MLbIEtsSW2xtbYFttiO2yH7bE9dsSO2Ak7YRfsgkmYhF2xK3bDbtgdu2MP7IE9sSf2wt7YG1/AF/BFfBH7Y20xAAfiQByMg3EoDsNh+BKOwJfxZXwFU3AUjsZX8VV8DcfiWRyHb+B4HI81xESchJORxFRMxVSchtNwOk7HGTgTZ+JsTMM5OBfn4jycj/PxPVyI7+P7uBgX41JMx3TMwGWYiZm4HM9hFq7AlbgKV+MaXI3rcD2uw424CTfiFtyC23Abfowf407cibtxN+7Nea/xE/wUP8UUPIgH8RAewsN4GI/gEczGbDyKR/EYHsPjeBxP4Ak8iafwNJ7CM3gGz+I5PI/n8QJewIv4XPzXzfaW3pACIocSSuQReUSMiBH5RX4RK2JFAVFARERExIk4UVAUFIVEIVFEFBHxIl4UF8WFEUaQCEUJUUJERVSUEqVEgkgQZUQZ4YQTiSJRVBAVREVRUVQSt4nK4nZRRVQVHVx1UV3UEB1dTXGXqCVqidqijqgr6ol6or6oLxqIBqKhaCgaiUaisXhQNBEDcCg+JHI601yMwhZiNLYUrURr0Ua8ho+JdmIsthcdREfxhHgDx2EX0c4liadEVzEJu4lnxGR8VvQQU7GneF70Er1FH/GC6Cvau36iv5iBA8RAMRsHiyFiqBgm5mEdkdOxuuIVkSJGidHiVbEUXxO/7ePjxZtigpgoJonJYoqYKlLFW2KaeFtMF++IGWKmmCVmizQxR8wV74p5Yr5YIN4TC8X7YpFYLJaIpSJdfCAyxDKRKT4Uy8VHIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCx2iJ1il9gt9oi9Yp/4ROwXn4oD4jNxUHwuDokvxGHxpTgivhLZ4mtxVHwjjolvxXHxnTghvhcnxSlxWvwgzogfxVlxTpwXP4kL4mdxUfwiLgkvQKIUUkolA5lH5pUxMp/ML6+RsfJaWUBeJyPyehknb5AF5Y2ykCwsi8iiMl4Wk8WllkZaSTKUJWRJGZU3yVLyZpkgS8sysqx0spxMlOVlBXmLrChvlZXkbbKyvF1WkVVlNVld3iFryDtlTXmXrCXvlrVlHVlX1pP3yPryXtlA3icbyvtlI/mAbCwflE3kX2RT+ZBsJh+WzeUjsoV8VLaUrWRr2Ua2lY/JdvJx2V52kB3lE7KT7Cy7yCdlknxKdpVPy27yGdldPit7yOdkT/m87CV7yz7yF3lJetlP9pfJcoAcKAfJwXKIHCqHyeHyJTlCvixHyldkSgwAyFflGPmaHCtfl+PkG3K8fFNOkBPlJDlZTpFTZap8S06Tb8vp8h05Q86Us+RsmSbnyKGXZ1rwf5D/9j/JHylT5Ci5TW6XH8sdcqfcJXfLPXKv3Cf3yf1yvzwgD8iD8qA8JA/Jw/KwPCKPyGyZLY/Ko/KYPCaPy+PyhDwhT8pT8if5gzwjf5Rn5Tl5Tv4kL8gL8uLl9wAUKqGkUipQeVReFaPyqfzqGhWrrlUF1HUqoq5XceoGVVDdqAqpwqqIKqriVTFVXGlllFWkQlVClVRRdRNe/oioMqqscqqcSlTl/5N8VUrdrBJU6b/L/6P62qq2qp1qp9qr9qqj6qg6qU6qi+qiklSS6qq6qm6qm+quuqseqofqqXqqXqqX6qP6qL6qr+qn+qlklawGqkFqsBqihqphavgAUCPUCDVSjVQpKkWNVqPVGDVGjVVj1Tg1To1X49UENUFNUpPUFDVFpapUNU1NU9PVdDVDzVCz1CyVptLUXDVXzVPz1AK1QC1UC9UitUgtUUtUukpXGSpDZapMtVwtV1lqhVqhVqlVao1ao9apdWqD2qA2qU1qi9qistR2tV3tUDvULrVL7VF71D61T+1X+9UBdUAdVAfVIXVIHVaH1RF1RGWrbHVUHVXH1DF1XB1XJ9QJdVKdVKfVaXVGnVFn1Vl1Xp1XF9QFdVFdVJfUpZzTvkAEIlCBCvIEeYKYICbIH+QPYoPYoEBQIIgEkSAuiAsKBjcGhYLCQZGgaBAfFAuKBzowgQ0oCIMSQckgGtwUlApuDhKC0kGZoGzggnJBYlA+qBDcElQMbg0qBbcFlYPbgypB1aBaUD24I6gR3BnUDO4KagV3B7WDOkHdoF5wT1A/uDdoENwXNAzuDxoFDwSNgweDJsFfgqbBQ0Gz4OGgefBI0CJ4NGgZtApaB22Ctn/q/N6fLfy466f762Q9QA/Ug/RgPUQP1cP0cP2SHqFf1iP1KzpFj9Kj9at6jH5Nj9Wv63H6DT1ev6kn6Il6kp6sp+ipOlW/pafpt/V0/Y6eoWfqWXq2TtNz9Fz9rp6n5+sF+j29UL+vF+nFeoleqtP1BzpDL9OZ+kO9XH+ks/QKvVKv0qv1Gr1Wr9Pr9Qa9UW/Sm/UWvVVv09v1x3qH3ql36d16j96r9+lP9H79qT6gP9MH9ef6kP5CH9Zf6iP6K52tv9ZH9Tf6mP5WH9ff6RP6e31Sn9Kn9Q/6jP5Rn9Xn9Hn9k76gf9YX9S/6kvY5J/c5h3ejjDJ5TB4TY2JMfpPfxJpYU8AUMBETMXEmzhQ0BU0hU8gUMUVMvIk3xU1xk4MMmRKmhImaqCllSpkEk2DKmDLGGWcSTaKpYCqYiqaiqWQqmcqmsqliqphqppq5w9xh7jR3mrvMXeZuc7epY+qYeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWqammammWlumpsWpoVpaVqa1qa1aWvamnamnWlv2puOpqPpZDqZLqaLSTJJpqvparqZbqa76W56mB6mp+lpeplepo/pY/qavqaf6WeSTbIZaAaawWawGWqGmuFmuBlhRpiRZqRJMSlmtBltxpgxZqwZa8aZN8x486aZYCaaSWaymWKmmlSTaqaZaWa6mW5mmBlmlpll0kyamWvmmnlmnllgFpiFZqFZZBaZJWaJSTfpJsNkmEyTaZab5SbLZJmVZqVZbVabtWatWW/Wm41mo9lsNputZqvZbrabHWaH2WV2mT1mj9ln9pn9Zr85YA6Yg+agOWQOeQQwR8wRk22yzVFz1Bwzx8xxc9ycMCfMSXPSnDanzRlzxpw1Z815c95cMD+bi+YXc8l4E2Pz2fz2Ghtrr7UF7HX2H+MitqiNt8VscattIVv472JjrU2wpW2Z3y4xbXmbkHMstWWts+Vsoi1vq9iqtpqtbu+wNeydtubv4vr2XtvA3mcb2vttPXvP38WN7AO2sX3ENrGP2qa2lW1m29jm9hHbwj5qW9pWtrVtYzvZzraLfdIm2adsV/v07+IMu8yutxvsRrvJ7ref2vP2J3vMfmsv2J9tP9vfDrcv2RH2ZTvSvmJT7KjfxePtm3aCnWgn2cl2ip36u3iWnW3T7Bw7175r59n5v4vT7Qd2oc20i+xiu8Qu/TXOqSnTfmiX249sll1hV9pVdrVdY9fadf+71lV2i91qt9l99hO7w+60u+xuu8fu/TXO2Y4D9jN70H5uj9pv7GH7pT1ij9ts+/Wvcc72Hbff2RP2e3vSnrKn7Q/2jP3RnrXncrbf52z7D/YXe8l6C4QkSJKigPJQXoqhfJSfrqFYupYK0HUUoespjm6ggnQjFaLCVISKUjwVo+KkyZAlopBKUEmK0k1Uim6mBCpNZagsOSpHiVSeKtAtVJFupUp0G1Wm26kKVaVqVJ3uoBp0J9Wku6gW3U21qQ7VpXp0D9Wne6kB3UcN6X5qRA9QY3qQmtBfqCk9RM3oYWpOj1ALepRaUitqTW2oLT1G7ehxak8dqCM9QZ2oM3WhJymJnqKu9DR1o2eoOz1LPeg56knPUy/qTX3oBepLL1I/6k/JNIAG0iAaTENoKA2j4fQSjaCXaSS9Qik0ikbTqzSGXqOx9DqNozdoPL1JE2giTaLJNIWmUiq9RdPobZpO79AMmkmzaDal0RyaS+/SPJpPC+g9Wkjv0yJaTEtoKaXTB5RByyiTPqTl9BFl0QpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTx7SDdtIu2k17aC/to09oP+W7/IH7nA7RF3SYvqQj9BVl09d0lL6hY/QtHafv6AR9TyfpFJ2mH+gM/Uhn6Rydp5/oAv1MF+kXukSeIMRQhDJUYRDmCfOGMWG+MH94TRgbXhsWCK8LI+H1YVx4Q1gwvDEsFBYOi4RFw/iwWFg81KEJbUhhGJYIS4bR8KawVHhzmBCWDsuEZUMXlgsTw/JhhfCWsGJ4a1gpvC2sHN4eVgmrho/cXz28I6wR3hnWDO8Ka4V3h7XDOmHdsF54T1g/vDdsEN4XNgzvDyuGD4SNwwdDuPx7lWbhw2Hz8JGwRfho2DJsFbYO24Rtw8fCduHjYfuwQ9gxfCLsFHYOu4RPhknhU2HX8Ok/XJ8cDggHhoPCQaH398kl0aXR9OgH0Yzosmhm9MPo8uhH0azoiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lao9/XygkMnnHTKBS6Py+tiXD6X313jYt21roC7zkXc9S7O3eAKuhtdIVfYFXFFXbwr5oo77YyzjlzoSriSLupucqXczS7BlXZlXFnnXDmX6Nq4tq6ta+ced+1dB9fRPeGecJ1dZ/eke9I95bq6p10394zr7p51Pdxz7jn3vOvlers+7gXX173o+rn+Ltklu4FuoBvsBruhbqgb7oa7EW6EG+lGuhSX4ka70W6MG+PGurFunBvnxrvxboKb4Ca5SW6Km+JSXaqb5qa56W66CwBglpvl0lyam+vmunlunlvgFriFCQvdIrfILXFLXLpLdxkuw2W6TLfcLXdZLsutdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XA73C63y+1xe9w+t8/td/vdAXfAHXQH3SF3yB12h90R95XLdl+7o+4bd8x9646779wJ97076U650+4Hd8b96M66c+68+8ldcD+7i+4Xd8l5lxp5KzIt8nZkeuSdyIzIzMisyOxIWmROZG7k3ci8yPzIgsh7kYWR9yOLIosjSyJLI+mRDyIZkWWRzMiHkeWRjyJZkRWRlZFVkdWRNQp8sR2hL+FL+qi/yZfyN/sEX9qX8WW98+V8oi/vK/hbfEV/q6/kb/OV/e2+iq/qq/lHfUvfyrf2bXxb/5hv5x/37X0H39E/4Tv5zr6Lf9In+ad8V/+07+af8d39s76Hf8739M/7Xr637+Nf8H39i76f7++T/QA/0A/yg/0QP9QP88P9S36Ef9mP9K/4FD/Kj/av+jH+NT/Wv+7H+Tf8eP+mn+An+kl+sp/ip/pU/5af5t/20/07foaf6Wf52T7Nz/Fz/bt+np/vF/j3/EL/vl/kF/slfqlP9x/4DL/MZ/oP/XL/kc/yK/xKv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9x/7HX6n3+V3+z1+r9/nP/H7/af+gP/MH/Sf+0P+C3/Yf+mP+K98tv/aH836xh/z3/rj/jt/wn/vT/pT/rT/wZ/xP/qz/pw/73/yF/zP/qL/xV/6D3+zVufPuHXOGGOMMfb/oUF/sH7AP3lMAYC4PP7Ze3/tzqLZf7teAsDmQn8dDxHxnSIA8FT/ng/9ttSunZycfPm5WRKCkosBIPIPL3A5XgEdoTMkQQeo8E/rGyJ6X6B/M3/GWJoSvQ0g/9/kxMCV+Mr8X/yL+R97YnxG5fB83L+uP7oYIKHklZycq/Df4hXQ8devDjtAxX8xf+F2/67+LAn5vkwFaP83ObEA0D7fP9afCI/D05D0d89kjDHGGGOMMcb+aoio1v0Prj9/vT6PV1dy8sKV+I+uzxljjDHGGGOMMXb1Pdu7z5OPJSV16M4DHvAglw06/5vnXO3/mRhjjDHGGGN/tisn/Vcey3c1C2KMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKh/xd/aexqbyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2vAAAA///aYjRz") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file1/file0\x00', 0x200000, &(0x7f0000002180)={[{@nobh}], [{@euid_gt}, {@uid_lt}, {@seclabel}]}, 0xfc, 0x561, &(0x7f0000001c00)="$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") openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_emit_vhci(&(0x7f0000001980)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x428}}}, 0x7) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(r1, &(0x7f00000000c0)='net/snmp6\x00') rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) 4m26.191025977s ago: executing program 33 (id=211): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) socket(0xa, 0x3, 0x6) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150f, &(0x7f0000000480)="$eJzs3AuYjtX6MPD7Xms9DE16m+QwrLXuhzcNliFJDklySJJkS5JTQmiSJCExzpKGJMlxkhyGkBymMWmcz4eckyRpkiQkJFnfNW199t7tvfv2/9/3ub7/3L/rei7rfp/3Xu/9vPfzeg7v9c63PUfXbV6vVlMigv8W/Os/yQAQAwDDAeA6AAgAoFJcpbic9fkkJv/3XoT9uR5Ku9oVsKuJ+5+7cf9zN+5/7sb9z924/7kb9z934/7nbtx/xnKz7XOKXs9L7l34/n9uxsf//0Gyy03+cmO5G3v9Bync/9yN+5+7cf9zN+5/7sb9z924/7kb9z934/4zlpv91+8d83cH/xOWq73/McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLHc77KxQA/Da+2nUxxhhjjDHGGGPsz+PzXu0KGGOMMcYYY4wx9n8fggAJCgLIA3khBvJBfrgGYuFaKADXQQSuhzi4AQrCjVAICkMRKArxUAyKgwYDFghCKAElIQo3QSm4GRKgNJSBsuCgHCRCeagAt0BFuBUqwW1QGW6HKlAVqkF1uANqwJ1QE+6CWnA31IY6UBfqwT1QH+6FBnAfNIT7oRE8AI3hQWgCf4Gm8BA0g4ehOTwCLeBRaAmtoDW0gbb/pfwXoC+8CP2gPyTDABgIg2AwDIGhMAyGw0swAl6GkfAKpMAoGA2vwhh4DcbC6zAO3oDx8CZMgIkwCSbDFJgKqfAWTIO3YTq8AzNgJsyC2ZAGc2AuvAvzYD4sgPdgIbwPi2AxLIGlkA4fQAYsg0z4EJbDR5AFK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A4fww7YCbtgN+yBvbAPPoH98CkcgM/gIHz+H+af+4f8XggIKFCgQoV5MA/GYAzmx/wYi7FYAAtgBCMYh3FYEAtiISyERbAIxmM8FsfiaNAgIaG6vCeVwlKYgAlYBsugQ4eJmIgV8BasiBWxElbCylgZq2BVrIrVsTrWwBpYE2tiLayFtbE21sW6eA/eg/diA2yADbEhNsJG2BgbYxNsgk2xKTbDZtgcm2MLbIEtsSW2xtbYFttiO2yH7bE9dsSO2Ak7YRfsgkmYhF2xK3bDbtgdu2MP7IE9sSf2wt7YG1/AF/BFfBH7Y20xAAfiQByMg3EoDsNh+BKOwJfxZXwFU3AUjsZX8VV8DcfiWRyHb+B4HI81xESchJORxFRMxVSchtNwOk7HGTgTZ+JsTMM5OBfn4jycj/PxPVyI7+P7uBgX41JMx3TMwGWYiZm4HM9hFq7AlbgKV+MaXI3rcD2uw424CTfiFtyC23Abfowf407cibtxN+7Nea/xE/wUP8UUPIgH8RAewsN4GI/gEczGbDyKR/EYHsPjeBxP4Ak8iafwNJ7CM3gGz+I5PI/n8QJewIv4XPzXzfaW3pACIocSSuQReUSMiBH5RX4RK2JFAVFARERExIk4UVAUFIVEIVFEFBHxIl4UF8WFEUaQCEUJUUJERVSUEqVEgkgQZUQZ4YQTiSJRVBAVREVRUVQSt4nK4nZRRVQVHVx1UV3UEB1dTXGXqCVqidqijqgr6ol6or6oLxqIBqKhaCgaiUaisXhQNBEDcCg+JHI601yMwhZiNLYUrURr0Ua8ho+JdmIsthcdREfxhHgDx2EX0c4liadEVzEJu4lnxGR8VvQQU7GneF70Er1FH/GC6Cvau36iv5iBA8RAMRsHiyFiqBgm5mEdkdOxuuIVkSJGidHiVbEUXxO/7ePjxZtigpgoJonJYoqYKlLFW2KaeFtMF++IGWKmmCVmizQxR8wV74p5Yr5YIN4TC8X7YpFYLJaIpSJdfCAyxDKRKT4Uy8VHIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCx2iJ1il9gt9oi9Yp/4ROwXn4oD4jNxUHwuDokvxGHxpTgivhLZ4mtxVHwjjolvxXHxnTghvhcnxSlxWvwgzogfxVlxTpwXP4kL4mdxUfwiLgkvQKIUUkolA5lH5pUxMp/ML6+RsfJaWUBeJyPyehknb5AF5Y2ykCwsi8iiMl4Wk8WllkZaSTKUJWRJGZU3yVLyZpkgS8sysqx0spxMlOVlBXmLrChvlZXkbbKyvF1WkVVlNVld3iFryDtlTXmXrCXvlrVlHVlX1pP3yPryXtlA3icbyvtlI/mAbCwflE3kX2RT+ZBsJh+WzeUjsoV8VLaUrWRr2Ua2lY/JdvJx2V52kB3lE7KT7Cy7yCdlknxKdpVPy27yGdldPit7yOdkT/m87CV7yz7yF3lJetlP9pfJcoAcKAfJwXKIHCqHyeHyJTlCvixHyldkSgwAyFflGPmaHCtfl+PkG3K8fFNOkBPlJDlZTpFTZap8S06Tb8vp8h05Q86Us+RsmSbnyKGXZ1rwf5D/9j/JHylT5Ci5TW6XH8sdcqfcJXfLPXKv3Cf3yf1yvzwgD8iD8qA8JA/Jw/KwPCKPyGyZLY/Ko/KYPCaPy+PyhDwhT8pT8if5gzwjf5Rn5Tl5Tv4kL8gL8uLl9wAUKqGkUipQeVReFaPyqfzqGhWrrlUF1HUqoq5XceoGVVDdqAqpwqqIKqriVTFVXGlllFWkQlVClVRRdRNe/oioMqqscqqcSlTl/5N8VUrdrBJU6b/L/6P62qq2qp1qp9qr9qqj6qg6qU6qi+qiklSS6qq6qm6qm+quuqseqofqqXqqXqqX6qP6qL6qr+qn+qlklawGqkFqsBqihqphavgAUCPUCDVSjVQpKkWNVqPVGDVGjVVj1Tg1To1X49UENUFNUpPUFDVFpapUNU1NU9PVdDVDzVCz1CyVptLUXDVXzVPz1AK1QC1UC9UitUgtUUtUukpXGSpDZapMtVwtV1lqhVqhVqlVao1ao9apdWqD2qA2qU1qi9qistR2tV3tUDvULrVL7VF71D61T+1X+9UBdUAdVAfVIXVIHVaH1RF1RGWrbHVUHVXH1DF1XB1XJ9QJdVKdVKfVaXVGnVFn1Vl1Xp1XF9QFdVFdVJfUpZzTvkAEIlCBCvIEeYKYICbIH+QPYoPYoEBQIIgEkSAuiAsKBjcGhYLCQZGgaBAfFAuKBzowgQ0oCIMSQckgGtwUlApuDhKC0kGZoGzggnJBYlA+qBDcElQMbg0qBbcFlYPbgypB1aBaUD24I6gR3BnUDO4KagV3B7WDOkHdoF5wT1A/uDdoENwXNAzuDxoFDwSNgweDJsFfgqbBQ0Gz4OGgefBI0CJ4NGgZtApaB22Ctn/q/N6fLfy466f762Q9QA/Ug/RgPUQP1cP0cP2SHqFf1iP1KzpFj9Kj9at6jH5Nj9Wv63H6DT1ev6kn6Il6kp6sp+ipOlW/pafpt/V0/Y6eoWfqWXq2TtNz9Fz9rp6n5+sF+j29UL+vF+nFeoleqtP1BzpDL9OZ+kO9XH+ks/QKvVKv0qv1Gr1Wr9Pr9Qa9UW/Sm/UWvVVv09v1x3qH3ql36d16j96r9+lP9H79qT6gP9MH9ef6kP5CH9Zf6iP6K52tv9ZH9Tf6mP5WH9ff6RP6e31Sn9Kn9Q/6jP5Rn9Xn9Hn9k76gf9YX9S/6kvY5J/c5h3ejjDJ5TB4TY2JMfpPfxJpYU8AUMBETMXEmzhQ0BU0hU8gUMUVMvIk3xU1xk4MMmRKmhImaqCllSpkEk2DKmDLGGWcSTaKpYCqYiqaiqWQqmcqmsqliqphqppq5w9xh7jR3mrvMXeZuc7epY+qYeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWqammammWlumpsWpoVpaVqa1qa1aWvamnamnWlv2puOpqPpZDqZLqaLSTJJpqvparqZbqa76W56mB6mp+lpeplepo/pY/qavqaf6WeSTbIZaAaawWawGWqGmuFmuBlhRpiRZqRJMSlmtBltxpgxZqwZa8aZN8x486aZYCaaSWaymWKmmlSTaqaZaWa6mW5mmBlmlpll0kyamWvmmnlmnllgFpiFZqFZZBaZJWaJSTfpJsNkmEyTaZab5SbLZJmVZqVZbVabtWatWW/Wm41mo9lsNputZqvZbrabHWaH2WV2mT1mj9ln9pn9Zr85YA6Yg+agOWQOeQQwR8wRk22yzVFz1Bwzx8xxc9ycMCfMSXPSnDanzRlzxpw1Z815c95cMD+bi+YXc8l4E2Pz2fz2Ghtrr7UF7HX2H+MitqiNt8VscattIVv472JjrU2wpW2Z3y4xbXmbkHMstWWts+Vsoi1vq9iqtpqtbu+wNeydtubv4vr2XtvA3mcb2vttPXvP38WN7AO2sX3ENrGP2qa2lW1m29jm9hHbwj5qW9pWtrVtYzvZzraLfdIm2adsV/v07+IMu8yutxvsRrvJ7ref2vP2J3vMfmsv2J9tP9vfDrcv2RH2ZTvSvmJT7KjfxePtm3aCnWgn2cl2ip36u3iWnW3T7Bw7175r59n5v4vT7Qd2oc20i+xiu8Qu/TXOqSnTfmiX249sll1hV9pVdrVdY9fadf+71lV2i91qt9l99hO7w+60u+xuu8fu/TXO2Y4D9jN70H5uj9pv7GH7pT1ij9ts+/Wvcc72Hbff2RP2e3vSnrKn7Q/2jP3RnrXncrbf52z7D/YXe8l6C4QkSJKigPJQXoqhfJSfrqFYupYK0HUUoespjm6ggnQjFaLCVISKUjwVo+KkyZAlopBKUEmK0k1Uim6mBCpNZagsOSpHiVSeKtAtVJFupUp0G1Wm26kKVaVqVJ3uoBp0J9Wku6gW3U21qQ7VpXp0D9Wne6kB3UcN6X5qRA9QY3qQmtBfqCk9RM3oYWpOj1ALepRaUitqTW2oLT1G7ehxak8dqCM9QZ2oM3WhJymJnqKu9DR1o2eoOz1LPeg56knPUy/qTX3oBepLL1I/6k/JNIAG0iAaTENoKA2j4fQSjaCXaSS9Qik0ikbTqzSGXqOx9DqNozdoPL1JE2giTaLJNIWmUiq9RdPobZpO79AMmkmzaDal0RyaS+/SPJpPC+g9Wkjv0yJaTEtoKaXTB5RByyiTPqTl9BFl0QpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTx7SDdtIu2k17aC/to09oP+W7/IH7nA7RF3SYvqQj9BVl09d0lL6hY/QtHafv6AR9TyfpFJ2mH+gM/Uhn6Rydp5/oAv1MF+kXukSeIMRQhDJUYRDmCfOGMWG+MH94TRgbXhsWCK8LI+H1YVx4Q1gwvDEsFBYOi4RFw/iwWFg81KEJbUhhGJYIS4bR8KawVHhzmBCWDsuEZUMXlgsTw/JhhfCWsGJ4a1gpvC2sHN4eVgmrho/cXz28I6wR3hnWDO8Ka4V3h7XDOmHdsF54T1g/vDdsEN4XNgzvDyuGD4SNwwdDuPx7lWbhw2Hz8JGwRfho2DJsFbYO24Rtw8fCduHjYfuwQ9gxfCLsFHYOu4RPhknhU2HX8Ok/XJ8cDggHhoPCQaH398kl0aXR9OgH0Yzosmhm9MPo8uhH0azoiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lao9/XygkMnnHTKBS6Py+tiXD6X313jYt21roC7zkXc9S7O3eAKuhtdIVfYFXFFXbwr5oo77YyzjlzoSriSLupucqXczS7BlXZlXFnnXDmX6Nq4tq6ta+ced+1dB9fRPeGecJ1dZ/eke9I95bq6p10394zr7p51Pdxz7jn3vOvlers+7gXX173o+rn+Ltklu4FuoBvsBruhbqgb7oa7EW6EG+lGuhSX4ka70W6MG+PGurFunBvnxrvxboKb4Ca5SW6Km+JSXaqb5qa56W66CwBglpvl0lyam+vmunlunlvgFriFCQvdIrfILXFLXLpLdxkuw2W6TLfcLXdZLsutdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XA73C63y+1xe9w+t8/td/vdAXfAHXQH3SF3yB12h90R95XLdl+7o+4bd8x9646779wJ97076U650+4Hd8b96M66c+68+8ldcD+7i+4Xd8l5lxp5KzIt8nZkeuSdyIzIzMisyOxIWmROZG7k3ci8yPzIgsh7kYWR9yOLIosjSyJLI+mRDyIZkWWRzMiHkeWRjyJZkRWRlZFVkdWRNQp8sR2hL+FL+qi/yZfyN/sEX9qX8WW98+V8oi/vK/hbfEV/q6/kb/OV/e2+iq/qq/lHfUvfyrf2bXxb/5hv5x/37X0H39E/4Tv5zr6Lf9In+ad8V/+07+af8d39s76Hf8739M/7Xr637+Nf8H39i76f7++T/QA/0A/yg/0QP9QP88P9S36Ef9mP9K/4FD/Kj/av+jH+NT/Wv+7H+Tf8eP+mn+An+kl+sp/ip/pU/5af5t/20/07foaf6Wf52T7Nz/Fz/bt+np/vF/j3/EL/vl/kF/slfqlP9x/4DL/MZ/oP/XL/kc/yK/xKv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9x/7HX6n3+V3+z1+r9/nP/H7/af+gP/MH/Sf+0P+C3/Yf+mP+K98tv/aH836xh/z3/rj/jt/wn/vT/pT/rT/wZ/xP/qz/pw/73/yF/zP/qL/xV/6D3+zVufPuHXOGGOMMfb/oUF/sH7AP3lMAYC4PP7Ze3/tzqLZf7teAsDmQn8dDxHxnSIA8FT/ng/9ttSunZycfPm5WRKCkosBIPIPL3A5XgEdoTMkQQeo8E/rGyJ6X6B/M3/GWJoSvQ0g/9/kxMCV+Mr8X/yL+R97YnxG5fB83L+uP7oYIKHklZycq/Df4hXQ8devDjtAxX8xf+F2/67+LAn5vkwFaP83ObEA0D7fP9afCI/D05D0d89kjDHGGGOMMcb+aoio1v0Prj9/vT6PV1dy8sKV+I+uzxljjDHGGGOMMXb1Pdu7z5OPJSV16M4DHvAglw06/5vnXO3/mRhjjDHGGGN/tisn/Vcey3c1C2KMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKh/xd/aexqbyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2vAAAA///aYjRz") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file1/file0\x00', 0x200000, &(0x7f0000002180)={[{@nobh}], [{@euid_gt}, {@uid_lt}, {@seclabel}]}, 0xfc, 0x561, &(0x7f0000001c00)="$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") openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_emit_vhci(&(0x7f0000001980)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x428}}}, 0x7) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(r1, &(0x7f00000000c0)='net/snmp6\x00') rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) 2m29.11872467s ago: executing program 4 (id=550): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) unshare(0x22020400) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x1f) 2m28.849808503s ago: executing program 4 (id=552): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @nl=@unspec, @can, @nl=@kern={0x10, 0x0, 0x0, 0x40000}, 0x9, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x4, 0x100000001, 0x6e4d}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = eventfd2(0x0, 0x0) flock(r5, 0xa422928b49da8f69) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000000140)={0x0, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9"}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000740)={'macvlan0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x3, 0x1, 0x2, 0x1, 0x7f, 0xbcc, 0x8, 0xffffff8a, 0x9, 0x0, 0x3, 0xd9, 0x6, 0x7f, 0x9, 0x7, 0x5, 0x7, 0x7, 0x8, 0xc, 0x98800, 0x8, 0x0, 0x1, 0x8, 0x5, 0x1, 0xd, 0x1, 0x7, 0x2, 0x27ac8c95, 0x5, 0x9, 0x10, 0x4, 0x4, 0xffff045b, 0x7fff, 0x10, 0x4, 0xffff, 0x7ff, 0x8, 0x9, 0x6, 0x4e7c, 0x10000, 0x9, 0x8, 0x9bb, 0x1, 0x7, 0x5, 0xf3, 0x2, 0x773, 0x7, 0x6, 0x8, 0x5, 0x38766f72, 0xfb47, 0xbdf0, 0x400, 0x9c, 0x10001, 0x4, 0xf, 0xaf, 0x1, 0x84, 0xffffff00, 0x5434, 0x6fb9e432, 0x9, 0x7f, 0x10, 0x1, 0x80000000, 0x1, 0x5, 0x0, 0x8000, 0x6, 0x5, 0x3, 0xfffeffff, 0x50, 0xfffffff3, 0x92, 0x875, 0x114000, 0x0, 0xffffcc06, 0x16000000, 0x6, 0x1, 0x80000001, 0x1, 0xca6, 0x1, 0x0, 0x0, 0x4, 0x3, 0x2, 0xffffffff, 0x8, 0x4, 0x4, 0x4, 0x0, 0x1ff, 0x4, 0x79d9b987, 0xc, 0x0, 0x232, 0xff, 0x3, 0x1000, 0x3, 0x0, 0xba81, 0x5, 0x4]}}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='{\x00', &(0x7f00000003c0)='%\x00', 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100), 0x6) recvmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f00000007c0)=""/201, 0xc9}, {&(0x7f0000000900)=""/13, 0xd}, {&(0x7f0000000940)=""/73, 0x49}, {&(0x7f00000009c0)=""/186, 0xba}], 0x5}, 0x2) io_setup(0xfffff925, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, 0x0) 2m25.406882699s ago: executing program 4 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000000)='./bus\x00', 0x0) 2m24.537248757s ago: executing program 4 (id=561): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m23.623683255s ago: executing program 4 (id=563): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000002800)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$9p_unix(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x928071, 0x0) mount$bind(0x0, 0x0, 0x0, 0x30e0024, 0x0) 2m23.203366229s ago: executing program 4 (id=564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) llistxattr(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r4, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 2m7.542304402s ago: executing program 34 (id=564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) llistxattr(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r4, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 1m39.619668506s ago: executing program 5 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x4) 1m39.367411024s ago: executing program 5 (id=657): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000000)='./bus\x00', 0x0) 1m39.027928077s ago: executing program 5 (id=659): socket$inet_smc(0x2b, 0x1, 0x0) epoll_create1(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0xc0045003, &(0x7f0000001100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioperm(0x0, 0x444, 0xb1f) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x2000, 0x0, 0x2a9}, &(0x7f0000000340), &(0x7f0000000280)) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0) 1m37.052150796s ago: executing program 1 (id=664): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x5518, &(0x7f0000002480)="$eJzs3E1vG1UXAODjpOn32zdCLNh1pAopkWqrzkcFuwCt+BCpogILVuDYjuXW9kSx44SsWLBELPgnCCRWLPkNLFizAxZF7JBAnplAA0VFih0rzfNI4zP3zvXxuVZV6cxEDuDMmk9+fVSKa3EpImYj4mpEdl4qjsxaHl6IiOsRMfPYUSrm/5w4HxGXI+LaKHmes1Rc+vzm8Mbqz2/98s13F85d+eLr76e3a2DSHj3l+osR0d3Oz/e6R689KOZrw3YWuyvDIuYXug+LcZrHveZmlmGvdriulsXlVr4+3d7tj+JWp1YfxVZ7K5vf7rWy2B+2DvNkb3hQ28nGjeZmFtv9NIutg7yu/YP8/7ZL/UGep1Hk+yhLH4PBYcznm/vNfD/bD7NY7w2K+Txv2mjuj+KwiMXHRT3tNLI6Np/yZZ5ib7d7u/vJsLnTb6e9ZLVSfalSvV2u7qSN5qC5Uq51G7dXkoVWZ7SsPGjWumutNG11mpV62l1MFlr1erlaTRbuNDfbtV5SrVaWK7fKq4vF2c3k9XvvJZ1GsjCKr7Z7u4N2p59spTtJ/o7FZKmy/PJicqOavLO+kWzcv3t3fePdD+68f++V9TdfKxb9o6xkYenW0lK5equ8VF08Q/v/pCh6jPuHYylNuwCA00f/D0zDk/r/NG/Dj9n/79yPmHz/P3Kg/z+2U9X/nvX+fwL7h2PR/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFk/zH35RnYyn4+vFPP/K6aeK8aliJiJiN+fYDbOH8k5W+SZ+5f1c3+r4dtSZBlGn3GhOC5HxFpx/Pb/SX8LAAAA8Oz66uPrn+Xdev4yP+2COEn5TZuZqx+OKV8pIubmfxxTtpnRy/NjSpb9+z4X+2PKlt3AujimZPktt3PjyvafzB4JFx8LpTzMRPx0ohUBAACTd7QTONkuBAAAgJP06bQLYDpKcfgo8/BZcPaX9389ELx0ZAQAAACcQqVpFwAAAABMXNb/+/0/AAAAeLblv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzBzv3kpBIDcAAuA/Pg/YvEuPcq7uAYHsGlS8MBvARHwCt4Ac6AO49gwNA2RgwYyZQhkO9LhtJh+NESWLSdFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO6aWejZ8erh+b5ixXzZTpDQAAALDNop6N45Nhqv/N5//nU5e53gkhVCGEbWP3bvi1kdnNOfWO6+svbXgOISasP6Ofjz8hhJt8vF0c+lsAAACA8zWfTEdptJ4ehsduEG1KkzbVv9sdr3f2zFtfXw9fG7crqdZ5V4XC4u+7F+4LpcUJrEGhsDTl1iuV9iPx7/4xazf4VHRSUX3//mJ9BwAAWtTdKNodhQAAANCmu2M3gOOI67v5Xvy8FNhPRV7e+71RAwAAAE7Qvvd3AwAAAKcnjv/t/wcAAADnLe3/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCEt6tl4PpmOmuYsV82U6Q0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8sz/vKBACYRAGe9d3JnP/w0qDpqYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rykQAgEQRTMGf876fsfVhL0DCJEQMOjilo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFzv28xlHFAQB/M7O7sVVxjbKHiCgI6sWm29ram3hQggf/BCGk2xq79Uebgy1FzMWb5NyL6FFEUOKt/0PPDeQSbznsIYJnZWZnkkmymDWyM5vk84E377uTx7zvm4SQ777JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUBi8txcn6aE9jOP83JOdB0tpv3GgTz1a25xLWxpHVSZ9MrxcfhF16ksEAACAsyMp6vsQwlZzfSHt43ZW/zeLMWnN/8Ozw7io5w/W/UVf1P5p+/237Rd3J2oP50kvemO537t4OJXG5FZZl2/GGvXckSMa2Z3P3ntJsm9I/OHqC4Nmdj+j7x4/fr+VhTP/P2MAYDIuFH0eFH8PpX23zsQAODMapcK7qP+Tdr05AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFRhsBqeLuIohDDX2ItTGzsPlkb1j9Y254p29eHDtfI100s0Qwg3lvu9ixWuZdrdvXf/1mK/37szKpjJB/3bmOMHr0zsykcH7+Yru/XxGINDOPylqPqcBccM4on+GJ/WoKZfSAAAnFo7eU2e1vVbzfWF9Fw0G8LfP+6v/98oxWHM+n/7k6tPynOV6/9uZSucfvMrt7+Yv3vv/lvLtxdv9m72Pnv7Uved7uVrV65cm8/eK8mOr9edJgAAACdYK2/l+j+ePbz/f74UhzHr/y+/735dnitR/4+0t+lXdyYAAABn2/Ov/vVnNOJ81GqFrxZXVu50h8fd15eGxxpS/c9m8lau/5PZurMCAAAAqjBYjfbt/18vxWHM/f9nfnrpl/I1kxDCuXz//8LS5/3r1S1nqlXx78R1rxEAAIB6nctbef+/mT3/H+8+8hCHEN58bRjnHwM4Vv2ffPDtz+W5ys//X65uiVMp7gzvR9Z3Qmh06s4IAACA0+ypvKXF/h/N9YVPfz3/Ucvz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABV+ycAAP//+lA8jQ==") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 1m34.020039033s ago: executing program 5 (id=671): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000100039040000000000000000", @ANYRES32, @ANYBLOB="00000000000000001c00168018"], 0x44}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0xfffffffffffffe61, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r6, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 1m31.878884999s ago: executing program 1 (id=679): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x68040200) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8000f28, 0x8) splice(r3, 0x0, r0, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) 1m31.872636661s ago: executing program 5 (id=680): socket$inet_smc(0x2b, 0x1, 0x0) epoll_create1(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0xc0045003, &(0x7f0000001100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioperm(0x0, 0x444, 0xb1f) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x2000, 0x0, 0x2a9}, &(0x7f0000000340), &(0x7f0000000280)) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0) 1m30.434927625s ago: executing program 1 (id=683): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x516, &(0x7f0000003400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1m28.819350906s ago: executing program 1 (id=689): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x24, &(0x7f0000000280)={@link_local, @random="000067ea7d1e", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x16, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "052a"}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000a82a21d9a9080000080000000200000028002f366f00000199dce878b9d77e2c74d1efacc1681f5c19310b9c4cb5214a5c4f0664cbc17be76d9ba5f654f960618354253f893801c9c8b1bd29d1ca964455651303b690f1eaf67c6eb6bf991ff0a0252006d3bfec80aeeb694da592f8fcc893d54997b5ec655b02018f1663553a0dd4675878ffdbdd65378f42d64878fc99d798af96304c6f28f53ea8b789980f856dd1454bab407a94fd52d7b2f4312014f3af0bcfd21f44be00176b8b0c82c6fc63a8298f3e29ce42408df3c8eb62602be8d34816459ec90962016502fc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) 1m25.154386859s ago: executing program 5 (id=695): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffc3c) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x1a8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xf}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x4, 0x1, 0x6, 0x7, 0x1], 0x0, 0x1}, {0x4, [0x2, 0x4, 0x3, 0x7, 0x7, 0x1], 0x2, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000500)=0x304000000) add_key$user(&(0x7f0000000080), &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000001600), &(0x7f0000001640)=0x4) 1m24.210237471s ago: executing program 1 (id=697): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1700000000100000000000b19b22efa21357ad00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_getres(0x8, 0x0) 1m18.990891712s ago: executing program 1 (id=704): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xcff, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@discard}, {@usrjquota, 0x22}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@noacl}]}, 0xff, 0x463, &(0x7f00000004c0)="$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") r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x5}, {0x1, 0xe}]}, 0x14, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x40100000, &(0x7f0000000440)="383131bb83a76fd55646703008f6c5dd71d236739ea014e7d6baa30af163367d4a34860907db4d822cf57d4da13ccf6a1aa2d8cf9ed850b1a18ca98211a56b0d6516e8f04b33c24876b66a091c951118cab968db090d078c5cdacd756b9ec5d400fe39bb41bbaa2499a3fed515e4", 0x6e, &(0x7f0000000140), &(0x7f0000000580), &(0x7f00000005c0)="2ee02c9810861e16bdad9dbeab19ce1d069a29fe9318db42c71662df058d98b8c07b5c4ef4031b1e7948d3b6a8fc3a7f7ed91fc00b486c797a6055ea127b96d699244ff56812bc209325c1c6a3be91d223d2a7a41fb4169b7084383f84e9e268f24d7d25f25e8ea6522855da7de7ebccf32e166aae3b27e2d1faeac2854d") shutdown(r1, 0x0) dup3(r0, r1, 0x0) getgid() 1m9.929350937s ago: executing program 35 (id=695): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffc3c) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x1a8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xf}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x4, 0x1, 0x6, 0x7, 0x1], 0x0, 0x1}, {0x4, [0x2, 0x4, 0x3, 0x7, 0x7, 0x1], 0x2, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000500)=0x304000000) add_key$user(&(0x7f0000000080), &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000001600), &(0x7f0000001640)=0x4) 1m6.921528062s ago: executing program 7 (id=721): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)={0x3f}) 1m5.994324658s ago: executing program 7 (id=722): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000035c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x1}], 0x1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, 0x0, 0x329, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) close(r1) 1m4.453706527s ago: executing program 7 (id=723): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x10400, &(0x7f0000000380)={[{@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@numtail}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@shortname_lower}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}, 0x0, 0x237, &(0x7f00000009c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xc, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getresgid(&(0x7f0000000040), 0x0, &(0x7f0000000240)) 1m3.067949372s ago: executing program 36 (id=704): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xcff, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@discard}, {@usrjquota, 0x22}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@noacl}]}, 0xff, 0x463, &(0x7f00000004c0)="$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") r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x5}, {0x1, 0xe}]}, 0x14, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x40100000, &(0x7f0000000440)="383131bb83a76fd55646703008f6c5dd71d236739ea014e7d6baa30af163367d4a34860907db4d822cf57d4da13ccf6a1aa2d8cf9ed850b1a18ca98211a56b0d6516e8f04b33c24876b66a091c951118cab968db090d078c5cdacd756b9ec5d400fe39bb41bbaa2499a3fed515e4", 0x6e, &(0x7f0000000140), &(0x7f0000000580), &(0x7f00000005c0)="2ee02c9810861e16bdad9dbeab19ce1d069a29fe9318db42c71662df058d98b8c07b5c4ef4031b1e7948d3b6a8fc3a7f7ed91fc00b486c797a6055ea127b96d699244ff56812bc209325c1c6a3be91d223d2a7a41fb4169b7084383f84e9e268f24d7d25f25e8ea6522855da7de7ebccf32e166aae3b27e2d1faeac2854d") shutdown(r1, 0x0) dup3(r0, r1, 0x0) getgid() 1m1.925279498s ago: executing program 7 (id=725): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f00000003c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000500), 0x24, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/38, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000680)=""/93, &(0x7f0000000700)=""/83, 0x3000}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008700000000000000a6000000ffffff8595", @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x3, 0x105, &(0x7f0000000580)=""/261, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_forget\x00', r1}, 0x18) mkdir(&(0x7f0000000080)='./file0\x00', 0x127) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 57.92756912s ago: executing program 7 (id=729): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500050002000000050001000700000005000400000000000900020073797a31000000000c000300686173683a69"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x30008092}, 0x4000080) 55.687437025s ago: executing program 7 (id=733): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000700)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'test_dummy_encryption'}}]}, 0xd, 0x5e1, &(0x7f0000001200)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000001f80)='./bus\x00', 0x14927e, 0x0) r5 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r5, r5, r5, 0x0) 53.267200808s ago: executing program 37 (id=733): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000700)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'test_dummy_encryption'}}]}, 0xd, 0x5e1, &(0x7f0000001200)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000001f80)='./bus\x00', 0x14927e, 0x0) r5 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r5, r5, r5, 0x0) 17.175569935s ago: executing program 2 (id=734): socket$inet_smc(0x2b, 0x1, 0x0) epoll_create1(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0xc0045003, &(0x7f0000001100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioperm(0x0, 0x444, 0xb1f) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0) 12.694783028s ago: executing program 9 (id=791): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x400031f, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'vlan1\x00', &(0x7f0000000400)=@ethtool_channels={0x1, 0x401, 0xe7c, 0x5, 0x0, 0x4, 0x8001, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000d014113c8cd69b279e465e4464f601f12729b0d2c0a619909ac0d1f6a7673a507329f5be4bd4ce09559a37881aa8d17696615f623866539efeeb212cdb688e92af967ea6de4843f3bd3f2e464", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002c0002000000080004"], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000000), 0x1, 0x625, &(0x7f0000001400)="$eJzs3c9rXNUeAPDvncnvvPeShsd7r2/xXkC0BW3SpK0UEWwRXJVSfywEN45NWmqnP2gimlppAnUjiBsXgisX1oX/gxYEV/4DLty4kkoR6UYpOnInd8ZpMjeZxMxMm/l8YDr33HNzz7nJfHvOnDnnTgA9azL9pxCxNyIuJxETDXl9kWVOrh539+drp9NHEpXKiz8lce16stx4riR7Ho2INOO3sUi+joiJ4vpyF5auni+Vy/NXsvT04oXL0wtLVw+cu1A6O392/uLsk7NHjxw+cnTmYMNPnXluq9e3p2H7xI3X3xx77+Qrn358L5n57LuTSRyrVzq9rq2eezOTMRmVTOP+9Pd6dKcL65Ji/XXyp2TtjrWebWOF2JLa368/Iv4dY1Fs+GuOxbvPd7VyQFtVkqi3UUCvScQ/9KhaP6D23r6198EDbe6VAJ1w53jEY/X474+I1fg/NpuNDcZQdWxg5G5y3zhPEhEHd6D8tIxvvjp5I31Em8bhgOaWVwazIfC17X9Sjc3xGKqmRu4W7ov/QjaMO56NH76wcTFjeRmTa9JZ+YPbvR6gdcsrEfGfZv3/zeP/1ew53f/aNsvPiX8AAAAAAABgG24dj4gnmn3+V6jP/xloMv9nNCKO7UD5m3/+V7i9A8UATdw5HvF00/m/hdoh48Us9ffqfID+5My58vzBiPhHROyP/sE0PdN40s8bfjoiDrw/8VFe+Y3z/9JHWn5tLmBWj9t9a2YDzZUWSztw6dDz7qxE/Lcvf/5P2v4nTdr/NL4vt1jGxKM3T+XlbR7/QLtUPonY17T9T+rHJBvfn2O62h+YrvUK1vvf2x98kVe++IfuSdv/kY3jfzBpvF/PwtbOPxARh5b6Knn52+3/DyQvFaNhJeJbpcXFKzMRA8mJ9ftnt1ZneJgMtX7oOxFRjYdavKTxv/+Rjcf/6v3/hjgczu7x1Yp//T76fV6e9h+6J43/uY3b//H72/+tb8zeHP8yr/xTLbX/h6tt+v5sj/E/2FirAdrtegIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAw6gQEX+LpDBV3y4UpqYiRiPinzFSKF9aWHz8zKU3Ls6ledXv/y/Uvul3bDWd1L7/f7whPbsmfSgi9kTEh8Xhanrq9KXyXLcvHgAAAAAAAAAAAAAAAAAAAB4Qo6tP69b/p34odrVqQCf0Zc/iHXpPX7crAHSN+IfeJf6hd+XH/y/3KlUdrQ7QQa22/5Xrba4I0HHb7P/7uAB2Ae//oVf1t3bYULvrAXSD9h8AAAAAAHaVPf+/9W0SEctPDVcfqYEsr/7B4HC3age0UyEvY7Cz9QA6zxxe6F2m/kDvanHyL7CLJfWtX5su9s+f/Z+0p0IAAAAAAAAAAAAAwDr79raw/h/YlXLX/wO73gbr/5st7HG7ANhFrP+H3uU2X0Cts5/3Tf/W/wMAAAAAAAAAAADAA2Do6vlSuTx/ZWGp5Y3rWzn4r2/8GHlZz9Q2VjpQjUpxZ86zXOrcr+4h3+iPiDVZlbHVl+35Uvnl6Gx9ahHTibIGOlhWzkaX/j8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW+SMAAP//fSQouA==") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) 11.271694892s ago: executing program 8 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r8}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x4, 0x0, 0x0, 0x0, 0xc7, 0x40}}}]}}]}, 0x58}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000a93000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.239485356s ago: executing program 0 (id=794): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe2089, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 10.511371511s ago: executing program 0 (id=795): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x7c81f60d18896424, {{0x42}, 0x1}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x1}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x105, 0x97e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x200248, &(0x7f0000000040), 0xfd, 0x467, &(0x7f0000001f80)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c8, 0x12) 9.527488851s ago: executing program 0 (id=797): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000390400"/18, @ANYRES32, @ANYBLOB="00000000000000001c00168018"], 0x44}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x1d, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0xfffffffffffffe61, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r6, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 9.411361309s ago: executing program 6 (id=798): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000035c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x1}], 0x1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, 0x0, 0x329, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) close(r1) 8.868678467s ago: executing program 6 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) syslog(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2968e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(0x0) renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) 8.099636114s ago: executing program 0 (id=800): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0005}]}) timerfd_gettime(0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800007d2a2879f13a90005600230d00000000000000ec06000000", @ANYRES32=0x0], 0x18}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8001) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) 7.963021207s ago: executing program 9 (id=801): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff00008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = io_uring_setup(0x55c3, &(0x7f0000000480)) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x4c2103a0) add_key(&(0x7f0000000280)='user\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) 6.357149265s ago: executing program 8 (id=802): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c00)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/68, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000480)=""/83, &(0x7f00000001c0)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r2, 0x0) 6.353795869s ago: executing program 9 (id=803): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fstat(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810410, &(0x7f0000001080)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="2770a1eab214a6d2e97ec9f648d67de6fdd623c4abf443a2a07ce9798402b69ec3159344145e5e3807a41a41b78ab9ee08cad1e6acef5a57ad9118c3f2dd3327c89c5cfa74e7d66b64f9711eef29bdf12c2a3e3fc41a3a73fb09ad49eaef513b6967307e859de21830fe09bd754cb1c2e5bf745ff043c9f243928b6fd5d31c4294f36810449d1acfa84313831cd80bdeccc419f5e6b68237be907157318c065c9a5e801a27f2e8fb1e33c049505d76b10bfa5d16d09dc1059d094a6463c84caa597030af613d7c4205f39c848484bbd7a01be91a654a5cc9329473c6", @ANYBLOB="e2d3defc6ea7d9d6f5261ad72a34630b954e0eaaca3369568145e8bb6cf6bb3f8698a1a86cd1bee9cebd9f8142b89a175e9a2795a5f787d7836a75c24cb6a25df7aee443ed4af428a9a8b8b9a74879740bcf7064014e47b7b06ec12b27580f0a3d8eac4e5dfe605ce84878dc09ad02e8463647ffbd8f614da3de7683442fe9eddfe0b70b6daace110c94e77d1cd34a83cab18695117b21398bfcf9a25c66ddfebf5076342cfeea342c954e5d56122b88646cf159b58d6d97dd3a71bdd7297327efd7a96d3509aeacc78cb68f6f1ccf48f84bed5ff4db110968c09bef597ff7c5f67d2a0378db144d369785c09a8d1e9bb7cab1d8b8edc638a8d4df64625b2c299adb9d328cdbcef5c07130950b834b47ec9a32eb95efec40f750a60a777dc17a229a452c444a88cc9708d138d2030e20d957d4408cf4f3febf13536b9c54fbf540ae88da9399ccec8155d8e1cb1f2ee5d633c4730ed582df2b4118eea97ec0e78d5a5fac0a7eefd94f77384522ee218df4d5ed694d21b3566cedec20599b9ad6c90497397a3e73fa51ee6ddc63b6d7db7464e1d3ad51428b655c77be73369c35f85a9d42e247ce91834dae86fe0fef0b8a041151ac397525a1823139f7d1503ee9c6be4faa0a242ce2272c5e219bbb7e908ba029b575e24a920250f365d8e5c71e1f42050248b1622e6675a52e05724fe70c54c1961605c46bd3b6a89394a98de71edb8cd64ee5caebb386d4ebf36563809b58a98d139c93b6d788711d30d2bc53502a7f1ac12345604c9196f0adb45aa0ab816cf32eaaa4423845b851136fbfa7d215676bfcf0611b451ad130c6ef71f4251445dfa406630810417500381c11b9b530321ae7ab7705451942220d8a55369c052adf74d4701f3833a53bde2ea826957e593b0c0b82140c6f2ed9f3b3f871f19a3c310115f664c7b1ba920613ce8958a7ce1da17aec341d151f06edaaa80469bf9e912aff7f004579d5df0e192d9a37526e4f0d955e6d195f3be7fab9967431c67bdf0c57c80b58ab708e0a899a5f48960dd38486efde7a806cc6b05baf79a4b5538023823d5f2708d2404879f090633645c0814b325aba300dbbbf1d0df9d878901a44e6c3045d715dfe5e1b543a29088eb23cbf64206c67f88eec79cb0741af1e5a2bca8b05fc3ceb16e872abd8caaffa47077be13cc8f8e04670ae278958abce5432359935fbaa7d2c5df08a4c9258a020ae9ac6d439a64df94c8008abeca0c5210727a2c8ac5090bfe488adf07bc84a7467416b79f17006a94afe07fffad50b4e2f0bcb9668770b82d4e9f3a7f9cb2ed6fdee964c3da87dd9c1ebea024dcbb5a3a081a62e4c0bbf9dc7d537036415ca1d81044ef6398a9bc4009c0e0287a1a0900364024b5939b8d681d1829b0c6a40ba5206a8b779350f2765e6fdfe401b445f1610eb4b5538f4a263e5540a16e7979b4fb5058b0dad06e1305404f4a1b4e27f36a6ecb58cf328de0bfd06d4b828239a3f71c8eb31bb93f9b9ddacdfda53bd03958652667060cdd073b398eb4946b2670c8ef8f27ba16af189375ab72c8b46104ccce6b4f3708c75effd964664e5811c3afd204dbccf967191c07025a53be6b3bc41509d5daac37ecc08d459d56bbb86444c88ef5a42413d743e285972e7bb781e0c83a3bfa9c2191809a5da156141073e902711b139a8d27246dd19bb3eabd2dc61f6a78eb3a9b6f5d2a59f327fe69d4f1887eb488f2ecd281d0bd3088ef53ff1f2238729dec679f2a9c2a381e1dcac9b86780eba8813ab8a7a427336489c42d0496b6f6833c7153b346f56a60e39e6d903440961743fe14c0be9bdc9b479c19aceb64b04e28c15fb5dee3b461004f01595140614c7db2297a171379a34072ff2087c2196a2499d82533cf476e827428a8465cde6dc277d2c232d3da09dc7d5e94aed1ffa4de2b36a79c7bdee724cc75c7f27a0e5002c4b92fdf76ebef5ffc602fd027dbe1acef58ce6fa9a2d34ee22732161bd055539b0f7980f1509f4c6e650d052842b455829b02016f2086c2fc3f4ff494b9b9fef32c83f93fe85e3b6743cd8c522bc2e6505c2fd936f715c5f596da2352f4ddbadf536fe7e9140f8a1eec5f2e0333cd84f1255d50d879c53025d805d6b14f82f871178faa8bc798c2f0bb7671ce185c60ae7957d223b3f641f9a306795a818e60c89002537bd225bb2d9687f329114201207b7840e4ed394d1fbc6e9c4efd6a0a68db1096076dce6a0075417e06e40cc9d5df31a3c7ea2dbee5a369bbff556a5caae847f517d0fbb473d5275d0ba06da7e8a62802e43253838168befd6fbcc012f12076e6e6972d1f1826d4834b3940ddf374898d1af97e1903f37cbe83438511387d239c6d4edeb3884a9c587d21ed226ac648f83595bbb5cd37448c2cd259636e2610ad8427e4f7c7c90dbb43cbc2815df305e85f7e307fff0715d2582f152a0f7c5322238ab570f1b9bbe4092da115979fe0a5753fdfb7ee53b4de13a767d16c4507d2e7f6f58cc216a03012abdba49a01a1dd4bd1ebb936e9bde78cd1b2e987d2d7296dd7aeb37fbfb270e235bc29c025ba6c4693d09f901f1ef6b7a2142ed3a24c35817dcc9d3c3ede970eecd9d19993673ade157b8933c8dcd259bf6537827d7368e73c73e1dbea3a10a28281eba05e3f3d6f78b48a12141977f312f45bccb964c3ef8f89efad2e4413bdbdd59162b6ff6aab57a76c10618824f487a6f3077d8bad06ce39e118247b4ec7fd681ef95db0f2d3dbd142dc2090e926eae5595f29a3e1cf00887f5454f52d091cc24f62391461e6267bc1b084aa05b28c8c6b5cb16d8fbb87c993de873a7dc28cc44ede3cd02ee73dae39cbf472ddebfcc506d9a7a833cfd7b45e813c251110d206148c4e1cfb68ed20d80cfa6c7e4677037eb9e1bc021b34f9dcaaded11dfad1c59a1d52fd046610134fc80335a7ac0e2083ad945a49e30565cff09b8d200d9370461def8bff3d223a75370554210314af46adf26532159fd681e55ae9193df30276d87c44ba3aaaeab62013b0da5f972ced7e6d84e26394a230e35a7bb2a1ab0f8533e2109a173299352414c744fa59a118cca99c0bca930117b84e7c735cf6d879c1a7e151ef9f08f1518cd249115387247d2f9471d07a94324a13073142d8c3cf804528038d9c898492dd0b2d3ffd5f15c2e391c35f45d34be4b1a520fca923b97a74e84212f6b11a71d1fbc40add864257d2205cdd7a71335af471a66a494ba3ca51f2348c4cf99170ec026e195667c1ca4975618785bf8a3b6b107d2bdaaef86681bac9cd5f00cc5e08c1e6f65a50061a1c6a02d6ce3f2879c77f88d9df98d6049f5e062dec3316e5982b6dd582d34ffe0c4330dd40c99256934a5c03fb1b94c370091572283bb2367f5c8af689d4fe201f5602a1c77c9d9fa7f687f3cd7edba0fe2d475345ca6e5aa3702000083ed014d3f13f90ced4ad63f7c7037a7bc77da5f8d87aa2c97fdae951e1e3be2b1c5402f570ce34494e7e28d40a45a208800b165919ce9282fd261dfa61367ea2518859a269418b70bf8de06f966ff12f7cd9057011d5d71d03b8ed4768a48ba7f0cb259ad66067078e681d894f876101abc02370069b9ba567e942444222993e252cf6a682831db337edf676190b8aeb95c9fadebb5b880357700ed570d309b835fba9c411664186f2ef4388768473caa93e32ea3b41408507fb2cec956b859ee6628dacc32dede23ac4430aa94c4feb976f8e0b07ac1dfe28c69cb31190d31779d5868f82145a6bf4e691179d576ccc23e2412d23cc12b50734a0d55f929624411c6ffb38005cc915caf9e7d38dc99f3e5ccf90c32e51cb440ba2c828da2819b275601b3aee0a795b5535c27b1fd6b0a1e4c047afbb692eff7e81d9ae59ecdef60e689b3b7d5344c3e08089bd12d18e37956a7a3c708414b5d3a2b7a480b992384972a17bdc68d824bc0769cab5ab6411b27306fcc5ff6ff8dfe4efc260eaf82618efb7f1e7163fe7a1fc5975950b6d0da5622eba102fa747cacaf19358f8da0168bd8c921aa16b4f4c21b4067d7c3d61b0608206246d029174b14f4c8161fa0d0110533718cbc1b852ffae92ffa4d142a0c47fe15f7ae783bbb05568c2a2a7ad61b9037c8f31dd786431ad303d6b720fd05731494f635b2842ef530e83b1ccc23dfebb200a8a51ed70fc206e29723f0a45bbce0165ec9fdffb532545b900acef2c6902d1907f2b6d9aaefd243cc543be85e56920ad16463b91d4825d71a9abbec204264a5172d5cc9f167861a2176baa96fc85e29ec32db32e9400bfdbfb106e5c695ba9dd4f58c229db69cb1f0c810fee425b1c1e95e8b30e1de94d78e0b7b814a7e3c5210f3dde21a3ef2574796af33c71f986847a0355f5ac6d8ff4475ce55747db603580ef35383a5161847875a306d8cf627927a5143c839a5892156cf8874b46e27d2bfb6abefe00c6bd830dba307116fed2ce23bb0a9731d13c2dd9fe39574702ff12a2d57a21c960e3ae48719840646ef482994d8749b28049e5a16da9a468a79ad6664a7bdb65e7725e5afaf5283a0c708f825d1a6d818bf3c8689187f28eebff58275422f60c718594981c6d3760beff9ea7f1fa5db08df7443f193505678d7b190b2ccca961d9ca3dcd9dffff27f26d067a0a6d64661b07d668880a9234963f67d8e8ad06778e896b297d2dfd3c8a0b98936474e1f443f338cef670097d491697f14de8d089092429929c885c57af2e400ebc600b524912436f796bd7bd76e9d93df3e68f597061727ee25fc1844be45a46b2d7efdee22b26b0bf25b8549bdb414c611b964e4003f6371f7b8e380cd1ed24cb5f9ec061b1b5b926a9f8630e0502a5d5a7541cc6dc992b7f6068015722a66a7d907bb52269bdafa12f24e27f005fd1d57f4b402ffc775751de2bba9d04ad77db0bbb27e7496c6b5c0b586f42c83247d54cb8f07130d50b196607d3ee56d6dbd314786ecf143d4209c570a3ffe0cd170c23a79dfde969441f60665eb6f0d6415e1c2fa7f58b86fffb8cbb1f227cbef3fb069dd29f9d36d0ae43d893aa72cf37c44bd24c208f364a55d630cedd0927062e136206210936e744ebd93a2a5f6cd383126b2dfaa2dfd864a0aea6b911f41c9dd2d87d04608dfe0665f1ba4c3a078c6c87e74f257b71e0cb5bbb7b519b4d1c708e41baedfeac26af0170c47331b3f44a7ef4e3b730bbbe4bc76f53691c1fbb567f4ec434db2cb8e598a37ef7781868ab7214e4010e298e82c74bd836e811db92a7f1dd399adf60b679ee875b96a5741e5909a3d245597fdead150e27c8f01826c90c81d56a57169bcd22473200ebed427c8e8a3caf0ad34460ad0ad2f109ac45f4edd9426d5caeda4a29dfa8728a1aae45d627e7e38ad6edb3d90df98d5720cd2982071a43e681f523b6b79fb20f1c0e688829c657f5d858a0c2b482f2aa236aca4853d1c51742b78d46efce6ba118f08bd3e00d7538401c5a4356b5436a99a03c8444e838606dd853c89103bf9c0e8a0248f374dac905f898aa87f9a402f039630f65d88094ef0eb8884576fa2eb181628285ae16bda2a6a87eb9eb1b2301dd2b07fe07e0c35836a82f0e71b91acc2b51d197d6883a9614cd461a58c0a61c4f3adb8545837d0bde445b87cc912ec4b38276d408605b9e866ede8a629cd3068fa4a759a7c87c78eb6ce521d014edcb67b5896e339b237dc09430205c34b6c194a6994556c5ca8a33ac62043d795b774cc1aa0033001d0dde0f2c98d008545f99e98606145f3aecb5097e661296f5222c7841695086bf329", @ANYRESDEC=r4, @ANYRES8], 0x2, 0x1da, &(0x7f0000000800)="$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") 5.483777747s ago: executing program 9 (id=804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}}}}}, 0x46) 4.819022977s ago: executing program 8 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) listxattr(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) 4.683131114s ago: executing program 6 (id=806): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001e00), 0x40642, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) 4.358968857s ago: executing program 0 (id=807): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = dup(r0) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) 4.215865274s ago: executing program 8 (id=808): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500050002000000050001000700000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30008092}, 0x4000080) 4.187337721s ago: executing program 6 (id=809): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000035c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x1}], 0x1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, 0x0, 0x329, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) close(r1) 4.039979761s ago: executing program 6 (id=810): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000010001000d00000001000000", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x29, 0x37, 0x1, {0x1, 0xfffffffffffffb15, 0x1, r0, 0xb, '+-&].)%\\%\x99-'}}, 0x29) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000340)={'macsec0\x00', 0x7f}) setpriority(0x2, r0, 0x1f2) socket$netlink(0x10, 0x3, 0x0) 3.887322469s ago: executing program 9 (id=811): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 3.432595795s ago: executing program 0 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) syslog(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2968e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x80, 0xfffffffc}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) 3.388102205s ago: executing program 2 (id=813): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.291638273s ago: executing program 8 (id=814): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040ac05620200000000000109022400010000030009040000010300000009210000000122050009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000340), &(0x7f00000006c0)='%pB \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tkill(0x0, 0x12) link(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.119336186s ago: executing program 9 (id=815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xffdd) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x401054d5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB="0000000100000004000000000000ab01ae370000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)='u'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000f7ff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000000)=0x7) ioctl$KVM_SET_IRQCHIP(r4, 0x4188aec6, &(0x7f00000012c0)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}) 2.550071647s ago: executing program 2 (id=816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 1.119140319s ago: executing program 2 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x100000}, 0x20) 599.855763ms ago: executing program 6 (id=818): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000600"], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 370.160464ms ago: executing program 8 (id=819): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) close(r5) 147.645049ms ago: executing program 2 (id=820): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000035c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x1}], 0x1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, 0x0, 0x329, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) close(r1) 0s ago: executing program 2 (id=821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}, {"6cce80206dc3fe0c10"}}}}}, 0x4f) kernel console output (not intermixed with test programs): disabled state [ 298.198955][ T61] bridge_slave_0: left allmulticast mode [ 298.205246][ T61] bridge_slave_0: left promiscuous mode [ 298.212172][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.203945][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.331179][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.375689][ T61] bond0 (unregistering): Released all slaves [ 299.972832][ T6151] veth0_vlan: entered promiscuous mode [ 300.179290][ T6151] veth1_vlan: entered promiscuous mode [ 300.600510][ T6151] veth0_macvtap: entered promiscuous mode [ 300.667500][ T6151] veth1_macvtap: entered promiscuous mode [ 300.832530][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.843408][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.853564][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.869323][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.880920][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.891753][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.901951][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.912728][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.923787][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.934570][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.949741][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.050844][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.066480][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.078126][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.088934][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.099087][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.109960][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.120262][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.131162][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.141276][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.152013][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.173694][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.194096][ T6151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.203307][ T6151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.212600][ T6151] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.221886][ T6151] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.000656][ T61] hsr_slave_0: left promiscuous mode [ 303.163903][ T61] hsr_slave_1: left promiscuous mode [ 303.227893][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.235831][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.494130][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.502094][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.829821][ T61] veth1_macvtap: left promiscuous mode [ 303.836016][ T61] veth0_macvtap: left promiscuous mode [ 303.842156][ T61] veth1_vlan: left promiscuous mode [ 303.847714][ T61] veth0_vlan: left promiscuous mode [ 305.417518][ T6282] loop4: detected capacity change from 0 to 256 [ 305.587301][ T61] team0 (unregistering): Port device team_slave_1 removed [ 305.674477][ T61] team0 (unregistering): Port device team_slave_0 removed [ 307.194101][ T6295] netlink: 44 bytes leftover after parsing attributes in process `syz.4.105'. [ 307.203582][ T6295] netlink: 'syz.4.105': attribute type 3 has an invalid length. [ 311.645244][ T6338] loop3: detected capacity change from 0 to 256 [ 312.954208][ T6348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 313.148012][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 313.406031][ T1819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.414275][ T1819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.624100][ T4132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.632530][ T4132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.007975][ T6386] loop4: detected capacity change from 0 to 256 [ 317.071893][ T6387] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 317.123669][ T6388] syz.1.123(6388): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 317.325129][ T6389] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 319.900698][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 320.113104][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 320.189100][ T44] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.197725][ T44] usb 2-1: config 0 has no interface number 0 [ 320.204333][ T44] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 320.219564][ T44] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 320.230317][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.404665][ T44] usb 2-1: config 0 descriptor?? [ 320.494074][ T44] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 320.659216][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 320.668810][ T44] usb 2-1: USB disconnect, device number 2 [ 320.703333][ T44] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 323.866373][ T6429] loop5: detected capacity change from 0 to 256 [ 325.357225][ T6441] loop3: detected capacity change from 0 to 256 [ 325.469060][ T6441] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 325.702406][ T6441] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 325.712989][ T6441] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 325.721156][ T6441] UDF-fs: Scanning with blocksize 512 failed [ 325.983868][ T6441] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 326.475963][ T6441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.750765][ T29] audit: type=1800 audit(1730517915.472:4): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.140" name="file1" dev="loop3" ino=65 res=0 errno=0 [ 338.135496][ T6537] loop0: detected capacity change from 0 to 64 [ 341.995882][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.003030][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 344.971576][ T6576] fuse: Bad value for 'rootmode' [ 345.767966][ T6589] netlink: 40 bytes leftover after parsing attributes in process `syz.5.178'. [ 346.578609][ T6595] loop4: detected capacity change from 0 to 256 [ 346.809440][ T6595] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc14df490, utbl_chksum : 0xe619d30d) [ 348.190855][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.182'. [ 351.723445][ T6624] infiniband syz2: set active [ 351.728390][ T6624] infiniband syz2: added team_slave_1 [ 352.509245][ T6630] fuse: Unknown parameter 'use00000000000000000000' [ 353.235643][ T6636] binder: BINDER_SET_CONTEXT_MGR already set [ 353.242054][ T6636] binder: 6634:6636 ioctl 4018620d 20000040 returned -16 [ 353.454620][ T6624] RDS/IB: syz2: added [ 353.458874][ T6624] smc: adding ib device syz2 with port count 1 [ 353.465559][ T6624] smc: ib device syz2 port 1 has pnetid [ 354.111418][ T29] audit: type=1326 audit(1730517942.752:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 355.248785][ T6653] loop5: detected capacity change from 0 to 256 [ 356.020988][ T6653] FAT-fs (loop5): Directory bread(block 64) failed [ 356.027975][ T6653] FAT-fs (loop5): Directory bread(block 65) failed [ 356.035772][ T6653] FAT-fs (loop5): Directory bread(block 66) failed [ 356.042735][ T6653] FAT-fs (loop5): Directory bread(block 67) failed [ 356.054586][ T6653] FAT-fs (loop5): Directory bread(block 68) failed [ 356.062833][ T6653] FAT-fs (loop5): Directory bread(block 69) failed [ 356.069728][ T6653] FAT-fs (loop5): Directory bread(block 70) failed [ 356.076601][ T6653] FAT-fs (loop5): Directory bread(block 71) failed [ 356.083726][ T6653] FAT-fs (loop5): Directory bread(block 72) failed [ 356.090632][ T6653] FAT-fs (loop5): Directory bread(block 73) failed [ 356.684849][ T6661] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 358.349941][ T6672] netlink: 152 bytes leftover after parsing attributes in process `syz.4.201'. [ 358.947015][ T6676] fuse: Unknown parameter 'use00000000000000000000' [ 362.243552][ T6700] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 362.955174][ T6707] loop3: detected capacity change from 0 to 256 [ 363.651171][ T6716] fuse: Unknown parameter 'use00000000000000000000' [ 364.559165][ T6720] loop4: detected capacity change from 0 to 4096 [ 367.471137][ T6736] loop5: detected capacity change from 0 to 256 [ 367.957305][ T6736] FAT-fs (loop5): Directory bread(block 64) failed [ 367.964329][ T6736] FAT-fs (loop5): Directory bread(block 65) failed [ 367.971578][ T6736] FAT-fs (loop5): Directory bread(block 66) failed [ 367.978355][ T6736] FAT-fs (loop5): Directory bread(block 67) failed [ 367.985430][ T6736] FAT-fs (loop5): Directory bread(block 68) failed [ 367.992311][ T6736] FAT-fs (loop5): Directory bread(block 69) failed [ 367.999188][ T6736] FAT-fs (loop5): Directory bread(block 70) failed [ 368.006183][ T6736] FAT-fs (loop5): Directory bread(block 71) failed [ 368.013351][ T6736] FAT-fs (loop5): Directory bread(block 72) failed [ 368.020276][ T6736] FAT-fs (loop5): Directory bread(block 73) failed [ 368.531799][ T6748] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 370.202350][ T6757] fuse: Unknown parameter 'user_i00000000000000000000' [ 370.992150][ T8] IPVS: starting estimator thread 0... [ 371.138855][ T6762] IPVS: using max 240 ests per chain, 12000 per kthread [ 375.019785][ T6781] loop5: detected capacity change from 0 to 1024 [ 375.855099][ T6789] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 375.896148][ T6781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.910473][ T6781] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.590321][ T6151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.601674][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.731119][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.754572][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.777697][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.908120][ T5799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 378.919388][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.209322][ T6832] loop5: detected capacity change from 0 to 256 [ 380.660439][ T6832] FAT-fs (loop5): Directory bread(block 64) failed [ 380.667256][ T6832] FAT-fs (loop5): Directory bread(block 65) failed [ 380.674628][ T6832] FAT-fs (loop5): Directory bread(block 66) failed [ 380.681749][ T6832] FAT-fs (loop5): Directory bread(block 67) failed [ 380.688648][ T6832] FAT-fs (loop5): Directory bread(block 68) failed [ 380.695562][ T6832] FAT-fs (loop5): Directory bread(block 69) failed [ 380.702562][ T6832] FAT-fs (loop5): Directory bread(block 70) failed [ 380.709329][ T6832] FAT-fs (loop5): Directory bread(block 71) failed [ 380.716348][ T6832] FAT-fs (loop5): Directory bread(block 72) failed [ 380.723209][ T6832] FAT-fs (loop5): Directory bread(block 73) failed [ 381.449884][ T6852] netlink: 56 bytes leftover after parsing attributes in process `syz.1.252'. [ 381.742530][ T6829] chnl_net:caif_netlink_parms(): no params data found [ 382.150832][ T5799] Bluetooth: hci4: command tx timeout [ 382.417612][ T6857] loop0: detected capacity change from 0 to 512 [ 383.029907][ T6857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.045412][ T6857] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.244736][ T5799] Bluetooth: hci4: command tx timeout [ 384.648275][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.034447][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.042457][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.051422][ T6829] bridge_slave_0: entered allmulticast mode [ 385.062143][ T6829] bridge_slave_0: entered promiscuous mode [ 385.216992][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.224973][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.237636][ T6829] bridge_slave_1: entered allmulticast mode [ 385.248296][ T6829] bridge_slave_1: entered promiscuous mode [ 385.922188][ T6889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.929717][ T6889] IPv6: NLM_F_CREATE should be set when creating new route [ 385.972926][ T6829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.984363][ T6888] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 386.354548][ T5799] Bluetooth: hci4: command tx timeout [ 386.821596][ T6888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.261623][ T6829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.311244][ T6890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.319930][ T6890] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 387.336103][ T6890] bond1: (slave vti0): Error -95 calling set_mac_address [ 387.538651][ T6895] loop0: detected capacity change from 0 to 256 [ 387.887090][ T1819] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.960865][ T6895] FAT-fs (loop0): Directory bread(block 64) failed [ 387.967671][ T6895] FAT-fs (loop0): Directory bread(block 65) failed [ 387.974778][ T6895] FAT-fs (loop0): Directory bread(block 66) failed [ 387.981639][ T6895] FAT-fs (loop0): Directory bread(block 67) failed [ 387.988539][ T6895] FAT-fs (loop0): Directory bread(block 68) failed [ 387.995527][ T6895] FAT-fs (loop0): Directory bread(block 69) failed [ 388.008209][ T6895] FAT-fs (loop0): Directory bread(block 70) failed [ 388.016454][ T6895] FAT-fs (loop0): Directory bread(block 71) failed [ 388.022383][ T6829] team0: Port device team_slave_0 added [ 388.023490][ T6895] FAT-fs (loop0): Directory bread(block 72) failed [ 388.035624][ T6895] FAT-fs (loop0): Directory bread(block 73) failed [ 388.106210][ T6829] team0: Port device team_slave_1 added [ 388.173054][ T1819] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.331752][ T6905] loop5: detected capacity change from 0 to 256 [ 388.413075][ T5799] Bluetooth: hci4: command tx timeout [ 388.541871][ T6903] netlink: 56 bytes leftover after parsing attributes in process `syz.1.266'. [ 388.809432][ T1819] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.998769][ T1819] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.091231][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.098439][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.129655][ T6829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.187032][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.194528][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.222342][ T6829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.703269][ T6905] FAT-fs (loop5): Directory bread(block 64) failed [ 390.710375][ T6905] FAT-fs (loop5): Directory bread(block 65) failed [ 390.717266][ T6905] FAT-fs (loop5): Directory bread(block 66) failed [ 390.724299][ T6905] FAT-fs (loop5): Directory bread(block 67) failed [ 390.731309][ T6905] FAT-fs (loop5): Directory bread(block 68) failed [ 390.738074][ T6905] FAT-fs (loop5): Directory bread(block 69) failed [ 390.745089][ T6905] FAT-fs (loop5): Directory bread(block 70) failed [ 390.751958][ T6905] FAT-fs (loop5): Directory bread(block 71) failed [ 390.759028][ T6905] FAT-fs (loop5): Directory bread(block 72) failed [ 390.770443][ T6905] FAT-fs (loop5): Directory bread(block 73) failed [ 390.996529][ T6829] hsr_slave_0: entered promiscuous mode [ 391.100306][ T6829] hsr_slave_1: entered promiscuous mode [ 391.160287][ T6829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.168270][ T6829] Cannot create hsr debugfs directory [ 391.975415][ T1819] bridge_slave_1: left allmulticast mode [ 391.981526][ T1819] bridge_slave_1: left promiscuous mode [ 391.988101][ T1819] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.218487][ T1819] bridge_slave_0: left allmulticast mode [ 392.224807][ T1819] bridge_slave_0: left promiscuous mode [ 392.231672][ T1819] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.885124][ T1819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.915329][ T1819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.951790][ T1819] bond0 (unregistering): Released all slaves [ 396.555886][ T6951] loop1: detected capacity change from 0 to 256 [ 396.692772][ T6829] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 396.766904][ T6829] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 396.836224][ T6829] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 396.932358][ T6829] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.111078][ T6951] FAT-fs (loop1): Directory bread(block 64) failed [ 397.120780][ T6951] FAT-fs (loop1): Directory bread(block 65) failed [ 397.127689][ T6951] FAT-fs (loop1): Directory bread(block 66) failed [ 397.135576][ T6951] FAT-fs (loop1): Directory bread(block 67) failed [ 397.142636][ T6951] FAT-fs (loop1): Directory bread(block 68) failed [ 397.149422][ T6951] FAT-fs (loop1): Directory bread(block 69) failed [ 397.156487][ T6951] FAT-fs (loop1): Directory bread(block 70) failed [ 397.163395][ T6951] FAT-fs (loop1): Directory bread(block 71) failed [ 397.170531][ T6951] FAT-fs (loop1): Directory bread(block 72) failed [ 397.177290][ T6951] FAT-fs (loop1): Directory bread(block 73) failed [ 397.763154][ T1819] hsr_slave_0: left promiscuous mode [ 398.097747][ T1819] hsr_slave_1: left promiscuous mode [ 398.401916][ T1819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.409779][ T1819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.503608][ T1819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.511562][ T1819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.821691][ T1819] veth1_macvtap: left promiscuous mode [ 398.827468][ T1819] veth0_macvtap: left promiscuous mode [ 398.833517][ T1819] veth1_vlan: left promiscuous mode [ 398.839075][ T1819] veth0_vlan: left promiscuous mode [ 399.500234][ T29] audit: type=1326 audit(1730517988.182:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 399.522748][ T29] audit: type=1326 audit(1730517988.182:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 399.544997][ T29] audit: type=1326 audit(1730517988.212:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=43 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 399.567235][ T29] audit: type=1326 audit(1730517988.212:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 399.592861][ T29] audit: type=1326 audit(1730517988.212:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 400.126063][ T1819] infiniband syz2: set down [ 400.751772][ T6975] loop4: detected capacity change from 0 to 1024 [ 401.355643][ T6973] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 401.395754][ T6973] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 401.549023][ T1819] team0 (unregistering): Port device team_slave_1 removed [ 401.565777][ T4344] smc: removing ib device syz2 [ 401.581368][ T1819] team0 (unregistering): Port device team_slave_0 removed [ 401.745435][ T5849] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 402.154060][ T5849] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 402.162805][ T5849] usb 6-1: config 0 has no interface number 0 [ 402.169162][ T5849] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 402.179456][ T5849] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 402.179897][ T6829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.188801][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.275817][ T6829] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.356346][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.364197][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.379595][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.387341][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.471566][ T5849] usb 6-1: config 0 descriptor?? [ 402.578290][ T5849] ttusbir 6-1:0.83: cannot find expected altsetting [ 402.583926][ T6829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.595770][ T6829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.173268][ T5849] usb 6-1: USB disconnect, device number 2 [ 403.446515][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.460089][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.143014][ T6829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.172070][ T4386] hfsplus: b-tree write err: -5, ino 4 [ 406.243153][ T7004] loop1: detected capacity change from 0 to 256 [ 407.090987][ T7004] FAT-fs (loop1): Directory bread(block 64) failed [ 407.097823][ T7004] FAT-fs (loop1): Directory bread(block 65) failed [ 407.105048][ T7004] FAT-fs (loop1): Directory bread(block 66) failed [ 407.112045][ T7004] FAT-fs (loop1): Directory bread(block 67) failed [ 407.118945][ T7004] FAT-fs (loop1): Directory bread(block 68) failed [ 407.125959][ T7004] FAT-fs (loop1): Directory bread(block 69) failed [ 407.132969][ T7004] FAT-fs (loop1): Directory bread(block 70) failed [ 407.139736][ T7004] FAT-fs (loop1): Directory bread(block 71) failed [ 407.149817][ T7004] FAT-fs (loop1): Directory bread(block 72) failed [ 407.157558][ T7004] FAT-fs (loop1): Directory bread(block 73) failed [ 408.438063][ T6829] veth0_vlan: entered promiscuous mode [ 408.471468][ T6829] veth1_vlan: entered promiscuous mode [ 408.565268][ T6829] veth0_macvtap: entered promiscuous mode [ 408.589689][ T6829] veth1_macvtap: entered promiscuous mode [ 408.643076][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.654211][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.664373][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.675134][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.688214][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.699855][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.710230][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.721069][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.735964][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.901951][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.912940][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.923289][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.934086][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.944333][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.955094][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.966327][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.977093][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.995879][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.066093][ T6829] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.075288][ T6829] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.084524][ T6829] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.096777][ T6829] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.202168][ T29] audit: type=1804 audit(1730518002.972:11): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.298" name="/newroot/63/file0/file0" dev="ramfs" ino=12863 res=1 errno=0 [ 414.656323][ T7088] loop4: detected capacity change from 0 to 1024 [ 414.666244][ T7088] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.803540][ T7088] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 414.960941][ T7088] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 414.969692][ T7088] System zones: 0-1, 3-36 [ 415.128581][ T7088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.331141][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.341636][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.526177][ T7100] loop1: detected capacity change from 0 to 8 [ 415.867888][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.876551][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.413828][ T7108] loop0: detected capacity change from 0 to 256 [ 416.649210][ T7088] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=1024, device loop4 blocksize: 1024 [ 416.663931][ T7088] grow_buffers: requested out-of-range block 144115188075855872 for device loop4 [ 416.678680][ T7088] EXT4-fs warning (device loop4): ext4_resize_fs:2019: can't read last block, resize aborted [ 419.338853][ T7120] loop0: detected capacity change from 0 to 1024 [ 419.458269][ T7120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.474269][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.727209][ T7137] loop1: detected capacity change from 0 to 512 [ 420.761187][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.808897][ T7137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.822913][ T7137] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.319639][ T7145] fuse: Bad value for 'fd' [ 421.365646][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.821512][ T7196] fuse: Unknown parameter '0x0000000000000003' [ 425.752245][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.337'. [ 428.518197][ T7232] fuse: Unknown parameter '0x0000000000000003' [ 429.962643][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.349'. [ 431.001494][ T7271] fuse: Unknown parameter '0x0000000000000003' [ 432.711722][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 433.621262][ T29] audit: type=1326 audit(1730518022.392:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.5.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 433.644379][ T29] audit: type=1326 audit(1730518022.392:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.5.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 433.667192][ T29] audit: type=1326 audit(1730518022.392:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.5.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 434.162772][ T7317] fuse: Unknown parameter '0x0000000000000003' [ 435.290354][ T29] audit: type=1326 audit(1730518024.062:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 435.316713][ T29] audit: type=1326 audit(1730518024.062:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 435.340410][ T29] audit: type=1326 audit(1730518024.072:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=312 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 435.364297][ T29] audit: type=1326 audit(1730518024.072:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 435.680640][ T29] audit: type=1326 audit(1730518024.212:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 435.891249][ T7337] process 'syz.5.383' launched './file0' with NULL argv: empty string added [ 436.136978][ T7335] process '/newroot/60/file0' started with executable stack [ 436.615864][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.386'. [ 437.923649][ T7362] futex_wake_op: syz.4.378 tries to shift op by -1; fix this program [ 442.967998][ T7408] loop0: detected capacity change from 0 to 16 [ 443.032064][ T7408] erofs: (device loop0): mounted with root inode @ nid 36. [ 443.216528][ T7408] syz.0.404: attempt to access beyond end of device [ 443.216528][ T7408] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 443.231264][ T7408] erofs: (device loop0): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 443.387915][ T7410] loop1: detected capacity change from 0 to 2048 [ 443.551407][ T7408] syz.0.404: attempt to access beyond end of device [ 443.551407][ T7408] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 443.565063][ T7408] erofs: (device loop0): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 443.980872][ T7410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.500922][ T7427] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 444.722948][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.172066][ T7442] binder: 7436:7442 ioctl c0306201 20000140 returned -14 [ 446.959092][ T29] audit: type=1326 audit(1730518035.612:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.4.417" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x0 [ 450.109144][ T7484] loop5: detected capacity change from 0 to 1024 [ 450.180416][ T7484] EXT4-fs: Ignoring removed i_version option [ 450.186899][ T7484] EXT4-fs: Ignoring removed bh option [ 450.282237][ T7487] loop0: detected capacity change from 0 to 512 [ 450.291378][ T7484] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 450.330726][ T7487] ext4: Unknown parameter 'appraise' [ 450.425624][ T7484] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 450.436717][ T7484] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 450.487177][ T7484] EXT4-fs (loop5): mount failed [ 456.470324][ T5879] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 456.701757][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 456.816527][ T5879] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 456.826168][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.834920][ T5879] usb 7-1: Product: syz [ 456.839325][ T5879] usb 7-1: Manufacturer: syz [ 456.844419][ T5879] usb 7-1: SerialNumber: syz [ 456.920543][ T5849] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 456.953929][ T5879] usb 7-1: config 0 descriptor?? [ 457.034712][ T5879] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 457.100521][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 457.229873][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.242104][ T5849] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.255506][ T5849] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 457.264942][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.362867][ T5879] usb 7-1: USB disconnect, device number 2 [ 457.489005][ T5849] usb 6-1: config 0 descriptor?? [ 458.550291][ T5849] usbhid 6-1:0.0: can't add hid device: -71 [ 458.562804][ T5849] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 458.581807][ T5849] usb 6-1: USB disconnect, device number 3 [ 461.463173][ T29] audit: type=1326 audit(1730518050.232:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 461.614914][ T29] audit: type=1326 audit(1730518050.272:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 461.641097][ T29] audit: type=1326 audit(1730518050.332:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 461.664800][ T29] audit: type=1326 audit(1730518050.332:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 461.687221][ T29] audit: type=1326 audit(1730518050.332:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 461.709452][ T29] audit: type=1326 audit(1730518050.342:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 461.735327][ T29] audit: type=1326 audit(1730518050.342:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 461.758721][ T29] audit: type=1326 audit(1730518050.382:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 461.781042][ T29] audit: type=1326 audit(1730518050.382:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 461.806512][ T29] audit: type=1326 audit(1730518050.382:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=165 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 462.734199][ T7616] overlayfs: failed to resolve './file0': -2 [ 463.697160][ T7633] loop1: detected capacity change from 0 to 1024 [ 463.849914][ T7633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.843235][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.849906][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.048103][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.329177][ T7659] loop0: detected capacity change from 0 to 512 [ 468.234129][ T7659] EXT4-fs (loop0): Test dummy encryption mode enabled [ 468.278393][ T7659] EXT4-fs error (device loop0): __ext4_fill_super:5458: inode #2: comm syz.0.474: casefold flag without casefold feature [ 468.339693][ T7659] EXT4-fs (loop0): get root inode failed [ 468.345814][ T7659] EXT4-fs (loop0): mount failed [ 468.529922][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 468.536778][ T29] audit: type=1326 audit(1730518057.302:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 468.680806][ T29] audit: type=1326 audit(1730518057.422:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 468.707670][ T29] audit: type=1326 audit(1730518057.422:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 468.731434][ T29] audit: type=1326 audit(1730518057.432:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 468.753783][ T29] audit: type=1326 audit(1730518057.452:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 468.776466][ T29] audit: type=1326 audit(1730518057.452:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 468.802521][ T29] audit: type=1326 audit(1730518057.452:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 468.856111][ T29] audit: type=1326 audit(1730518057.602:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 468.879055][ T29] audit: type=1326 audit(1730518057.612:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 468.906248][ T29] audit: type=1326 audit(1730518057.632:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 472.926582][ T7716] loop6: detected capacity change from 0 to 512 [ 473.177089][ T7716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 473.194332][ T7716] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.549747][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 473.549823][ T29] audit: type=1326 audit(1730518062.182:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 473.579055][ T29] audit: type=1800 audit(1730518062.192:73): pid=7719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.490" name="/" dev="fuse" ino=1 res=0 errno=0 [ 474.691992][ T7743] capability: warning: `syz.6.497' uses 32-bit capabilities (legacy support in use) [ 476.387960][ T7755] loop6: detected capacity change from 0 to 512 [ 476.562659][ T7755] EXT4-fs: inline encryption not supported [ 476.872200][ T7755] EXT4-fs (loop6): Test dummy encryption mode enabled [ 476.879562][ T7755] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 479.014904][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 481.210577][ T5879] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 481.411690][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.423239][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.433519][ T5879] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 481.442971][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.624985][ T5879] usb 1-1: config 0 descriptor?? [ 483.971219][ T5879] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 483.978399][ T5879] pyra 0003:1E7D:2CF6.0001: unknown global tag 0xe [ 483.985366][ T5879] pyra 0003:1E7D:2CF6.0001: item 0 2 1 14 parsing failed [ 483.997221][ T5879] pyra 0003:1E7D:2CF6.0001: parse failed [ 484.003995][ T5879] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -22 [ 484.975707][ T5879] usb 1-1: USB disconnect, device number 4 [ 485.062902][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 485.571173][ T29] audit: type=1326 audit(1730518074.262:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 485.597085][ T29] audit: type=1326 audit(1730518074.272:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 485.626996][ T29] audit: type=1326 audit(1730518074.272:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 485.769674][ T7830] loop1: detected capacity change from 0 to 512 [ 485.778728][ T7830] EXT4-fs: Ignoring removed i_version option [ 485.856910][ T7830] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 485.870427][ T7830] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 486.593703][ T7830] EXT4-fs (loop1): 1 truncate cleaned up [ 486.601451][ T7830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.764385][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.773544][ T7851] loop7: detected capacity change from 0 to 1036 [ 488.151408][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 489.011367][ T7871] overlayfs: failed to resolve './file1': -2 [ 492.008936][ T7892] netlink: 'syz.6.540': attribute type 2 has an invalid length. [ 492.845738][ T29] audit: type=1326 audit(1730518081.622:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 492.942822][ T29] audit: type=1326 audit(1730518081.692:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 492.969061][ T29] audit: type=1326 audit(1730518081.692:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 492.992661][ T29] audit: type=1326 audit(1730518081.692:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 493.014922][ T29] audit: type=1326 audit(1730518081.692:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 493.037133][ T29] audit: type=1326 audit(1730518081.702:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 493.059529][ T29] audit: type=1326 audit(1730518081.712:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 493.085277][ T29] audit: type=1326 audit(1730518081.712:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 493.108751][ T29] audit: type=1326 audit(1730518081.862:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 493.131388][ T29] audit: type=1326 audit(1730518081.862:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 493.296777][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.541'. [ 494.046378][ T7907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.544'. [ 494.457417][ T7915] overlayfs: failed to resolve './file1': -2 [ 494.681867][ T5849] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 495.230774][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.243846][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.254209][ T5849] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 495.263770][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.320584][ T5849] usb 1-1: config 0 descriptor?? [ 495.981997][ T7932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.989444][ T7932] IPv6: NLM_F_CREATE should be set when creating new route [ 496.258234][ T5849] usb 1-1: string descriptor 0 read error: -71 [ 496.388204][ T5849] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 496.399353][ T5849] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 496.408029][ T5849] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 496.416709][ T5849] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 496.425013][ T5849] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 497.489277][ T5849] usb 1-1: USB disconnect, device number 5 [ 497.553314][ T7938] netlink: 32 bytes leftover after parsing attributes in process `syz.6.555'. [ 497.848800][ T7940] loop1: detected capacity change from 0 to 512 [ 498.203266][ T7940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.216643][ T7940] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.828805][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 499.058970][ T7953] overlayfs: failed to resolve './file1': -2 [ 500.860394][ T44] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 500.904031][ T7946] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 501.315998][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.328994][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.337698][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.339444][ T44] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 501.361199][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.442976][ T44] usb 1-1: config 0 descriptor?? [ 501.647688][ T7975] binder: 7968:7975 ioctl 4018620d 0 returned -22 [ 502.167883][ T44] hid (null): bogus close delimiter [ 502.361693][ T44] usb 1-1: language id specifier not provided by device, defaulting to English [ 502.638495][ T7985] netlink: 32 bytes leftover after parsing attributes in process `syz.5.568'. [ 502.721411][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 502.856237][ T44] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input8 [ 503.310341][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 503.422454][ T44] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input9 [ 503.659758][ T44] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input10 [ 503.883138][ T44] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input11 [ 504.126023][ T44] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 504.283386][ T44] usb 1-1: USB disconnect, device number 6 [ 505.786008][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 505.786084][ T29] audit: type=1326 audit(1730518094.532:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 505.987231][ T29] audit: type=1326 audit(1730518094.692:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 506.009678][ T29] audit: type=1326 audit(1730518094.692:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 506.032205][ T29] audit: type=1326 audit(1730518094.692:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 506.054405][ T29] audit: type=1326 audit(1730518094.692:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 506.080307][ T29] audit: type=1326 audit(1730518094.772:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 506.103671][ T29] audit: type=1326 audit(1730518094.772:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 506.125972][ T29] audit: type=1326 audit(1730518094.772:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 506.148409][ T29] audit: type=1326 audit(1730518094.892:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 506.174493][ T29] audit: type=1326 audit(1730518094.892:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 506.591130][ T5849] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 506.664831][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.6.580'. [ 506.830534][ T5849] usb 2-1: Using ep0 maxpacket: 16 [ 507.149036][ T5849] usb 2-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 507.160986][ T5849] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.264042][ T5849] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.273877][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.282508][ T5849] usb 2-1: Product: syz [ 507.286997][ T5849] usb 2-1: Manufacturer: syz [ 507.292224][ T5849] usb 2-1: SerialNumber: syz [ 507.319201][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 507.636402][ T8045] overlayfs: failed to resolve './file1': -2 [ 508.541699][ T8050] loop5: detected capacity change from 0 to 512 [ 508.745546][ T8050] EXT4-fs error (device loop5): ext4_orphan_get:1388: inode #15: comm syz.5.584: casefold flag without casefold feature [ 508.761648][ T8050] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.584: couldn't read orphan inode 15 (err -117) [ 508.784822][ T8050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.006441][ T5951] udevd[5951]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 509.316906][ T5849] usb 2-1: 0:2 : does not exist [ 509.360731][ T5797] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 509.432138][ T5849] usb 2-1: USB disconnect, device number 3 [ 509.602403][ T6151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.687011][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.034134][ T5849] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 513.231205][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 513.600327][ T5849] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 513.608851][ T5849] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.623084][ T5849] usb 6-1: config 0 has no interface number 0 [ 513.630511][ T5849] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 513.640980][ T5849] usb 6-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.660916][ T5849] usb 6-1: config 0 interface 41 has no altsetting 0 [ 513.713857][ T5849] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 513.724107][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.732740][ T5849] usb 6-1: Product: syz [ 513.737221][ T5849] usb 6-1: Manufacturer: syz [ 513.742690][ T5849] usb 6-1: SerialNumber: syz [ 513.841613][ T5849] usb 6-1: config 0 descriptor?? [ 513.857079][ T8072] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 513.896663][ T5849] dm9601 6-1:0.41: probe with driver dm9601 failed with error -22 [ 513.906255][ T5849] sr9700 6-1:0.41: probe with driver sr9700 failed with error -22 [ 514.201774][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 514.573471][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 514.573548][ T29] audit: type=1326 audit(1730518103.352:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 514.602314][ T29] audit: type=1326 audit(1730518103.352:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 514.624879][ T29] audit: type=1326 audit(1730518103.352:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 514.647240][ T29] audit: type=1326 audit(1730518103.362:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 515.457372][ T8103] loop6: detected capacity change from 0 to 512 [ 515.682530][ T8103] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #12: comm syz.6.595: corrupted in-inode xattr: invalid ea_ino [ 515.842654][ T8103] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.595: couldn't read orphan inode 12 (err -117) [ 515.985073][ T8103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000008000 r/w without journal. Quota mode: none. [ 516.072893][ T5951] udevd[5951]: symlink '../../loop6' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000008000.tmp-b7:6' failed: Read-only file system [ 516.231337][ T5849] usb 6-1: USB disconnect, device number 4 [ 517.128711][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.165283][ T6829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000008000. [ 517.166438][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.195066][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.220332][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 517.254253][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 517.263790][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 519.053302][ T8141] input: syz0 as /devices/virtual/input/input12 [ 519.075615][ T5849] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 519.246411][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.604'. [ 519.341045][ T5849] usb 7-1: Using ep0 maxpacket: 8 [ 519.353952][ T5849] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.362628][ T5799] Bluetooth: hci3: command tx timeout [ 519.368519][ T5849] usb 7-1: config 0 has no interface number 0 [ 519.369551][ T8118] chnl_net:caif_netlink_parms(): no params data found [ 519.375817][ T5849] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 519.398616][ T5849] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 519.408255][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.633267][ T5849] usb 7-1: config 0 descriptor?? [ 519.840787][ T5849] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 519.971895][ T44] usb 7-1: USB disconnect, device number 3 [ 520.001029][ T44] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 520.771637][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.779466][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.787497][ T8118] bridge_slave_0: entered allmulticast mode [ 520.878986][ T8118] bridge_slave_0: entered promiscuous mode [ 520.972754][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.981057][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.988894][ T8118] bridge_slave_1: entered allmulticast mode [ 521.106596][ T8118] bridge_slave_1: entered promiscuous mode [ 521.152129][ T8161] overlayfs: overlapping lowerdir path [ 521.403814][ T8164] loop6: detected capacity change from 0 to 512 [ 521.441054][ T5799] Bluetooth: hci3: command tx timeout [ 521.725773][ T5951] udevd[5951]: symlink '../../loop6' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000008000.tmp-b7:6' failed: Read-only file system [ 521.828968][ T8118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.949031][ T8118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.482221][ T8164] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #12: comm syz.6.610: corrupted in-inode xattr: invalid ea_ino [ 522.572646][ T8164] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.610: couldn't read orphan inode 12 (err -117) [ 522.682027][ T8164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000008000 r/w without journal. Quota mode: none. [ 523.003622][ T8118] team0: Port device team_slave_0 added [ 523.192601][ T8118] team0: Port device team_slave_1 added [ 523.545498][ T8173] Bluetooth: hci3: command tx timeout [ 523.612060][ T6829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000008000. [ 523.629902][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.638014][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.664461][ T8118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.692254][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.699654][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.726593][ T8118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.491606][ T8118] hsr_slave_0: entered promiscuous mode [ 524.580800][ T8118] hsr_slave_1: entered promiscuous mode [ 524.707726][ T8118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.715798][ T8118] Cannot create hsr debugfs directory [ 525.305844][ T5799] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 525.614403][ T5799] Bluetooth: hci3: command tx timeout [ 526.401472][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.408186][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.214273][ T44] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 527.416129][ T8118] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 527.464999][ T8210] loop1: detected capacity change from 0 to 256 [ 527.561072][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 527.592479][ T44] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 527.595541][ T8118] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 527.601011][ T44] usb 6-1: config 0 has no interface number 0 [ 527.601163][ T44] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.601389][ T44] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 527.601546][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.617051][ T8210] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 527.693844][ T44] usb 6-1: config 0 descriptor?? [ 527.762601][ T44] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 527.887586][ T8118] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 527.928444][ T44] usb 6-1: USB disconnect, device number 5 [ 527.950427][ T8118] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 528.027217][ T44] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 529.502546][ T8118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.777256][ T8220] loop1: detected capacity change from 0 to 512 [ 529.819377][ T8118] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.911657][ T8220] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.622: corrupted in-inode xattr: invalid ea_ino [ 530.026273][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.034106][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.061002][ T8220] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.622: couldn't read orphan inode 12 (err -117) [ 530.125971][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.133711][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.206725][ T8220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000008000 r/w without journal. Quota mode: none. [ 530.587127][ T8173] Bluetooth: hci6: command 0x1003 tx timeout [ 530.593819][ T5799] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 530.664791][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000008000.tmp-b7:1' failed: Read-only file system [ 531.186350][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000008000. [ 532.757431][ T8261] tipc: Started in network mode [ 532.763045][ T8261] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 532.772939][ T8261] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 532.782756][ T8261] tipc: Enabled bearer , priority 10 [ 532.872824][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 533.090970][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 533.127156][ T8] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 533.135681][ T8] usb 7-1: config 0 has no interface number 0 [ 533.142171][ T8] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 533.150806][ T8118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.153486][ T8] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 533.169487][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.482617][ T8] usb 7-1: config 0 descriptor?? [ 533.666143][ T8] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 533.795392][ T5847] usb 7-1: USB disconnect, device number 4 [ 533.832669][ T5847] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 533.940187][ T2220] tipc: Node number set to 1 [ 534.215247][ T2944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.439342][ T2944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.569487][ T2944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.772286][ T2944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.391279][ T8289] loop1: detected capacity change from 0 to 512 [ 535.493124][ T2944] bridge_slave_1: left allmulticast mode [ 535.499034][ T2944] bridge_slave_1: left promiscuous mode [ 535.506605][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.742622][ T2944] bridge_slave_0: left allmulticast mode [ 535.748543][ T2944] bridge_slave_0: left promiscuous mode [ 535.757234][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.771493][ T8289] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.637: corrupted in-inode xattr: invalid ea_ino [ 535.942176][ T8289] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.637: couldn't read orphan inode 12 (err -117) [ 536.078868][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000008000.tmp-b7:1' failed: Read-only file system [ 536.232472][ T8289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000008000 r/w without journal. Quota mode: none. [ 536.819881][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000008000.tmp-b7:1' failed: Read-only file system [ 536.861946][ T8307] overlayfs: failed to resolve './file1': -2 [ 537.047255][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000008000. [ 537.424749][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.543101][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.635643][ T2944] bond0 (unregistering): Released all slaves [ 538.535099][ T2944] hsr_slave_0: left promiscuous mode [ 538.660770][ T2944] hsr_slave_1: left promiscuous mode [ 538.742599][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.750570][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.832604][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.845387][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.941565][ T2944] veth1_macvtap: left promiscuous mode [ 538.947455][ T2944] veth0_macvtap: left promiscuous mode [ 538.953622][ T2944] veth1_vlan: left promiscuous mode [ 538.959187][ T2944] veth0_vlan: left promiscuous mode [ 538.960265][ T5847] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 539.351709][ T5847] usb 1-1: not running at top speed; connect to a high speed hub [ 539.375209][ T5847] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 539.383823][ T5847] usb 1-1: config 95 has no interface number 0 [ 539.390427][ T5847] usb 1-1: config 95 interface 1 has no altsetting 0 [ 539.486323][ T5847] usb 1-1: string descriptor 0 read error: -22 [ 539.493274][ T5847] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 539.503099][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.836281][ T8332] loop6: detected capacity change from 0 to 512 [ 539.863545][ T8332] EXT4-fs: inline encryption not supported [ 540.116606][ T8332] Quota error (device loop6): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 540.127591][ T8332] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 540.138771][ T8332] EXT4-fs error (device loop6): ext4_acquire_dquot:6879: comm syz.6.648: Failed to acquire dquot type 1 [ 540.172145][ T44] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 540.203630][ T8332] EXT4-fs (loop6): 1 truncate cleaned up [ 540.211395][ T8332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.224584][ T8332] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.261795][ T5847] usb 1-1: USB disconnect, device number 7 [ 540.409496][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 540.450366][ T6477] udevd[6477]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 540.488053][ T44] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 540.497599][ T44] usb 6-1: config 0 has no interface number 0 [ 540.504459][ T44] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.515851][ T44] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 540.525361][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.527449][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.553557][ T2944] team0 (unregistering): Port device team_slave_1 removed [ 540.652769][ T2944] team0 (unregistering): Port device team_slave_0 removed [ 540.724157][ T44] usb 6-1: config 0 descriptor?? [ 540.746158][ T44] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 540.972177][ T44] usb 6-1: USB disconnect, device number 6 [ 541.056973][ T44] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 541.352722][ T8118] veth0_vlan: entered promiscuous mode [ 541.420801][ T8118] veth1_vlan: entered promiscuous mode [ 541.516005][ T8118] veth0_macvtap: entered promiscuous mode [ 541.537839][ T8118] veth1_macvtap: entered promiscuous mode [ 541.589539][ T8118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.614308][ T8118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.626235][ T8118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.637019][ T8118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.647375][ T8118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.658155][ T8118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.668446][ T8118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.679231][ T8118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.694102][ T8118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.830783][ T8118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.841616][ T8118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.851798][ T8118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.862588][ T8118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.873154][ T8118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.883974][ T8118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.902329][ T8118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.918494][ T8118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.926651][ T6829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.934604][ T8118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.044641][ T8118] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.054422][ T8118] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.063548][ T8118] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.072694][ T8118] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.436625][ T8362] loop6: detected capacity change from 0 to 1024 [ 543.467798][ T8360] syzkaller0: entered promiscuous mode [ 543.473692][ T8360] syzkaller0: entered allmulticast mode [ 543.728434][ T8362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.733022][ T5951] udevd[5951]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 543.878734][ T5951] udevd[5951]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 544.574536][ T6829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.020407][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 546.211318][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 546.240403][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 546.248899][ T8] usb 1-1: config 0 has no interface number 0 [ 546.255630][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 546.267154][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 546.276657][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.450108][ T8] usb 1-1: config 0 descriptor?? [ 546.534001][ T8] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 546.685527][ T8] usb 1-1: USB disconnect, device number 8 [ 546.739499][ T8] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 549.310401][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.318382][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.606308][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.614546][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.222737][ T8452] loop6: detected capacity change from 0 to 256 [ 552.568717][ T8470] netlink: 76 bytes leftover after parsing attributes in process `syz.0.681'. [ 554.343686][ T8492] loop1: detected capacity change from 0 to 512 [ 554.498588][ T8495] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 554.513596][ T8495] overlayfs: missing 'lowerdir' [ 554.681098][ T8492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 554.694398][ T8492] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.736903][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 554.794657][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:1' failed: Read-only file system [ 554.889135][ T8492] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 554.900770][ T8492] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 554.916009][ T8492] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.683: Failed to acquire dquot type 0 [ 555.212292][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 555.475224][ T29] audit: type=1326 audit(1730518144.242:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8504 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 555.498071][ T29] audit: type=1326 audit(1730518144.242:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8504 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 555.520878][ T29] audit: type=1326 audit(1730518144.242:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8504 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 555.547522][ T29] audit: type=1326 audit(1730518144.242:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8504 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 555.907808][ T8512] loop1: detected capacity change from 0 to 1024 [ 557.275547][ T8523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'. [ 557.285034][ T8523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.690'. [ 557.294387][ T8523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'. [ 557.303612][ T8523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'. [ 557.446656][ T8507] loop6: detected capacity change from 0 to 16 [ 557.552705][ T8512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.601347][ T8507] erofs: (device loop6): mounted with root inode @ nid 36. [ 557.669890][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 558.239290][ T5983] udevd[5983]: symlink '../../loop6' '/dev/disk/by-uuid/dc080000-0000-0000-00db-a5c46e0e7dba.tmp-b7:6' failed: Read-only file system [ 559.690548][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 559.850950][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 559.885428][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.897117][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.907761][ T8] usb 8-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 559.917295][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.937661][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.970729][ T8] usb 8-1: config 0 descriptor?? [ 560.527588][ T8] ntrig 0003:1B96:0008.0004: unbalanced collection at end of report description [ 560.554120][ T8] ntrig 0003:1B96:0008.0004: parse failed [ 560.562981][ T8] ntrig 0003:1B96:0008.0004: probe with driver ntrig failed with error -22 [ 560.761122][ T5847] usb 8-1: USB disconnect, device number 2 [ 561.124074][ T8556] loop6: detected capacity change from 0 to 1024 [ 561.411545][ T8556] hfsplus: xattr searching failed [ 561.452749][ T8556] hfsplus: b-tree write err: -5, ino 3 [ 561.477249][ T5951] udevd[5951]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 561.606610][ T5951] udevd[5951]: symlink '../../loop6' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:6' failed: Read-only file system [ 562.155339][ T8556] hfsplus: xattr searching failed [ 562.168912][ T8556] hfsplus: xattr searching failed [ 564.221778][ T61] hfsplus: b-tree write err: -5, ino 3 [ 564.243609][ T8572] syz.7.701[8572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 564.244026][ T8572] syz.7.701[8572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 564.292026][ T8572] syz.7.701[8572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 564.576858][ T8578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.702'. [ 564.597557][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.702'. [ 564.606932][ T8578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.702'. [ 564.616249][ T8578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.702'. [ 565.476064][ T8586] loop1: detected capacity change from 0 to 512 [ 565.887823][ T8594] binder: 8585:8594 ioctl 4018620d 0 returned -22 [ 570.598686][ T8627] loop6: detected capacity change from 0 to 1024 [ 571.086011][ T5951] udevd[5951]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 571.354103][ T5951] udevd[5951]: symlink '../../loop6' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:6' failed: Read-only file system [ 572.252765][ T8637] hfsplus: xattr searching failed [ 572.345092][ T8637] hfsplus: b-tree write err: -5, ino 3 [ 572.409235][ T8627] hfsplus: xattr searching failed [ 572.473439][ T8627] hfsplus: xattr searching failed [ 573.195741][ T61] hfsplus: b-tree write err: -5, ino 3 [ 575.045690][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.716'. [ 575.055053][ T8648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.716'. [ 575.064360][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.716'. [ 575.073607][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.716'. [ 575.498597][ T8173] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 575.656840][ T8173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 575.726364][ T8173] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 575.750974][ T8173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 575.770152][ T8173] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 575.779299][ T8173] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 577.430276][ T8653] chnl_net:caif_netlink_parms(): no params data found [ 578.090341][ T5799] Bluetooth: hci1: command tx timeout [ 579.637058][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.645516][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.653419][ T8653] bridge_slave_0: entered allmulticast mode [ 579.662776][ T8653] bridge_slave_0: entered promiscuous mode [ 579.903574][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.911522][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.919337][ T8653] bridge_slave_1: entered allmulticast mode [ 579.928709][ T8653] bridge_slave_1: entered promiscuous mode [ 580.079576][ T8698] loop7: detected capacity change from 0 to 128 [ 580.192278][ T5799] Bluetooth: hci1: command tx timeout [ 580.316608][ T8653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.436697][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system [ 580.452971][ T8653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.489208][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:7' failed: Read-only file system [ 581.037190][ T8653] team0: Port device team_slave_0 added [ 581.159808][ T8653] team0: Port device team_slave_1 added [ 581.755720][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.763066][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.789590][ T8653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.295108][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.302552][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.329080][ T8653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.341943][ T5799] Bluetooth: hci1: command tx timeout [ 584.132779][ T8173] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 584.142173][ T8173] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 584.156886][ T8173] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 584.170834][ T8173] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 584.182034][ T8173] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 584.191292][ T8173] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 584.452153][ T5799] Bluetooth: hci1: command tx timeout [ 584.741571][ T58] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.021546][ T58] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.023787][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'. [ 585.261650][ T58] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.310305][ T8711] loop7: detected capacity change from 0 to 1024 [ 585.362890][ T8711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 585.414422][ T8653] hsr_slave_0: entered promiscuous mode [ 585.463524][ T8653] hsr_slave_1: entered promiscuous mode [ 585.515425][ T8653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.523692][ T8653] Cannot create hsr debugfs directory [ 585.533505][ T8711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.573736][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 585.747010][ T58] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.282371][ T8731] netlink: 36 bytes leftover after parsing attributes in process `syz.0.728'. [ 586.292450][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.728'. [ 586.301837][ T8731] netlink: 36 bytes leftover after parsing attributes in process `syz.0.728'. [ 586.311443][ T8731] netlink: 36 bytes leftover after parsing attributes in process `syz.0.728'. [ 586.388678][ T8118] EXT4-fs error (device loop7): ext4_lookup:1813: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 586.480562][ T8173] Bluetooth: hci5: command tx timeout [ 586.559135][ T8118] EXT4-fs error (device loop7): ext4_lookup:1813: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 586.634416][ T58] bridge_slave_1: left allmulticast mode [ 586.642408][ T58] bridge_slave_1: left promiscuous mode [ 586.649177][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.748050][ T8735] loop6: detected capacity change from 0 to 512 [ 586.796846][ T58] bridge_slave_0: left allmulticast mode [ 586.802908][ T58] bridge_slave_0: left promiscuous mode [ 586.809419][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.843742][ T8735] EXT4-fs (loop6): Test dummy encryption mode enabled [ 586.888519][ T8735] EXT4-fs error (device loop6): __ext4_fill_super:5458: inode #2: comm syz.6.730: casefold flag without casefold feature [ 586.941060][ T8735] EXT4-fs (loop6): get root inode failed [ 586.947118][ T8735] EXT4-fs (loop6): mount failed [ 587.489098][ T5951] udevd[5951]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 587.519183][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.571470][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.632816][ T58] bond0 (unregistering): Released all slaves [ 587.696705][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 587.720604][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.727255][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.020511][ T8705] chnl_net:caif_netlink_parms(): no params data found [ 588.155221][ T8118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.567237][ T8173] Bluetooth: hci5: command tx timeout [ 588.980145][ T58] hsr_slave_0: left promiscuous mode [ 589.035149][ T58] hsr_slave_1: left promiscuous mode [ 589.061812][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.069630][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.121857][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.129681][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.261222][ T58] veth1_macvtap: left promiscuous mode [ 589.267111][ T58] veth0_macvtap: left promiscuous mode [ 589.273210][ T58] veth1_vlan: left promiscuous mode [ 589.278768][ T58] veth0_vlan: left promiscuous mode [ 590.301621][ T58] team0 (unregistering): Port device team_slave_1 removed [ 590.328988][ T58] team0 (unregistering): Port device team_slave_0 removed [ 590.664305][ T8173] Bluetooth: hci5: command tx timeout [ 591.091308][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.736'. [ 591.450687][ T58] IPVS: stop unused estimator thread 0... [ 591.589352][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 591.615306][ T8653] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 591.708040][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 591.717858][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 591.728847][ T8653] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 591.760821][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 591.851324][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 591.860762][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 591.889356][ T8653] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 591.973878][ T8653] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 592.223960][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.233270][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.241299][ T8705] bridge_slave_0: entered allmulticast mode [ 592.250801][ T8705] bridge_slave_0: entered promiscuous mode [ 592.267880][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.276760][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.284670][ T8705] bridge_slave_1: entered allmulticast mode [ 592.298681][ T8705] bridge_slave_1: entered promiscuous mode [ 592.408039][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.704183][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.730266][ T5799] Bluetooth: hci5: command tx timeout [ 592.884459][ T8776] loop6: detected capacity change from 0 to 512 [ 592.975187][ T8776] EXT4-fs (loop6): Test dummy encryption mode enabled [ 592.983607][ T8705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.028601][ T8705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.123640][ T8776] EXT4-fs error (device loop6): __ext4_fill_super:5458: inode #2: comm syz.6.739: casefold flag without casefold feature [ 593.179346][ T8781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.740'. [ 593.189563][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.740'. [ 593.198971][ T8781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.740'. [ 593.212247][ T8781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.740'. [ 593.242195][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.262695][ T8776] EXT4-fs (loop6): get root inode failed [ 593.268571][ T8776] EXT4-fs (loop6): mount failed [ 593.431239][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.445626][ T5951] udevd[5951]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 593.572409][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 593.575643][ T8705] team0: Port device team_slave_0 added [ 593.682892][ T8705] team0: Port device team_slave_1 added [ 593.920391][ T5799] Bluetooth: hci2: command tx timeout [ 593.942378][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.949632][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.976338][ T8705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.062967][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.070509][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.097002][ T8705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.398197][ T58] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.657192][ T58] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.899230][ T58] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.122816][ T8705] hsr_slave_0: entered promiscuous mode [ 595.151930][ T8705] hsr_slave_1: entered promiscuous mode [ 595.211883][ T8705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.219688][ T8705] Cannot create hsr debugfs directory [ 595.372350][ T58] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.442723][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 596.003378][ T5799] Bluetooth: hci2: command tx timeout [ 596.106698][ T8813] loop6: detected capacity change from 0 to 1024 [ 596.176605][ T8813] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 596.192158][ T8813] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 596.251427][ T8813] journal_load_superblock: Cannot read journal superblock [ 596.258946][ T8813] EXT4-fs (loop6): Could not load journal inode [ 596.462014][ T58] bridge_slave_1: left allmulticast mode [ 596.467940][ T58] bridge_slave_1: left promiscuous mode [ 596.475191][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.491413][ T5972] udevd[5972]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 596.552455][ T29] audit: type=1326 audit(1730518185.312:188): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 596.576122][ T29] audit: type=1326 audit(1730518185.332:189): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 596.601799][ T29] audit: type=1326 audit(1730518185.332:190): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 596.652769][ T58] bridge_slave_0: left allmulticast mode [ 596.658667][ T58] bridge_slave_0: left promiscuous mode [ 596.667456][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.761089][ T58] bridge_slave_1: left allmulticast mode [ 596.767028][ T58] bridge_slave_1: left promiscuous mode [ 596.773915][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.825310][ T29] audit: type=1326 audit(1730518185.412:191): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 596.848609][ T29] audit: type=1326 audit(1730518185.412:192): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 596.856068][ T5972] udevd[5972]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 596.871303][ T29] audit: type=1326 audit(1730518185.412:193): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 596.871515][ T29] audit: type=1326 audit(1730518185.432:194): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 596.932682][ T29] audit: type=1326 audit(1730518185.432:195): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 596.955437][ T29] audit: type=1326 audit(1730518185.462:196): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 596.978095][ T29] audit: type=1326 audit(1730518185.462:197): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 597.004639][ T58] bridge_slave_0: left allmulticast mode [ 597.011421][ T58] bridge_slave_0: left promiscuous mode [ 597.017946][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.086155][ T5799] Bluetooth: hci2: command tx timeout [ 598.103856][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.139439][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.170695][ T58] bond0 (unregistering): Released all slaves [ 598.191716][ T58] bond1 (unregistering): Released all slaves [ 598.216028][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.274479][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.290636][ T58] bond0 (unregistering): Released all slaves [ 598.696065][ T8653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.710555][ T58] tipc: Disabling bearer [ 598.716452][ T58] tipc: Left network mode [ 599.159092][ T8653] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.215710][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.223481][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.274174][ T8705] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 599.362892][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.370641][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.391347][ T8705] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 599.652608][ T8835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.748'. [ 599.663850][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.748'. [ 599.673763][ T8835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.748'. [ 599.683197][ T8835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.748'. [ 599.758393][ T8705] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 599.878270][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.886702][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.894787][ T8766] bridge_slave_0: entered allmulticast mode [ 599.903952][ T8766] bridge_slave_0: entered promiscuous mode [ 599.922057][ T8705] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 600.076752][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.084878][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.092909][ T8766] bridge_slave_1: entered allmulticast mode [ 600.102092][ T8766] bridge_slave_1: entered promiscuous mode [ 600.177587][ T5799] Bluetooth: hci2: command tx timeout [ 600.618033][ T8766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.763840][ T58] hsr_slave_0: left promiscuous mode [ 600.773857][ T58] hsr_slave_1: left promiscuous mode [ 600.797699][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.805693][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.854801][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.862819][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.928201][ T58] hsr_slave_0: left promiscuous mode [ 600.954269][ T58] hsr_slave_1: left promiscuous mode [ 600.966792][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.975275][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.001883][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.009587][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.045600][ T58] veth1_macvtap: left promiscuous mode [ 601.051918][ T58] veth0_macvtap: left promiscuous mode [ 601.057800][ T58] veth1_vlan: left promiscuous mode [ 601.063531][ T58] veth0_vlan: left promiscuous mode [ 601.073582][ T58] veth1_macvtap: left promiscuous mode [ 601.079319][ T58] veth0_macvtap: left promiscuous mode [ 601.085940][ T58] veth1_vlan: left promiscuous mode [ 601.091623][ T58] veth0_vlan: left promiscuous mode [ 602.299037][ T58] team0 (unregistering): Port device team_slave_1 removed [ 602.472511][ T58] team0 (unregistering): Port device team_slave_0 removed [ 603.302953][ T58] team0 (unregistering): Port device team_slave_1 removed [ 603.368227][ T58] team0 (unregistering): Port device team_slave_0 removed [ 603.979799][ T8766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.667236][ T8653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 604.681013][ T8653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.788922][ T8766] team0: Port device team_slave_0 added [ 605.247845][ T8766] team0: Port device team_slave_1 added [ 605.618266][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.625661][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.652989][ T8766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.795718][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.804068][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.831318][ T8766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.872821][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.754'. [ 605.900505][ T8877] gretap0: entered promiscuous mode [ 606.377443][ T8766] hsr_slave_0: entered promiscuous mode [ 606.456522][ T8766] hsr_slave_1: entered promiscuous mode [ 606.486533][ T8766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.494678][ T8766] Cannot create hsr debugfs directory [ 606.579713][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.993955][ T8705] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.091333][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.098980][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.197787][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.205640][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.453897][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.198371][ T8895] netlink: 36 bytes leftover after parsing attributes in process `syz.6.756'. [ 608.207761][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.6.756'. [ 608.218206][ T8895] netlink: 36 bytes leftover after parsing attributes in process `syz.6.756'. [ 608.228232][ T8895] netlink: 36 bytes leftover after parsing attributes in process `syz.6.756'. [ 610.022711][ T8766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 610.097135][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.124906][ T8766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 610.208787][ T8766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 610.325465][ T8766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 610.524388][ T8653] veth0_vlan: entered promiscuous mode [ 610.558132][ T8653] veth1_vlan: entered promiscuous mode [ 610.693550][ T8653] veth0_macvtap: entered promiscuous mode [ 610.754396][ T8653] veth1_macvtap: entered promiscuous mode [ 611.021162][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.035800][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.047950][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.059271][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.074454][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.122396][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.134187][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.144830][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.155595][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.170482][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.190262][ T8653] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.199306][ T8653] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.208579][ T8653] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.217710][ T8653] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.220552][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 611.220623][ T29] audit: type=1326 audit(1730518199.972:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 612.241757][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.296652][ T8766] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.333087][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.340833][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.545719][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.553467][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.732640][ T8766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.736903][ T8705] veth0_vlan: entered promiscuous mode [ 613.847406][ T8705] veth1_vlan: entered promiscuous mode [ 614.274303][ T8705] veth0_macvtap: entered promiscuous mode [ 614.367852][ T8705] veth1_macvtap: entered promiscuous mode [ 614.541735][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.552557][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.563416][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.574232][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.584347][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.595113][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.611904][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.817003][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.963304][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.974757][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.986502][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.998206][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.008384][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.020488][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.035729][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.242658][ T8705] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.251850][ T8705] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.261400][ T8705] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.270532][ T8705] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.362522][ T8766] veth0_vlan: entered promiscuous mode [ 615.438404][ T8766] veth1_vlan: entered promiscuous mode [ 615.542291][ T8959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.765'. [ 615.551956][ T8959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.765'. [ 615.561252][ T8959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.765'. [ 615.570601][ T8959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.765'. [ 615.907899][ T8766] veth0_macvtap: entered promiscuous mode [ 615.997646][ T8766] veth1_macvtap: entered promiscuous mode [ 616.296897][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.308581][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.318837][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.331396][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.342527][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.356192][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.367273][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.378050][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.393387][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.708062][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.718931][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.735773][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.746727][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.756952][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.770745][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.781764][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.792594][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.809274][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.329425][ T8766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.338687][ T8766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.348756][ T8766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.357899][ T8766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.097612][ T3598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.105886][ T3598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.406340][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.414495][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.244933][ T9022] netlink: 36 bytes leftover after parsing attributes in process `syz.6.773'. [ 621.254506][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.6.773'. [ 621.263816][ T9022] netlink: 36 bytes leftover after parsing attributes in process `syz.6.773'. [ 621.274047][ T9022] netlink: 36 bytes leftover after parsing attributes in process `syz.6.773'. [ 622.225748][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.234037][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.535302][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.543746][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.772567][ T9041] loop8: detected capacity change from 0 to 512 [ 622.851690][ T9041] EXT4-fs (loop8): Test dummy encryption mode enabled [ 623.575210][ T9041] EXT4-fs error (device loop8): __ext4_fill_super:5458: inode #2: comm syz.8.775: casefold flag without casefold feature [ 623.655097][ T9041] EXT4-fs (loop8): get root inode failed [ 623.661297][ T9041] EXT4-fs (loop8): mount failed [ 623.818107][ T9036] udevd[9036]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 624.107841][ T9036] udevd[9036]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 624.136130][ T9057] futex_wake_op: syz.0.777 tries to shift op by -1; fix this program [ 625.471637][ T8904] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 625.807379][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.816200][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.039210][ T8904] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.050091][ T8904] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.063507][ T8904] usb 9-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.02 [ 626.073065][ T8904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.123085][ T8904] usb 9-1: config 0 descriptor?? [ 626.188689][ T8904] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 626.361294][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.369370][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.911641][ T2220] usb 9-1: USB disconnect, device number 2 [ 628.007508][ T9090] netlink: 36 bytes leftover after parsing attributes in process `syz.6.784'. [ 628.016854][ T9090] netlink: 16 bytes leftover after parsing attributes in process `syz.6.784'. [ 628.031679][ T9090] netlink: 36 bytes leftover after parsing attributes in process `syz.6.784'. [ 628.042542][ T9090] netlink: 36 bytes leftover after parsing attributes in process `syz.6.784'. [ 630.087728][ T9110] loop9: detected capacity change from 0 to 512 [ 630.170535][ T9110] EXT4-fs (loop9): Test dummy encryption mode enabled [ 630.338516][ T9036] udevd[9036]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 630.386747][ T9110] EXT4-fs error (device loop9): __ext4_fill_super:5458: inode #2: comm syz.9.789: casefold flag without casefold feature [ 630.601340][ T9110] EXT4-fs (loop9): get root inode failed [ 630.607249][ T9110] EXT4-fs (loop9): mount failed [ 630.879019][ T9036] udevd[9036]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 631.807158][ T9117] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 631.819731][ T9117] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 631.963533][ T9117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 631.972526][ T9117] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 632.006983][ T9117] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 632.191700][ T9117] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 632.198070][ T9117] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 632.275812][ T9117] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 632.314128][ T9117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 632.322239][ T9117] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 632.408084][ T9117] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 633.040520][ T5799] Bluetooth: hci4: command 0x0406 tx timeout [ 634.004589][ T5799] Bluetooth: hci1: command 0x0c1a tx timeout [ 634.321944][ T5799] Bluetooth: hci5: command 0x0c1a tx timeout [ 634.400887][ T5799] Bluetooth: hci2: command 0x0c1a tx timeout [ 635.120208][ T5799] Bluetooth: hci4: command 0x0406 tx timeout [ 635.422185][ T9158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.797'. [ 635.431885][ T9158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.797'. [ 635.441336][ T9158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.797'. [ 635.450612][ T9158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.797'. [ 636.083526][ T5799] Bluetooth: hci1: command 0x0c1a tx timeout [ 636.400465][ T5799] Bluetooth: hci5: command 0x0c1a tx timeout [ 636.410727][ T9167] loop9: detected capacity change from 0 to 512 [ 636.490667][ T5799] Bluetooth: hci2: command 0x0c1a tx timeout [ 636.536719][ T9167] EXT4-fs (loop9): Test dummy encryption mode enabled [ 636.650811][ T9167] EXT4-fs error (device loop9): __ext4_fill_super:5458: inode #2: comm syz.9.801: casefold flag without casefold feature [ 636.780602][ T9167] EXT4-fs (loop9): get root inode failed [ 636.786590][ T9167] EXT4-fs (loop9): mount failed [ 636.886859][ T9036] udevd[9036]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 637.155045][ T9036] udevd[9036]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 638.170342][ T5799] Bluetooth: hci1: command 0x0c1a tx timeout [ 638.195408][ T9177] loop9: detected capacity change from 0 to 16 [ 638.251136][ T9177] erofs: (device loop9): mounted with root inode @ nid 36. [ 638.389219][ T9036] udevd[9036]: symlink '../../loop9' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7d3f.tmp-b7:9' failed: Read-only file system [ 638.541624][ T5799] Bluetooth: hci5: command 0x0c1a tx timeout [ 638.574559][ T5799] Bluetooth: hci2: command 0x0c1a tx timeout [ 639.430213][ T29] audit: type=1326 audit(1730518228.122:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.8.805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 639.452849][ T29] audit: type=1326 audit(1730518228.122:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.8.805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 639.475228][ T29] audit: type=1326 audit(1730518228.152:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.8.805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 641.320260][ T8904] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 641.582741][ T8904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.594477][ T8904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.606219][ T8904] usb 9-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 641.616294][ T8904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.794040][ T8904] usb 9-1: config 0 descriptor?? [ 642.242424][ T29] audit: type=1326 audit(1730518230.972:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.8.814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 642.268356][ T29] audit: type=1326 audit(1730518230.992:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.8.814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 642.291667][ T29] audit: type=1326 audit(1730518230.992:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.8.814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 642.314316][ T29] audit: type=1326 audit(1730518231.012:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.8.814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=9 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 642.336581][ T29] audit: type=1326 audit(1730518231.012:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.8.814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 642.358863][ T29] audit: type=1326 audit(1730518231.012:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.8.814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 642.384190][ T29] audit: type=1326 audit(1730518231.012:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.8.814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 642.732787][ T8904] usbhid 9-1:0.0: can't add hid device: -71 [ 642.739396][ T8904] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 642.753147][ T8904] usb 9-1: USB disconnect, device number 3 [ 644.122619][ T9239] ===================================================== [ 644.130070][ T9239] BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 [ 644.137207][ T9239] sctp_sf_ootb+0x7f5/0xce0 [ 644.142359][ T9239] sctp_do_sm+0x181/0x93d0 [ 644.146969][ T9239] sctp_endpoint_bh_rcv+0xc38/0xf90 [ 644.152575][ T9239] sctp_inq_push+0x2ef/0x380 [ 644.157343][ T9239] sctp_rcv+0x3831/0x3b20 [ 644.161998][ T9239] sctp4_rcv+0x42/0x50 [ 644.166254][ T9239] ip_protocol_deliver_rcu+0xb51/0x13d0 [ 644.172191][ T9239] ip_local_deliver_finish+0x336/0x500 [ 644.177845][ T9239] ip_local_deliver+0x21f/0x490 [ 644.183050][ T9239] ip_rcv_finish+0x4a2/0x520 [ 644.187813][ T9239] ip_rcv+0xcd/0x380 [ 644.191982][ T9239] __netif_receive_skb+0x319/0xa00 [ 644.197295][ T9239] netif_receive_skb+0x58/0x660 [ 644.202470][ T9239] tun_rx_batched+0x3ee/0x980 [ 644.207318][ T9239] tun_get_user+0x5783/0x6c60 [ 644.212272][ T9239] tun_chr_write_iter+0x3ac/0x5d0 [ 644.217519][ T9239] vfs_write+0xb2b/0x1540 [ 644.222160][ T9239] ksys_write+0x24f/0x4c0 [ 644.226680][ T9239] __ia32_sys_write+0x91/0xe0 [ 644.231746][ T9239] ia32_sys_call+0x2e34/0x40d0 [ 644.236722][ T9239] __do_fast_syscall_32+0xb0/0x110 [ 644.242175][ T9239] do_fast_syscall_32+0x38/0x80 [ 644.247241][ T9239] do_SYSENTER_32+0x1f/0x30 [ 644.252069][ T9239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.258611][ T9239] [ 644.261204][ T9239] Uninit was created at: [ 644.265717][ T9239] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 644.271953][ T9239] kmalloc_reserve+0x13d/0x4a0 [ 644.276904][ T9239] __alloc_skb+0x363/0x7b0 [ 644.281690][ T9239] alloc_skb_with_frags+0xc8/0xd00 [ 644.286998][ T9239] sock_alloc_send_pskb+0xa81/0xbf0 [ 644.292547][ T9239] tun_get_user+0x20f4/0x6c60 [ 644.297389][ T9239] tun_chr_write_iter+0x3ac/0x5d0 [ 644.302824][ T9239] vfs_write+0xb2b/0x1540 [ 644.307339][ T9239] ksys_write+0x24f/0x4c0 [ 644.312030][ T9239] __ia32_sys_write+0x91/0xe0 [ 644.316908][ T9239] ia32_sys_call+0x2e34/0x40d0 [ 644.322092][ T9239] __do_fast_syscall_32+0xb0/0x110 [ 644.327428][ T9239] do_fast_syscall_32+0x38/0x80 [ 644.332692][ T9239] do_SYSENTER_32+0x1f/0x30 [ 644.337408][ T9239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.344496][ T9239] [ 644.346956][ T9239] CPU: 1 UID: 0 PID: 9239 Comm: syz.2.821 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 644.357927][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 644.368267][ T9239] ===================================================== [ 644.375494][ T9239] Disabling lock debugging due to kernel taint [ 644.381900][ T9239] Kernel panic - not syncing: kmsan.panic set ... [ 644.388462][ T9239] CPU: 1 UID: 0 PID: 9239 Comm: syz.2.821 Tainted: G B 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 644.400762][ T9239] Tainted: [B]=BAD_PAGE [ 644.405023][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 644.415237][ T9239] Call Trace: [ 644.418641][ T9239] [ 644.421687][ T9239] dump_stack_lvl+0x216/0x2d0 [ 644.426583][ T9239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 644.432644][ T9239] dump_stack+0x1e/0x30 [ 644.437013][ T9239] panic+0x4e2/0xcf0 [ 644.441120][ T9239] ? kmsan_get_metadata+0x41/0x1c0 [ 644.446484][ T9239] kmsan_report+0x2c7/0x2d0 [ 644.451213][ T9239] ? inet6_rt_notify+0x300/0x4d0 [ 644.456351][ T9239] ? raw_notifier_call_chain+0xe8/0x440 [ 644.462125][ T9239] ? dev_change_flags+0x168/0x1d0 [ 644.467331][ T9239] ? devinet_ioctl+0x13a6/0x2290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 644.472503][ T9239] ? inet_ioctl+0x4bd/0x6d0 [ 644.477176][ T9239] ? packet_ioctl+0x363/0x4f0 [ 644.482062][ T9239] ? sock_do_ioctl+0xb7/0x540 [ 644.486902][ T9239] ? compat_sock_ioctl+0xdb2/0x1360 [ 644.492332][ T9239] ? __msan_warning+0x95/0x120 [ 644.497314][ T9239] ? sctp_sf_ootb+0x7f5/0xce0 [ 644.502207][ T9239] ? sctp_do_sm+0x181/0x93d0 [ 644.506991][ T9239] ? sctp_endpoint_bh_rcv+0xc38/0xf90 [ 644.512594][ T9239] ? sctp_inq_push+0x2ef/0x380 [ 644.517541][ T9239] ? sctp_rcv+0x3831/0x3b20 [ 644.522211][ T9239] ? sctp4_rcv+0x42/0x50 [ 644.526645][ T9239] ? ip_protocol_deliver_rcu+0xb51/0x13d0 [ 644.532568][ T9239] ? ip_local_deliver_finish+0x336/0x500 [ 644.538402][ T9239] ? ip_local_deliver+0x21f/0x490 [ 644.543621][ T9239] ? ip_rcv_finish+0x4a2/0x520 [ 644.548572][ T9239] ? ip_rcv+0xcd/0x380 [ 644.552811][ T9239] ? __netif_receive_skb+0x319/0xa00 [ 644.558307][ T9239] ? netif_receive_skb+0x58/0x660 [ 644.563544][ T9239] ? tun_rx_batched+0x3ee/0x980 [ 644.568575][ T9239] ? tun_get_user+0x5783/0x6c60 [ 644.573598][ T9239] ? tun_chr_write_iter+0x3ac/0x5d0 [ 644.579027][ T9239] ? vfs_write+0xb2b/0x1540 [ 644.583721][ T9239] ? ksys_write+0x24f/0x4c0 [ 644.588412][ T9239] ? __ia32_sys_write+0x91/0xe0 [ 644.593464][ T9239] ? ia32_sys_call+0x2e34/0x40d0 [ 644.598630][ T9239] ? __do_fast_syscall_32+0xb0/0x110 [ 644.604128][ T9239] ? do_fast_syscall_32+0x38/0x80 [ 644.609367][ T9239] ? do_SYSENTER_32+0x1f/0x30 [ 644.614262][ T9239] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.620996][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.626422][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.631860][ T9239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 644.637901][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.643339][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.648773][ T9239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 644.654820][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.660244][ T9239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 644.666291][ T9239] __msan_warning+0x95/0x120 [ 644.671097][ T9239] sctp_sf_ootb+0x7f5/0xce0 [ 644.675823][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.681267][ T9239] sctp_do_sm+0x181/0x93d0 [ 644.685875][ T9239] ? stack_depot_save_flags+0x2c/0x6e0 [ 644.691547][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.696971][ T9239] ? stack_depot_save+0x12/0x20 [ 644.702023][ T9239] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 644.708045][ T9239] ? kmsan_internal_chain_origin+0x57/0xd0 [ 644.714059][ T9239] ? kmsan_internal_memmove_metadata+0x17b/0x230 [ 644.720603][ T9239] ? __msan_memcpy+0x108/0x1c0 [ 644.725570][ T9239] ? sctp_init_addrs+0x4b/0x60 [ 644.730541][ T9239] ? sctp_rcv+0x3198/0x3b20 [ 644.735209][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.740644][ T9239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 644.746696][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.752139][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.757560][ T9239] ? __pfx_sctp_sf_ootb+0x10/0x10 [ 644.762799][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.768248][ T9239] sctp_endpoint_bh_rcv+0xc38/0xf90 [ 644.773707][ T9239] ? __pfx_sctp_endpoint_bh_rcv+0x10/0x10 [ 644.779657][ T9239] sctp_inq_push+0x2ef/0x380 [ 644.784437][ T9239] sctp_rcv+0x3831/0x3b20 [ 644.788933][ T9239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 644.795017][ T9239] ? __pfx_sctp4_rcv+0x10/0x10 [ 644.799980][ T9239] sctp4_rcv+0x42/0x50 [ 644.804237][ T9239] ip_protocol_deliver_rcu+0xb51/0x13d0 [ 644.810001][ T9239] ip_local_deliver_finish+0x336/0x500 [ 644.815669][ T9239] ip_local_deliver+0x21f/0x490 [ 644.820707][ T9239] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 644.826891][ T9239] ? __pfx_ip_local_deliver+0x10/0x10 [ 644.832450][ T9239] ip_rcv_finish+0x4a2/0x520 [ 644.837247][ T9239] ip_rcv+0xcd/0x380 [ 644.841319][ T9239] ? __pfx_ip_rcv_finish+0x10/0x10 [ 644.846629][ T9239] ? ip6_rcv_finish+0x950/0x970 [ 644.851660][ T9239] ? __pfx_ip_rcv+0x10/0x10 [ 644.856340][ T9239] __netif_receive_skb+0x319/0xa00 [ 644.861665][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.867105][ T9239] netif_receive_skb+0x58/0x660 [ 644.872160][ T9239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 644.878205][ T9239] ? tun_rx_batched+0x37c/0x980 [ 644.883235][ T9239] tun_rx_batched+0x3ee/0x980 [ 644.888089][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.893518][ T9239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 644.899565][ T9239] tun_get_user+0x5783/0x6c60 [ 644.904418][ T9239] ? kmsan_get_metadata+0x13e/0x1c0 [ 644.909851][ T9239] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 644.916418][ T9239] ? ref_tracker_alloc+0x3d0/0x7e0 [ 644.921774][ T9239] tun_chr_write_iter+0x3ac/0x5d0 [ 644.927048][ T9239] vfs_write+0xb2b/0x1540 [ 644.931590][ T9239] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 644.937369][ T9239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 644.943427][ T9239] ksys_write+0x24f/0x4c0 [ 644.947968][ T9239] __ia32_sys_write+0x91/0xe0 [ 644.952843][ T9239] ia32_sys_call+0x2e34/0x40d0 [ 644.957830][ T9239] __do_fast_syscall_32+0xb0/0x110 [ 644.963176][ T9239] ? irqentry_exit+0x16/0x60 [ 644.967967][ T9239] do_fast_syscall_32+0x38/0x80 [ 644.973031][ T9239] do_SYSENTER_32+0x1f/0x30 [ 644.977744][ T9239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.984343][ T9239] RIP: 0023:0xf7f91579 [ 644.988562][ T9239] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 645.008377][ T9239] RSP: 002b:00000000f571655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 645.016990][ T9239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 645.025119][ T9239] RDX: 000000000000004f RSI: 0000000000000000 RDI: 0000000000000000 [ 645.033240][ T9239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 645.041357][ T9239] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 645.049485][ T9239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 645.057618][ T9239] [ 645.061020][ T9239] Kernel Offset: disabled [ 645.065411][ T9239] Rebooting in 86400 seconds..