last executing test programs: 8m22.022891383s ago: executing program 0 (id=237): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@directio}, {@loose}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x4001090}, 0x40080) syz_emit_ethernet(0x1046, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 8m20.658455757s ago: executing program 0 (id=240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 8m18.252013175s ago: executing program 0 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$netlink(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500feff1000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94) 8m17.123020165s ago: executing program 0 (id=246): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x13, 0xffffffffffffffff, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) 8m10.965825471s ago: executing program 0 (id=253): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000880)) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000500)=""/124) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0) read$FUSE(r2, &(0x7f00000079c0)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) syz_clone3(0x0, 0x0) 8m7.342114962s ago: executing program 0 (id=258): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) inotify_init() socket(0x80000000000000a, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 7m51.263938286s ago: executing program 32 (id=258): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) inotify_init() socket(0x80000000000000a, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 4m26.856454099s ago: executing program 1 (id=610): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0xfffffffd, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r5, r5, 0x0, 0x200000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 4m23.051373487s ago: executing program 1 (id=616): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000a40)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xf8, @f={0x8, 0x1, 0x0, 0x2, 0x0, 0x48, 0x1, {0x2, 0x9a, "d36c38591c22d1a74214cf6a4b00217668f73e90af7019d88d7f2477a92d418538225366efd39cfb0f746997dc98c3a1d29362ce06aecadd252e4120604ed83d898abb6d4e9bcf9df9a10c433787f50eaf1ebd3d6fad84e6d35f5b262d8b5171efec8924cb05ea60fc7ba557663d50e0b229861f823a43430a2d98bdd6ab4e76863e428dc972ac8285adcb793ac40b99f3a579e33f90236e0bcd"}, 0x3f, 0xe, 0x0, 0x4}}, 0xab) 4m19.725888606s ago: executing program 1 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be7", 0x33}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a", 0x53}], 0x2, &(0x7f0000002400)=[{0x1010, 0x1, 0x8, "244df5680b8203b6b985638f2545f2ac042a9aee660edf5459c22ed1ed6026739f79e286a1f42ab62b2270f719c0ea01f4cfde2afa600b46d7d34e10f60c895126a9adf4a9885156ee2178974a935091e8c514514f31db8fcb6395a59a1710c7cff57d7f512eb909c22710e93086e706d2a3e4c1a121465944394844b45ed609c9fabb4edaf37a3df4d37a5ea7e027b1c5b22dd328957ae0b6f90667ae9f43322d694eebddddf7f23f1943855002a99e58c8402393d5a7dfd8d88cd1fcb86fe7aac690f8fcffa5b9dc3fdbb4822e588b7773ff35873a5ea7cc83b006d00e70987f313f1b9ba1b1b93ed3eb0362a138f2fba123982919b7aa914be8ba9c71a8d76f7045daafabfb4a50993005e0686440e9f97cc259b5350c86a0effdea17facf052b6772c96ea5fedb6b9497e591f51bd0e02ac86402d6f3fe7d0e856a69c6e3d49d89ba91e2fe519d5ac2186091766c178f274e81493af54a02f7e0b3e47c0a862bd7af9712e65f74595e8c63c91a45ebd081ad910d95f26192ead1daf401b015eb772f4b91bbacf26157d5d6d626eff439e238a6dd9ebce65fb960ae90ec490d5014589a24d107c8b66a587166ce85e9bffd332defeee0c3333d15ed629874fb3259217911d50a1eec22b3c205b3c2068bdbe9d0145de5536049af47bea81d4cffdc45b277e8c06249510d2d429cb3e606d27f40918bd250818d0a09512ed8a2727c81a38e44366deb7ca5e30556b03305ae54b19cc17f6a543a9d397676d1d18c873c30f02a873c6fe6cb1c21d0ebf78c1bc732ef62cbc92e71d461886c9fa5f04d28dc4c7e3b3ed55fb39603c041d27017322610ac1a16c63c91ed376d9bba0df833d185fff47bad911c26a5918034211a3dbe77663f21a22b4bed8a3cbabfcd5622a1bbc3c015d1890391c5f5f57ff316718f57d7927f41724ee25f274c98a22d8cc1f7348cdd5ff604f4fe21d50f21a1638a75b39c6a5e5c0470812e9e7a663f4f61e6f8b008d31c6e9bd4686a17e0f4fb42c06a19436731d612990f7dbdc2d9b6dd4a5152b8cdbef0906e6f6dd07ad305da2d579fb968b000ad7075c91d35f1af5c3783cbeb9306de0cb3f086a0e2950f564b6e1d0ff9bc785d53ed0176c3feaa5356559ebf4508bccc9202ee45d1c20f768f98f60aed75b7da8dba4f1c36a8b668e3a9a19eb431d4759a7b6840c888774194f60f872790fb243fdb2fb1184bc6dd225bfdb447cc1cfa5277569536d051e8069185956aaa7c34217597ab9c93e3ac647542aab63a11dce2a50d9ae996bb2477afc23d2456f36c58a8ca9308aea7548ea875ed4159d2df58cc3edcc0f1afd5fbed7e8fd540a9e97009a801e6d1397670d528f6c8ebbfce8ac7196efb13d05df6d95942f3a5f7629c857e558f0f408cfe6c5d7b9b3c07ac388904b79ffa7f947c0738b1722e6c817cb87cbee4d26d29ac34205523c121677cf55e891a681e9e4a1847ff29a8f440a427ebb9fa040f212b558c0932ad7f7e1115f48c52adcfbfb13ca9fe08f5507a74b04fee211674865f4ffa3f5cfba2fa7640a055efb6e848f4b6f9222bbe3b26a3721ddabc492c0586ca63fb03cc73007bef0e35606cfc629fa1c551eee50593712449e31c730042128ecdf57b35c79d040c6c23c663c5d30e2f3e711c8a9b9949814afee7117207a2b3ee989dd8edf72d997b3baa3ad5b700a8bf3c29d347094df4864bd4f4c234d5ef682b20f2664f7af13ec91c2490b0ddaff7cb2214d84a0a4486e6c51db48c21b6ef2bccf637bd589204716b019f976491ec9eedea1e67d48521a6e42cbc77c808e597a876226ba352c79e5f485ce3dd499f7eb22831a3951b70c5c869c90596fa211a1b9844c8a80e3fccaef546d08c4599f43b08bf198d8ed3b666088b191103f477bcf885bee9e280c9c126f1a2ddff0963ef5da8136f405dd5479e121fccbfa18c290acbee162a13006fcca07773a3da5db87b29c6ee7d66d2340bc053b83d600b5aaab198965f691aa52be98fda0998bb6a330f54575429a3cb7dcca97db0cdf3a2f1003514b1c213875e5306feb23a152898fd2cd25d4b93867018f713fd5d070846cd9981a489bd1b26ddc9c55a84d2d69d2687c5119cda5dffd0f425205aad0533f1bbef18df707d80422c3ce3f41382bf63906622250d2013552d40d97f2ef8bfca77331262e2989401b7644797bad8525f93754b54ad7098bfccb80540686972f7bc6aae896cd999c7bfdef03d14c013fbe14d2664cedbee82453ce9c0353142b5f8a2914572b1e59c072149b467a52979027666a0659c2e509dd6fd542d2410c42509ceca783d663c5c3813becb351d4a6f1602e40d047fedcbcdffad0c0b37f93bdce20ab98003cb718f613b6900aa252648e54d8b311ab249dfd548f5b60d2d8694f8aa1859b3c5c05f76d3f9b2de17a4a8328c7f5db363d9d161ad3de19b99781ce192ac0082d3b798d84f4bed0dd93ebdca87a6301c68ef57934f00089d3a2b943235633e22d3df2364917738a1cd3a3d3a16c682f087e5df2a7b91eb6fb6902ae15dcf48f5ca55d50015a9013fc9176cba5e37d75bc8d6a7cc72b8ad3fa2da84b31570d100499c7cafd1627c41bc0201f0954e8a8e26e876cd1b090af8d053735298d0d07a86e6d72988ad1f50a9897dc4382a9f6d5c651006e15dddc8951d543d0500adf8112de6767b075655b359407a9492e2076bd357592eda6479e6f37e55ce92024b4f791066f4e815ca5187caaf9870c10b1cdc7484d8f86185690f09c8af0fb222bc8f48e83837525f219cc7f2cef1b66bd392800103fc047dcc2dcfbb33fb4bfd2bd67dacbf66b80b6287f682b4c6b8c0d58cf4f9e3a9f69ea56f9e27e52cd21aab42f9f04eba3317f1927fbdd500e10acc508ff158346839d7e2ec004d9d25d5f785971940a329e89c89ee7575e34060ecdd5333071defcfd84abbf5787a5db4248e312b9f4955d3c767ec218e726fa2f46fbcd75dd6966efdac1ae06013cfcdbb62cb6be19ec96d883676995fb9e325a8c7bf5658806de9c8dd9ce0a7d1bea024c1aca7c1baaf3d5b0a68a8eb75996dc5ca3327dee4794d121d08cae66e2ca9c749c4956deeed5f5a341ae324a98185918c63d09c262acbc3f3190f224a555e133e2629eb7e21db87e075a92d4b3d02c0938c9d155c4816842a6b916b0c57f2c80ca53ecd39194eede230b3c9377b39c8f8d62ab9ca9eb2463e69003c34c9833165ed3063e4541bc5ee55ecb2164784648a1741e505c8609e868b29d52fb4a7ca2bc762ea0a127fdd7f14787faa5188afc8e74557213ec261b86a80227566141885b6a27ef42bc90e9615439ba996c5a47c22812ca7e790ff5b992185cc95438118d34e4e967863a93be631a7e20356b29b8d46fccc0d80feb218d368a8aeae7a7dc7d5005abf36013498fb177e2c8776cc8d1f606ef95217e0be7e18bd75e209427a05895b26354f140e9e1870fc52913d17e09f78e7beb3ce86b3b3f424086b68b5eb7dbb76d45441b7523ac1b7b2c423440886c946b7f9dc1e7baadb434f30a70908a46bb2fc70c5a4ff234d13c3c62065d31931b200426b38fe46cc82cab2d95fcb12ce95ef3910ed0270fe40e65fa6eac628c46abd2aceb604fb64390313ac734f793764e9fd6579591b8b9a87394a2dcb5fee88deadad3b4774cba87c5f2c75a6ab0f2da04a583b1e47da363ca00c7f9a4c7593d139acbefb6f6ec341079d6c713b5fbfd8237e186f2166d6619411092b82b7cf4f45953b33cfccb8fadc4ab5cde926b5a909ec288eb7a9089b8cceb1cef2ef299881bd2a107574325116a7f72d68b641c0ba04024df088606a51c619d7dc1fc924e269f46fb1e73db8b55da8f87e68e66ff52967e66d971acccf2bbf0d6beaa53eb2f1215e23f961dc7370cb05c23606a2c1628509f04448091964cee7ed1eb9c419788f8b6d50f7da0c8ab6d3c206910d345d4e5da8c751145616a9fbf13c9958e253200f4cc65c542486cfd5444aa0f29da078e44f3867f996a04989acc14de81468f7e465737e6394df89fa04793d75c1dd60047fef04717536562e7149c273dfb3587753115e67a18e3de27fa09158bf8e987011b7f227cc1fde527604bf5e5faea8ed9ed60ea18d5b74f4369437adcf590ebade205567c3c4900cef28e91761746d4b031dbe202143712fc31eb9382f9700c6b90b39d6cd382923d44f46401b5325871985cce1822514686d5483725fc89b9c51b43ef05342a3a5c58be8e4220dfdd08e1c46954a9600bf682b21a6734aec38dc4f80d8a8018f2b73bb881e8380e09ec76626524b93695842145408d82817a7fc6aa28818246a554ba9c544dcbb110252cccfbc7c0c0127b66711ee999aa55bd104792077698e569e8b019acebb1b22c0938898a09fa9eef45ebdbeadb9681b3279364484f9b2a22cb77980e0fadca6d102bab74ad40168fc0639fb84ccb6c97594f8be0d8c5565a7e95dbc26769393d54bba05d43f6e5889daeebdc4d907c479395e47ecba27d3e3be73e55a0ba18285879db493386b3c1c1cc9336f9c93b52539595e2da1ddbda556f0f2e5ed9270347d4d41733aaa648394286abf34c347eef0e760f38c51961f3ca4c8089afc6a680aaf1b3b09108dcc7b35f2d14a9bb47a97b7d263fb65f3af91c3a2649d5a62ad0fa19780a02ff8e1b57b422285cdd02727d07819646b45780c383672cd97c88f392357e6c11de8bd3119ba6e44a17e996c999ee73c1a6d125ca6c3dfbbf8c85432e0ed91426e508da52ec3fc54c50c67099ca1fc6f87960cae23d7373c44d66b295343cf3acd75a9bdc5adde2f57846e221611cdf4cff2a5965f1b4fa5dc0390d1e81c44dd619aaf48dbfb5c9f5be2cc3d4551a61ec91a1ad7c30226bbbd6d38f79df22676b42b4c213334c3ba10207289f812ebea67dc86de90a8e7c814e6c683a1fbed6a835c5d36afaf817d5da42726a41a60528c206943f288186821621dfc9274bc6780882b56e974221654db8bbd7172dfcb15ffb6b59297663f959fd238b7d915d42b281168caf23a6463136de6e66fcfa9c4034828f69796480ce756f309539e2ecdd89afb7e98fe0d69e97dce2a769a8966e274a6163bc86b14309adf01e435e8fc829833021a0dccf3d518d50b89ee206ee20c16c4b143dcf28c728e5ce73566c7caaa61b6fc004ee440410db26c683990181f6f02a168ef31aa513edf931dcf1b865ab684f9b6f400ae070af25f85d2340025b0e2aab778c21c7555d5e5f14f0cbd79d89571bc8ed6f0e66f3c22ebd919e0e2c5a1142f9f61e1222c4142e7ec5264e3bfda14759d92897bbe41af8742d02b46bbf2d526141133efe22c795acfaa16fb5700b661202d9a9b7b447e2fe33a64469e3b447fc399da62297205ab4a07311c7fe90234faf4bbd92c97e57af391d17f015bafdfccd59791bb2859a9790e47987093b6cb5a8ffbd83e54fcdfefc5ec153ec38732fb78d2f32ce9657faa17335da999e88564208fc752b264e09adbab145cd667b7672ea0e5b96c8b291d1950978859e73611ad19b34306754ca0ab3fd6e39728c99717747a6465982d85224e4a382a70e50a6dcb16ebddc7cf373c2ee2017964b4aebc55e1e8f783a2f423c1a65473defe7c84292512f7d25578e5196c9cafccae006542193ab20b5db94fc39ea77280438723d003383d0e37b6dff7fa43db29ba52a1235b63db868de9dc807321b74f7581f7de703433d29723eac4eebf5a26711f8e6592396d6bf5e30e87857a"}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x100, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a405acc4b885829"}], 0x1148}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m17.96392249s ago: executing program 1 (id=626): socket$kcm(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4m16.222174933s ago: executing program 1 (id=628): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x4001090}, 0x40080) syz_emit_ethernet(0x1046, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 4m12.450684018s ago: executing program 1 (id=634): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) 3m57.245636937s ago: executing program 33 (id=634): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) 2m51.029890691s ago: executing program 6 (id=766): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, 0x0, 0x0, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, 0x0, 0x0, 0x10008095, 0x0, 0x0) r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_procfs$userns(r3, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 2m46.792560589s ago: executing program 6 (id=774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, 0x0, 0x0, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, 0x0, 0x0, 0x10008095, 0x0, 0x0) r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_procfs$userns(r3, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0, 0x0, &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00']}, &(0x7f0000000b80)={[&(0x7f00000000c0)='-\xf3\x00']}) 2m41.85984982s ago: executing program 6 (id=786): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x12000, 0x8, 0xc678, 0x20000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) 2m40.533218761s ago: executing program 6 (id=790): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x4) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="00210600710a5eeb9d", 0x9}], 0x1, 0xee, 0x1) ioctl$FBIOBLANK(r2, 0x4611, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) 2m34.696529808s ago: executing program 6 (id=798): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x12000, 0x8, 0xc678, 0x20000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) 2m32.46144647s ago: executing program 6 (id=804): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x12000, 0x8, 0xc678, 0x20000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m17.28055157s ago: executing program 34 (id=804): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x12000, 0x8, 0xc678, 0x20000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 27.650602917s ago: executing program 4 (id=1078): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x13, r5, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) 22.854052708s ago: executing program 5 (id=1084): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, 0x0, 0x0, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, 0x0, 0x0, 0x10008095, 0x0, 0x0) r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_procfs$userns(r3, &(0x7f0000000580)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0, 0x0, &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00']}, &(0x7f0000000b80)={[&(0x7f00000000c0)='-\xf3\x00']}) syz_emit_ethernet(0x99, &(0x7f0000000ac0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0xa15cb}, {0x2}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xe7}, {0x2, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x100, 0x0, 0x1}], @generic="0e489ef9fceb1f24f1b777e21fad84a10a8207800819ac742d5d8d69dd44effb5ba93fadb4d0bbc9e7b8237b5ee964bcdb65fb5e04bf8776c7b28549caeeba0b6df8c9c1be7f69b4397c3860b81e56eaeef1f35ca914684bcddc02880b653f"}}}}, &(0x7f0000000740)={0x0, 0x2, [0x129, 0x3fa, 0xfed, 0x100]}) 22.592136425s ago: executing program 4 (id=1086): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000100ac1414aa", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x134, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0x184}}, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xa2, 0x20, 0xfc}}]}}, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 19.29710776s ago: executing program 5 (id=1094): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x12000, 0x8, 0xc678, 0x20000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r0, 0xe) landlock_restrict_self(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 19.255168757s ago: executing program 7 (id=1095): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000740)="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", 0x13c}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab75", 0x73}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000015c0)="177188b7282c32d735bee7b4dfa9d0028a56d21b0fa9c05930147cd2a8b5f73149939ec1eff53f8726147babb7210558208a4f3a8ac5cea498e3dab5d16b05ab41665f00e6ea3778118ff980d96ca382d73f204ada3ae6ee3eb1000000006ca5a9cdcd357576a896b6b55bf1e8348f18a3d81384a8afc4aae95cc109525727e54d0951602d7dee7f0886b5142f4b428603c8ff2ac2ff0fbbfd7b838b353048d9f4c90de475d89ffa8c7fca47bab63288626b8f9eaa060000000000000022ebdbd3c24c83632eccfa542baada0000000000000000e330cf9e3c54269a420a498ce7c8c92fe00a586600d0bfe63259461c47eec8144f55ae3362bdf45ba293e4c128c31388b3da8755fb7491b9d5ea6c28ebdb3189d4d0a77de44d938b83dfce8fdd5bb8da609a386d3dd98f7705b47a01ab800e7ea3b063232f5f7a992e152bb62c9484f0b1c45cfe24769a673dc048a2fcffabb0e4adf9336427f72fe50b6285a97f9d0f49bab6218bc7dd2dcf55411460281c511866fb323f5ba870dea66b59dc97e900b029ddc0eb1be1f8f09ca2c076b667cc4396725de1d5f4c81f204ca09166e9dff28fbf8a1d7716460db457832c6b322725b2", 0xffffffffffffff88, 0x0, 0x0, 0xfffffffffffffd20) 18.23042093s ago: executing program 5 (id=1097): syz_emit_ethernet(0x83, &(0x7f00000005c0)=ANY=[@ANYBLOB="5bc950540911bbbbbbbbbbbb000128636db46fea92136fb68760e3d0a4938948e9dca01d90b9692cf3374b60bc7b4283844fdc970548a358365f213d5d4c7bcb326436b552"], 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000080)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd8456a18f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x102b}}, 0x2000) 18.042039947s ago: executing program 7 (id=1098): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x13, r5, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) 15.71126375s ago: executing program 5 (id=1100): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 15.600680988s ago: executing program 8 (id=1101): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x4) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="00210600710a5eeb9d", 0x9}], 0x1, 0xee, 0x1) ioctl$FBIOBLANK(r2, 0x4611, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioprio_get$uid(0x3, 0x0) 14.60531261s ago: executing program 7 (id=1102): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32, @ANYBLOB="000000ec000000000000000000000000000000f95d7688232705f200f932cb3ad635067932c2a7cfa2944e6dfaa3e49037ea6d902bb3b5d798e3a773cb12f99e87f4565507d0bea6190f58d38710160606a37e6f2ce8f52854859fb79b7648dda17635c229d0f15b188a6307d9b4b6b5c23b22beb6bee4547fb115cdc2"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000480), &(0x7f00000004c0)='%pB \x00'}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r5, 0x29, 0xcb, &(0x7f0000000140)=0x9a7, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13.060468986s ago: executing program 2 (id=1104): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ppoll(&(0x7f0000000080)=[{r0, 0x1006}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 12.734707869s ago: executing program 8 (id=1105): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x460900, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xd) r3 = openat$zero(0xffffff9c, 0x0, 0x2401, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="500001040000000000000000070000090c000240fffffffffffffffa0c000640000000000000000809000100a0a46a65000000000c00024000000000000000090c0002400000000000000004602bdb175d7db012dfbc802bb3532bf66bd479daa958263398822d6dd91defc00248a855d7e7d08ea38d7e53096e90ee0ba55c9cd8ac3b76bcdee44c36b7"], 0x50}, 0x1, 0x0, 0x0, 0x4081}, 0x20000010) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000002c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff", 0x3c}], 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'batadv0\x00', 0x1}, 0x18) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) 12.447464714s ago: executing program 2 (id=1106): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) syz_io_uring_setup(0x487, 0x0, 0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x1) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x2) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) 12.208726384s ago: executing program 3 (id=1107): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x60218000, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0x3}, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r4, 0x5402) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r6, 0x10000) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000440)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f6164205f235a66756c742074727573747175656e636572320020303030edb11a5f324d303030300500000030303620663365370e626600"], 0x43, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xc3, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) memfd_create(&(0x7f0000000280)='-B\xd5N4:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc8<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUOMX\x164\xec\x06i\x85\x93\x87YB.e\xea2|A\x95\x05\xc3\x11\xde\xa0\x14*4\x83J\xa1\xddc\xde\x91 sO\xfb\xcc\r\xa8\x05\xa3\xab\xe6\xb5\xe4\x8b\x128\xa8\x05\xf9\f\xb4\x97\x1c\x82\xfd\x80O\x00\x00\x00\x00\x00\x00\x00', 0x1) 10.311123312s ago: executing program 4 (id=1108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f0000000140)={0xa, 0xa, 0x7, @private2}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000023c0)="671723d7c6012c86d748a0d1f40bb0c556c0a4e28483ad0811319bbe819bf59ae1a56455dc6f5aa22fb9d866ab02472b9228d6dcaff00648654b9c238e7688a57a6106459151b8b4bbd24e98b95ed954167f91d3a26307e0c89dd6fb947456fa1115be3eb4ded54055781fa0d5545197552ceff5118f44beade532025c8cffc765c0837f18ac7780f41e0a0867f9c1cf6486b5f3f4ab7a5e324d8fe1d2c09f6367d89060bd5ec4e9fe8bb07948c4b3d9fe2715cceac702357124b7130a1dc19483b453b773687ca3f1ebb013150d96d6", 0xd0}, {&(0x7f0000000280)="9e91d91a92dc7c8fff2b8bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x6}, {&(0x7f00000024c0)="4d27610c33ee2d45e54b5256f9fa043f911d41d4776d8a547970e99bee63305733045196980a4f66b3ce832e577c01e4270a1b67fd506a6be83242432cf2a96b14ea0b2b38869cb095b8da81c9747356331247", 0x53}], 0x3}, 0x0) r3 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x8, 0x4) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r6, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0xfffc, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff, [0x0, 0x10001]}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r7}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r7, 0x0, 0x100000000000000}, 0x38) 10.286604651s ago: executing program 5 (id=1109): fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x308, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xec, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x2c}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x364) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) dup(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x2000800) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000300), 0x4) recvmmsg(r6, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1}, 0x32c1}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x2, 0x0) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1daf", 0x2}], 0x1}}], 0x2, 0x4040081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 10.23658238s ago: executing program 2 (id=1110): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x4) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="00210600710a5eeb9d", 0x9}], 0x1, 0xee, 0x1) ioctl$FBIOBLANK(r2, 0x4611, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioprio_get$uid(0x3, 0x0) 9.403742916s ago: executing program 8 (id=1111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 7.972317081s ago: executing program 8 (id=1112): syz_emit_ethernet(0x83, &(0x7f00000005c0)=ANY=[@ANYBLOB="5bc950540911bbbbbbbbbbbb000128636db46fea92136fb68760e3d0a4938948e9dca01d90b9692cf3374b60bc7b4283844fdc970548a358365f213d5d4c7bcb326436b552"], 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) 7.837904429s ago: executing program 3 (id=1113): r0 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x6, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000006c0)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r3, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) syz_emit_ethernet(0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffff3780c20000000800"], 0x0) sendfile(r7, r7, 0x0, 0xfffc) ioctl$SIOCGETSGCNT_IN6(r6, 0x89e1, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x358, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @remote, @multicast2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000731133000000000085109500a50500"/46], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) 7.671262904s ago: executing program 8 (id=1114): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x13, r5, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) 7.262900089s ago: executing program 3 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a31000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 6.27764938s ago: executing program 4 (id=1116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 5.650092499s ago: executing program 7 (id=1117): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x460900, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xd) r3 = openat$zero(0xffffff9c, 0x0, 0x2401, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="500001040000000000000000070000090c000240fffffffffffffffa0c000640000000000000000809000100a0a46a65000000000c00024000000000000000090c0002400000000000000004602bdb175d7db012dfbc802bb3532bf66bd479daa958263398822d6dd91defc00248a855d7e7d08ea38d7e53096e90ee0ba55c9cd8ac3b76bcdee44c36b7"], 0x50}, 0x1, 0x0, 0x0, 0x4081}, 0x20000010) socket$netlink(0x10, 0x3, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'batadv0\x00', 0x1}, 0x18) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) 5.527441308s ago: executing program 3 (id=1118): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) ppoll(&(0x7f0000000080)=[{r0, 0x1006}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 5.177601544s ago: executing program 2 (id=1119): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.154301984s ago: executing program 3 (id=1120): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0x10000) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000440)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x2) 5.039420588s ago: executing program 3 (id=1121): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, 0x0, 0x0, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, 0x0, 0x0, 0x10008095, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0, 0x0, &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00']}, &(0x7f0000000b80)={[&(0x7f00000000c0)='-\xf3\x00']}) syz_emit_ethernet(0x99, &(0x7f0000000ac0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0xa15cb}, {0x2}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xe7}, {0x2, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x100, 0x0, 0x1}], @generic="0e489ef9fceb1f24f1b777e21fad84a10a8207800819ac742d5d8d69dd44effb5ba93fadb4d0bbc9e7b8237b5ee964bcdb65fb5e04bf8776c7b28549caeeba0b6df8c9c1be7f69b4397c3860b81e56eaeef1f35ca914684bcddc02880b653f"}}}}, &(0x7f0000000740)={0x0, 0x2, [0x129, 0x3fa, 0xfed, 0x100]}) 4.942480229s ago: executing program 5 (id=1122): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000100ac1414aa", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x134, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0x184}}, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xa2, 0x20, 0xfc}}]}}, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4.664322065s ago: executing program 8 (id=1123): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x72, &(0x7f00000005c0)=""/114}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x200000000) 2.705779169s ago: executing program 2 (id=1124): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x12000, 0x8, 0xc678, 0x20000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.173887933s ago: executing program 4 (id=1125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="a89aaff535fd2b4fd017b8de9ff650a9a1ec6b8accf695840b4e0e67b2", @ANYRES16], 0xe0}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000500"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 1.696505273s ago: executing program 7 (id=1126): syz_emit_ethernet(0x83, &(0x7f00000005c0)=ANY=[@ANYBLOB="5bc950540911bbbbbbbbbbbb000128636db46fea92136fb68760e3d0a4938948e9dca01d90b9692cf3374b60bc7b4283844fdc970548a358365f213d5d4c7bcb326436b552"], 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000080)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd8456a18f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x102b}}, 0x2000) 1.689476794s ago: executing program 4 (id=1127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f0000000140)={0xa, 0xa, 0x7, @private2}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000023c0)="671723d7c6012c86d748a0d1f40bb0c556c0a4e28483ad0811319bbe819bf59ae1a56455dc6f5aa22fb9d866ab02472b9228d6dcaff00648654b9c238e7688a57a6106459151b8b4bbd24e98b95ed954167f91d3a26307e0c89dd6fb947456fa1115be3eb4ded54055781fa0d5545197552ceff5118f44beade532025c8cffc765c0837f18ac7780f41e0a0867f9c1cf6486b5f3f4ab7a5e324d8fe1d2c09f6367d89060bd5ec4e9fe8bb07948c4b3d9fe2715cceac702357124b7130a1dc19483b453b773687ca3f1ebb013150d96d6", 0xd0}, {&(0x7f0000000280)="9e91d91a92dc7c8fff2b8bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x6}, {&(0x7f00000024c0)="4d27610c33ee2d45e54b5256f9fa043f911d41d4776d8a547970e99bee63305733045196980a4f66b3ce832e577c01e4270a1b67fd506a6be83242432cf2a96b14ea0b2b38869cb095b8da81c9747356331247", 0x53}], 0x3}, 0x0) r3 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x8, 0x4) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000003380)={0x2020}, 0x2020) 1.438339731s ago: executing program 7 (id=1128): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x72, &(0x7f00000005c0)=""/114}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x200000000) 0s ago: executing program 2 (id=1129): timer_create(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(0xffffffffffffffff, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000839000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) kernel console output (not intermixed with test programs): =unconfined op=collect_data cause=failed(directio) comm="syz.4.245" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 240.410189][ T6972] loop1: detected capacity change from 0 to 256 [ 243.290338][ T6984] loop0: detected capacity change from 0 to 40427 [ 243.438776][ T6984] F2FS-fs (loop0): invalid crc value [ 243.524763][ T6984] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 243.537417][ T6984] F2FS-fs (loop0): Start checkpoint disabled! [ 243.670085][ T6984] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 243.682774][ T6984] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 243.880933][ T30] audit: type=1800 audit(1772599990.390:16): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.253" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 244.173520][ T30] audit: type=1800 audit(1772599990.470:17): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.253" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 246.325431][ T143] kworker/u8:6: attempt to access beyond end of device [ 246.325431][ T143] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 246.361475][ T143] CPU: 0 UID: 0 PID: 143 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.361516][ T143] Tainted: [L]=SOFTLOCKUP [ 246.361525][ T143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.361541][ T143] Workqueue: writeback wb_workfn (flush-7:0) [ 246.361579][ T143] Call Trace: [ 246.361589][ T143] [ 246.361599][ T143] dump_stack_lvl+0xe8/0x150 [ 246.361638][ T143] f2fs_handle_critical_error+0x37c/0x540 [ 246.361677][ T143] f2fs_write_end_io+0xcdb/0xff0 [ 246.361735][ T143] __submit_merged_bio+0x256/0x700 [ 246.361773][ T143] __submit_merged_write_cond+0x3c9/0x4e0 [ 246.361820][ T143] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 246.361867][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.361910][ T143] f2fs_write_data_pages+0x2975/0x35e0 [ 246.361942][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.362021][ T143] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 246.362053][ T143] ? cfg80211_inform_single_bss_data+0x13c6/0x1b70 [ 246.362149][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.362178][ T143] ? __lock_acquire+0x6b5/0x2cf0 [ 246.362236][ T143] ? unwind_next_frame+0xa5/0x23c0 [ 246.362304][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.362333][ T143] ? unwind_next_frame+0x1aaf/0x23c0 [ 246.362373][ T143] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 246.362407][ T143] do_writepages+0x32e/0x550 [ 246.362457][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.362486][ T143] ? reacquire_held_locks+0x104/0x190 [ 246.362523][ T143] ? writeback_sb_inodes+0x477/0x1a20 [ 246.362565][ T143] __writeback_single_inode+0x133/0x11a0 [ 246.362602][ T143] ? do_raw_spin_unlock+0xf5/0x210 [ 246.362635][ T143] writeback_sb_inodes+0x992/0x1a20 [ 246.362711][ T143] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 246.362742][ T143] ? do_raw_spin_lock+0x12b/0x2f0 [ 246.362837][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.362867][ T143] ? rcu_is_watching+0x15/0xb0 [ 246.362903][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.362944][ T143] wb_writeback+0x456/0xb70 [ 246.362982][ T143] ? queue_io+0x241/0x4a0 [ 246.363027][ T143] ? __pfx_wb_writeback+0x10/0x10 [ 246.363056][ T143] ? do_raw_spin_lock+0x12b/0x2f0 [ 246.363105][ T143] wb_workfn+0x414/0xf50 [ 246.363136][ T143] ? look_up_lock_class+0x57/0x110 [ 246.363181][ T143] ? __pfx_wb_workfn+0x10/0x10 [ 246.363212][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.363241][ T143] ? do_raw_spin_lock+0x12b/0x2f0 [ 246.363271][ T143] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 246.363297][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.363335][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.363368][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.363399][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.363433][ T143] ? process_scheduled_works+0xa25/0x1830 [ 246.363467][ T143] ? process_scheduled_works+0xa25/0x1830 [ 246.363503][ T143] process_scheduled_works+0xb02/0x1830 [ 246.363577][ T143] ? __pfx_process_scheduled_works+0x10/0x10 [ 246.363620][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.363649][ T143] ? assign_work+0x3d5/0x5e0 [ 246.363690][ T143] worker_thread+0xa50/0xfc0 [ 246.363765][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.363812][ T143] kthread+0x388/0x470 [ 246.363838][ T143] ? __pfx_worker_thread+0x10/0x10 [ 246.363869][ T143] ? __pfx_kthread+0x10/0x10 [ 246.363896][ T143] ret_from_fork+0x51e/0xb90 [ 246.363933][ T143] ? __pfx_ret_from_fork+0x10/0x10 [ 246.363964][ T143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.363992][ T143] ? __switch_to+0xc7d/0x1450 [ 246.364027][ T143] ? __pfx_kthread+0x10/0x10 [ 246.364054][ T143] ret_from_fork_asm+0x1a/0x30 [ 246.364116][ T143] [ 246.728549][ T143] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 248.739673][ T7007] nfs: Unknown parameter 'ac' [ 253.613276][ T7048] loop3: detected capacity change from 0 to 256 [ 255.054231][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.127150][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 256.136859][ T7057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.195056][ T7057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.488290][ T7066] loop3: detected capacity change from 0 to 40427 [ 258.520054][ T7066] F2FS-fs (loop3): invalid crc value [ 258.602500][ T7066] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 258.614246][ T7066] F2FS-fs (loop3): Start checkpoint disabled! [ 258.649631][ T7066] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 258.659048][ T7066] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 258.685721][ T30] audit: type=1800 audit(1772600005.190:18): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.270" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 258.978191][ T30] audit: type=1800 audit(1772600005.270:19): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.270" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 259.784255][ T6885] kworker/u8:12: attempt to access beyond end of device [ 259.784255][ T6885] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.849285][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.849321][ T6885] Tainted: [L]=SOFTLOCKUP [ 259.849330][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.849345][ T6885] Workqueue: writeback wb_workfn (flush-7:3) [ 259.849382][ T6885] Call Trace: [ 259.849391][ T6885] [ 259.849401][ T6885] dump_stack_lvl+0xe8/0x150 [ 259.849439][ T6885] f2fs_handle_critical_error+0x37c/0x540 [ 259.849473][ T6885] f2fs_write_end_io+0xcdb/0xff0 [ 259.849532][ T6885] __submit_merged_bio+0x256/0x700 [ 259.849568][ T6885] __submit_merged_write_cond+0x3c9/0x4e0 [ 259.849605][ T6885] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 259.849647][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.849688][ T6885] f2fs_write_data_pages+0x2975/0x35e0 [ 259.849719][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.849787][ T6885] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.849816][ T6885] ? cfg80211_inform_single_bss_data+0x13c6/0x1b70 [ 259.849904][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.849934][ T6885] ? __lock_acquire+0x6b5/0x2cf0 [ 259.849986][ T6885] ? unwind_next_frame+0xa5/0x23c0 [ 259.850052][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.850080][ T6885] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.850114][ T6885] do_writepages+0x32e/0x550 [ 259.850151][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.850185][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.850213][ T6885] ? reacquire_held_locks+0x104/0x190 [ 259.850250][ T6885] ? writeback_sb_inodes+0x477/0x1a20 [ 259.850290][ T6885] __writeback_single_inode+0x133/0x11a0 [ 259.850326][ T6885] ? do_raw_spin_unlock+0xf5/0x210 [ 259.850357][ T6885] writeback_sb_inodes+0x992/0x1a20 [ 259.850413][ T6885] ? unwind_next_frame+0xa5/0x23c0 [ 259.850462][ T6885] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 259.850493][ T6885] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.850562][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.850590][ T6885] ? rcu_is_watching+0x15/0xb0 [ 259.850625][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.850663][ T6885] wb_writeback+0x456/0xb70 [ 259.850700][ T6885] ? queue_io+0x241/0x4a0 [ 259.850742][ T6885] ? __pfx_wb_writeback+0x10/0x10 [ 259.850772][ T6885] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.850815][ T6885] wb_workfn+0x414/0xf50 [ 259.850853][ T6885] ? look_up_lock_class+0x57/0x110 [ 259.850893][ T6885] ? __pfx_wb_workfn+0x10/0x10 [ 259.850923][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.850951][ T6885] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.850979][ T6885] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 259.851005][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.851040][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.851072][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.851103][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.851135][ T6885] ? process_scheduled_works+0xa25/0x1830 [ 259.851167][ T6885] ? process_scheduled_works+0xa25/0x1830 [ 259.851202][ T6885] process_scheduled_works+0xb02/0x1830 [ 259.851267][ T6885] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.851306][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.851335][ T6885] ? assign_work+0x3d5/0x5e0 [ 259.851373][ T6885] worker_thread+0xa50/0xfc0 [ 259.851408][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.851454][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.851494][ T6885] kthread+0x388/0x470 [ 259.851519][ T6885] ? __pfx_worker_thread+0x10/0x10 [ 259.851550][ T6885] ? __pfx_kthread+0x10/0x10 [ 259.851576][ T6885] ret_from_fork+0x51e/0xb90 [ 259.851613][ T6885] ? __pfx_ret_from_fork+0x10/0x10 [ 259.851643][ T6885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.851671][ T6885] ? __switch_to+0xc7d/0x1450 [ 259.851704][ T6885] ? __pfx_kthread+0x10/0x10 [ 259.851729][ T6885] ret_from_fork_asm+0x1a/0x30 [ 259.851786][ T6885] [ 260.512710][ T6885] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 265.598177][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.280'. [ 266.393435][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 266.407936][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 266.426960][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 266.654561][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 266.683960][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.543268][ T5831] Bluetooth: hci6: command tx timeout [ 270.901801][ T5831] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 270.944783][ T5831] Bluetooth: hci3: Injecting HCI hardware error event [ 271.037129][ T5831] Bluetooth: hci3: hardware error 0x00 [ 271.608551][ T5136] Bluetooth: hci6: command tx timeout [ 272.051707][ T7116] chnl_net:caif_netlink_parms(): no params data found [ 273.351427][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.368943][ T5831] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 273.378734][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.386170][ T7116] bridge_slave_0: entered allmulticast mode [ 273.552456][ T7116] bridge_slave_0: entered promiscuous mode [ 273.587800][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.612331][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.634649][ T7116] bridge_slave_1: entered allmulticast mode [ 273.688932][ T5831] Bluetooth: hci6: command tx timeout [ 273.720345][ T7116] bridge_slave_1: entered promiscuous mode [ 274.519940][ T7116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.533979][ T7116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.504909][ T7116] team0: Port device team_slave_0 added [ 275.513770][ T7116] team0: Port device team_slave_1 added [ 275.768402][ T5831] Bluetooth: hci6: command tx timeout [ 275.898764][ T7159] loop3: detected capacity change from 0 to 256 [ 276.838884][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.845853][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.938232][ T7116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.752443][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.808437][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.990667][ T7116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.261080][ T7116] hsr_slave_0: entered promiscuous mode [ 280.282123][ T7116] hsr_slave_1: entered promiscuous mode [ 280.450168][ T7116] debugfs: 'hsr0' already exists in 'hsr' [ 280.455951][ T7116] Cannot create hsr debugfs directory [ 284.083054][ T7116] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 284.129934][ T7116] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 284.158191][ T7116] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 284.176516][ T7116] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 284.547662][ T7116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.634594][ T7116] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.691254][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.698554][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.796646][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.803965][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.647676][ T5831] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 285.658833][ T5831] Bluetooth: hci1: Injecting HCI hardware error event [ 285.700606][ T5831] Bluetooth: hci1: hardware error 0x00 [ 285.990569][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 286.000240][ T7232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.562259][ T7232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.815105][ T7230] loop4: detected capacity change from 0 to 40427 [ 286.838630][ T7230] F2FS-fs (loop4): invalid crc value [ 286.922661][ T7230] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 286.932748][ T7230] F2FS-fs (loop4): Start checkpoint disabled! [ 286.941169][ T7230] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 286.949557][ T7230] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 286.991531][ T30] audit: type=1800 audit(1772600033.500:20): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.306" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 287.365684][ T30] audit: type=1800 audit(1772600033.580:21): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.306" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 287.771126][ T5831] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 289.025478][ T137] kworker/u8:5: attempt to access beyond end of device [ 289.025478][ T137] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 289.116769][ T137] CPU: 0 UID: 0 PID: 137 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.116798][ T137] Tainted: [L]=SOFTLOCKUP [ 289.116805][ T137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.116816][ T137] Workqueue: writeback wb_workfn (flush-7:4) [ 289.116846][ T137] Call Trace: [ 289.116853][ T137] [ 289.116861][ T137] dump_stack_lvl+0xe8/0x150 [ 289.116898][ T137] f2fs_handle_critical_error+0x37c/0x540 [ 289.116927][ T137] f2fs_write_end_io+0xcdb/0xff0 [ 289.116972][ T137] __submit_merged_bio+0x256/0x700 [ 289.117000][ T137] __submit_merged_write_cond+0x3c9/0x4e0 [ 289.117030][ T137] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 289.117066][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.117097][ T137] f2fs_write_data_pages+0x2975/0x35e0 [ 289.117122][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.117182][ T137] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 289.117204][ T137] ? cfg80211_inform_single_bss_data+0x13c6/0x1b70 [ 289.117241][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.117262][ T137] ? __lock_acquire+0x6b5/0x2cf0 [ 289.117325][ T137] ? unwind_next_frame+0xa5/0x23c0 [ 289.117371][ T137] ? unwind_next_frame+0xa5/0x23c0 [ 289.117400][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.117442][ T137] ? unwind_next_frame+0xa5/0x23c0 [ 289.117470][ T137] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 289.117495][ T137] do_writepages+0x32e/0x550 [ 289.117524][ T137] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 289.117549][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.117570][ T137] ? reacquire_held_locks+0x104/0x190 [ 289.117597][ T137] ? writeback_sb_inodes+0x477/0x1a20 [ 289.117630][ T137] __writeback_single_inode+0x133/0x11a0 [ 289.117660][ T137] ? do_raw_spin_unlock+0xf5/0x210 [ 289.117685][ T137] writeback_sb_inodes+0x992/0x1a20 [ 289.117719][ T137] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 289.117759][ T137] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 289.117782][ T137] ? do_raw_spin_lock+0x12b/0x2f0 [ 289.117844][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.117865][ T137] ? rcu_is_watching+0x15/0xb0 [ 289.117896][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.117927][ T137] wb_writeback+0x456/0xb70 [ 289.117956][ T137] ? queue_io+0x241/0x4a0 [ 289.117991][ T137] ? __pfx_wb_writeback+0x10/0x10 [ 289.118013][ T137] ? do_raw_spin_lock+0x12b/0x2f0 [ 289.118050][ T137] wb_workfn+0x414/0xf50 [ 289.118074][ T137] ? look_up_lock_class+0x57/0x110 [ 289.118108][ T137] ? __pfx_wb_workfn+0x10/0x10 [ 289.118133][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.118154][ T137] ? do_raw_spin_lock+0x12b/0x2f0 [ 289.118177][ T137] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 289.118196][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.118224][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.118249][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.118273][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.118297][ T137] ? process_scheduled_works+0xa25/0x1830 [ 289.118323][ T137] ? process_scheduled_works+0xa25/0x1830 [ 289.118360][ T137] process_scheduled_works+0xb02/0x1830 [ 289.118430][ T137] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.118462][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.118484][ T137] ? assign_work+0x3d5/0x5e0 [ 289.118514][ T137] worker_thread+0xa50/0xfc0 [ 289.118559][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.118591][ T137] kthread+0x388/0x470 [ 289.118610][ T137] ? __pfx_worker_thread+0x10/0x10 [ 289.118634][ T137] ? __pfx_kthread+0x10/0x10 [ 289.118654][ T137] ret_from_fork+0x51e/0xb90 [ 289.118683][ T137] ? __pfx_ret_from_fork+0x10/0x10 [ 289.118705][ T137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.118727][ T137] ? __switch_to+0xc7d/0x1450 [ 289.118753][ T137] ? __pfx_kthread+0x10/0x10 [ 289.118773][ T137] ret_from_fork_asm+0x1a/0x30 [ 289.118820][ T137] [ 289.237698][ T7116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.395487][ T137] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 290.450382][ T7260] syzkaller0: entered promiscuous mode [ 290.470433][ T7260] syzkaller0: entered allmulticast mode [ 291.109245][ T7116] veth0_vlan: entered promiscuous mode [ 291.141359][ T7116] veth1_vlan: entered promiscuous mode [ 291.227835][ T7116] veth0_macvtap: entered promiscuous mode [ 291.265611][ T7116] veth1_macvtap: entered promiscuous mode [ 291.312283][ T7116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.342059][ T7116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.539297][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.549128][ T6323] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.653239][ T6323] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.991919][ T6323] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.587213][ T7285] nfs: Unknown parameter 'ac' [ 293.892103][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.902547][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.797726][ T6323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.838092][ T6323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.390744][ T7301] loop1: detected capacity change from 0 to 40427 [ 296.420078][ T7301] F2FS-fs (loop1): invalid crc value [ 296.484351][ T7301] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 296.495665][ T7301] F2FS-fs (loop1): Start checkpoint disabled! [ 296.504087][ T7301] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 296.511927][ T7301] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 296.539515][ T30] audit: type=1800 audit(1772600043.040:22): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.322" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 296.715455][ T30] audit: type=1800 audit(1772600043.120:23): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.322" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 299.687825][ T13] kworker/u8:1: attempt to access beyond end of device [ 299.687825][ T13] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 299.824000][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.824040][ T13] Tainted: [L]=SOFTLOCKUP [ 299.824049][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.824065][ T13] Workqueue: writeback wb_workfn (flush-7:1) [ 299.824106][ T13] Call Trace: [ 299.824117][ T13] [ 299.824127][ T13] dump_stack_lvl+0xe8/0x150 [ 299.824173][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 299.824210][ T13] f2fs_write_end_io+0xcdb/0xff0 [ 299.824263][ T13] __submit_merged_bio+0x256/0x700 [ 299.824298][ T13] __submit_merged_write_cond+0x3c9/0x4e0 [ 299.824335][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 299.824378][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.824417][ T13] f2fs_write_data_pages+0x2975/0x35e0 [ 299.824448][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.824517][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 299.824564][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 299.824638][ T13] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 299.824691][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.824720][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 299.824767][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.824801][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 299.824834][ T13] do_writepages+0x32e/0x550 [ 299.824878][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.824906][ T13] ? reacquire_held_locks+0x104/0x190 [ 299.824942][ T13] ? writeback_sb_inodes+0x477/0x1a20 [ 299.824981][ T13] __writeback_single_inode+0x133/0x11a0 [ 299.825020][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 299.825051][ T13] writeback_sb_inodes+0x992/0x1a20 [ 299.825117][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 299.825148][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.825224][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.825253][ T13] ? rcu_is_watching+0x15/0xb0 [ 299.825288][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.825327][ T13] wb_writeback+0x456/0xb70 [ 299.825363][ T13] ? queue_io+0x241/0x4a0 [ 299.825405][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 299.825435][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.825479][ T13] wb_workfn+0x414/0xf50 [ 299.825508][ T13] ? look_up_lock_class+0x57/0x110 [ 299.825549][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 299.825579][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.825607][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.825636][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.825661][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.825697][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.825729][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.825760][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.825792][ T13] ? process_scheduled_works+0xa25/0x1830 [ 299.825824][ T13] ? process_scheduled_works+0xa25/0x1830 [ 299.825859][ T13] process_scheduled_works+0xb02/0x1830 [ 299.825924][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 299.825963][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.825992][ T13] ? assign_work+0x3d5/0x5e0 [ 299.826031][ T13] worker_thread+0xa50/0xfc0 [ 299.826084][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.826124][ T13] kthread+0x388/0x470 [ 299.826148][ T13] ? __pfx_worker_thread+0x10/0x10 [ 299.826185][ T13] ? __pfx_kthread+0x10/0x10 [ 299.826211][ T13] ret_from_fork+0x51e/0xb90 [ 299.826248][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 299.826278][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.826307][ T13] ? __switch_to+0xc7d/0x1450 [ 299.826340][ T13] ? __pfx_kthread+0x10/0x10 [ 299.826369][ T13] ret_from_fork_asm+0x1a/0x30 [ 299.826426][ T13] [ 300.186790][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 303.799746][ T7344] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 303.811020][ T7344] block device autoloading is deprecated and will be removed. [ 307.767400][ T7371] loop3: detected capacity change from 0 to 40427 [ 307.801606][ T7371] F2FS-fs (loop3): invalid crc value [ 307.876694][ T7371] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 307.895529][ T7371] F2FS-fs (loop3): Start checkpoint disabled! [ 307.908757][ T7371] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 307.918906][ T7371] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 308.342747][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 309.013351][ T30] audit: type=1800 audit(1772600055.520:24): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.340" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 310.352738][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 310.998467][ T5910] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 311.180228][ T5910] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.239049][ T5910] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 209, using maximum allowed: 30 [ 311.314477][ T36] kworker/u8:2: attempt to access beyond end of device [ 311.314477][ T36] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 311.368683][ T5910] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 209 [ 311.422083][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.422123][ T36] Tainted: [L]=SOFTLOCKUP [ 311.422131][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.422147][ T36] Workqueue: writeback wb_workfn (flush-7:3) [ 311.422186][ T36] Call Trace: [ 311.422196][ T36] [ 311.422206][ T36] dump_stack_lvl+0xe8/0x150 [ 311.422246][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 311.422283][ T36] f2fs_write_end_io+0xcdb/0xff0 [ 311.422340][ T36] __submit_merged_bio+0x256/0x700 [ 311.422377][ T36] __submit_merged_write_cond+0x3c9/0x4e0 [ 311.422416][ T36] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 311.422457][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.422499][ T36] f2fs_write_data_pages+0x2975/0x35e0 [ 311.422574][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 311.422624][ T36] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 311.422701][ T36] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 311.422763][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.422793][ T36] ? __lock_acquire+0x6b5/0x2cf0 [ 311.422842][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.422876][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 311.422915][ T36] do_writepages+0x32e/0x550 [ 311.422959][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.422989][ T36] ? reacquire_held_locks+0x104/0x190 [ 311.423026][ T36] ? writeback_sb_inodes+0x477/0x1a20 [ 311.423068][ T36] __writeback_single_inode+0x133/0x11a0 [ 311.423105][ T36] ? do_raw_spin_unlock+0xf5/0x210 [ 311.423137][ T36] writeback_sb_inodes+0x992/0x1a20 [ 311.423195][ T36] ? do_raw_spin_unlock+0xf5/0x210 [ 311.423231][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 311.423264][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.423331][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.423359][ T36] ? rcu_is_watching+0x15/0xb0 [ 311.423393][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.423432][ T36] wb_writeback+0x456/0xb70 [ 311.423468][ T36] ? queue_io+0x241/0x4a0 [ 311.423509][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 311.423538][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.423581][ T36] wb_workfn+0x414/0xf50 [ 311.423611][ T36] ? look_up_lock_class+0x57/0x110 [ 311.423651][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 311.423681][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.423709][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.423738][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.423763][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.423798][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.423830][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.423860][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.423917][ T36] ? process_scheduled_works+0xa25/0x1830 [ 311.423949][ T36] ? process_scheduled_works+0xa25/0x1830 [ 311.423984][ T36] process_scheduled_works+0xb02/0x1830 [ 311.424048][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 311.424086][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.424115][ T36] ? assign_work+0x3d5/0x5e0 [ 311.424151][ T36] worker_thread+0xa50/0xfc0 [ 311.424186][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.424232][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.424271][ T36] kthread+0x388/0x470 [ 311.424296][ T36] ? __pfx_worker_thread+0x10/0x10 [ 311.424327][ T36] ? __pfx_kthread+0x10/0x10 [ 311.424353][ T36] ret_from_fork+0x51e/0xb90 [ 311.424389][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 311.424419][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.424447][ T36] ? __switch_to+0xc7d/0x1450 [ 311.424480][ T36] ? __pfx_kthread+0x10/0x10 [ 311.424506][ T36] ret_from_fork_asm+0x1a/0x30 [ 311.424562][ T36] [ 311.793315][ T5910] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 311.838533][ T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 312.056596][ T5910] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.088784][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.284889][ T5910] usb 3-1: Product: syz [ 312.312446][ T5910] usb 3-1: Manufacturer: syz [ 312.317199][ T5910] usb 3-1: SerialNumber: syz [ 312.371248][ T5910] cdc_mbim 3-1:1.0: skipping garbage [ 312.573406][ T7401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.879641][ T7432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.959405][ T5910] cdc_mbim 3-1:1.0: dwNtbInMaxSize=64 is too small. Using 2048 [ 313.967016][ T5910] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 314.190990][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.264893][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.358585][ T5910] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 314.445974][ T5910] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 314.558842][ T5910] wwan wwan0: port wwan0mbim0 attached [ 314.676203][ T5910] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, aa:97:78:b7:80:06 [ 315.173433][ T5910] usb 3-1: USB disconnect, device number 2 [ 315.199570][ T5910] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 315.413053][ T5910] wwan wwan0: port wwan0mbim0 disconnected [ 315.757661][ T7448] loop2: detected capacity change from 0 to 256 [ 316.492609][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.760392][ T7477] loop4: detected capacity change from 0 to 40427 [ 319.795674][ T7477] F2FS-fs (loop4): invalid crc value [ 319.923320][ T7477] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 319.933057][ T7477] F2FS-fs (loop4): Start checkpoint disabled! [ 319.943480][ T7477] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 319.965821][ T7477] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 320.056060][ T30] audit: type=1800 audit(1772600066.560:25): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.360" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 320.970966][ T36] kworker/u8:2: attempt to access beyond end of device [ 320.970966][ T36] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 321.038681][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.038720][ T36] Tainted: [L]=SOFTLOCKUP [ 321.038728][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.038743][ T36] Workqueue: writeback wb_workfn (flush-7:4) [ 321.038782][ T36] Call Trace: [ 321.038791][ T36] [ 321.038801][ T36] dump_stack_lvl+0xe8/0x150 [ 321.038838][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 321.038873][ T36] f2fs_write_end_io+0xcdb/0xff0 [ 321.038926][ T36] __submit_merged_bio+0x256/0x700 [ 321.038961][ T36] __submit_merged_write_cond+0x3c9/0x4e0 [ 321.038997][ T36] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 321.039039][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.039078][ T36] f2fs_write_data_pages+0x2975/0x35e0 [ 321.039109][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.039176][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 321.039222][ T36] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 321.039306][ T36] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 321.039360][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.039388][ T36] ? __lock_acquire+0x6b5/0x2cf0 [ 321.039435][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.039467][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 321.039500][ T36] do_writepages+0x32e/0x550 [ 321.039543][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.039572][ T36] ? reacquire_held_locks+0x104/0x190 [ 321.039608][ T36] ? writeback_sb_inodes+0x477/0x1a20 [ 321.039648][ T36] __writeback_single_inode+0x133/0x11a0 [ 321.039684][ T36] ? do_raw_spin_unlock+0xf5/0x210 [ 321.039715][ T36] writeback_sb_inodes+0x992/0x1a20 [ 321.039780][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 321.039810][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 321.039879][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.039907][ T36] ? rcu_is_watching+0x15/0xb0 [ 321.039942][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.039979][ T36] wb_writeback+0x456/0xb70 [ 321.040016][ T36] ? queue_io+0x241/0x4a0 [ 321.040057][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 321.040087][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 321.040129][ T36] wb_workfn+0x414/0xf50 [ 321.040159][ T36] ? look_up_lock_class+0x57/0x110 [ 321.040198][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 321.040224][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.040337][ T36] ? irqentry_exit+0x59e/0x620 [ 321.040359][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.040385][ T36] ? lockdep_hardirqs_on+0x7a/0x110 [ 321.040404][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.040430][ T36] ? irqentry_exit+0x59e/0x620 [ 321.040448][ T36] ? trace_irq_disable+0x3b/0x150 [ 321.040491][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.040520][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.040558][ T36] ? process_scheduled_works+0xa25/0x1830 [ 321.040587][ T36] ? process_scheduled_works+0xa25/0x1830 [ 321.040618][ T36] process_scheduled_works+0xb02/0x1830 [ 321.040677][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 321.040712][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.040738][ T36] ? assign_work+0x3d5/0x5e0 [ 321.040772][ T36] worker_thread+0xa50/0xfc0 [ 321.040804][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.040845][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.040881][ T36] kthread+0x388/0x470 [ 321.040902][ T36] ? __pfx_worker_thread+0x10/0x10 [ 321.040930][ T36] ? __pfx_kthread+0x10/0x10 [ 321.040952][ T36] ret_from_fork+0x51e/0xb90 [ 321.040985][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 321.041013][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.041044][ T36] ? __switch_to+0xc7d/0x1450 [ 321.041072][ T36] ? __pfx_kthread+0x10/0x10 [ 321.041095][ T36] ret_from_fork_asm+0x1a/0x30 [ 321.041146][ T36] [ 321.045746][ T36] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 322.340970][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 323.319732][ T6007] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 323.617741][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 324.143131][ T6007] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.260968][ T6007] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 209, using maximum allowed: 30 [ 324.827637][ T6007] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 209 [ 324.877618][ T6007] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 324.987364][ T6007] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.300845][ T7521] loop1: detected capacity change from 0 to 256 [ 325.982926][ T6007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.005582][ T6007] usb 4-1: Product: syz [ 326.174882][ T6007] usb 4-1: Manufacturer: syz [ 326.228962][ T6007] usb 4-1: SerialNumber: syz [ 326.292366][ T6007] usb 4-1: can't set config #1, error -71 [ 327.149998][ T6007] usb 4-1: USB disconnect, device number 3 [ 329.106995][ T7546] loop4: detected capacity change from 0 to 40427 [ 329.131125][ T7546] F2FS-fs (loop4): invalid crc value [ 329.194063][ T7546] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 329.204041][ T7546] F2FS-fs (loop4): Start checkpoint disabled! [ 329.214199][ T7546] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 329.222083][ T7546] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 329.365377][ T30] audit: type=1800 audit(1772600075.870:26): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.376" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 329.569268][ T7556] syz.4.376: attempt to access beyond end of device [ 329.569268][ T7556] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 332.622529][ T1141] kworker/u8:8: attempt to access beyond end of device [ 332.622529][ T1141] loop4: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 332.802894][ T1141] kworker/u8:8: attempt to access beyond end of device [ 332.802894][ T1141] loop4: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 333.317237][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.379'. [ 333.318287][ T7566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.873408][ T7566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.384323][ T1141] kworker/u8:8: attempt to access beyond end of device [ 334.384323][ T1141] loop4: rw=1, sector=57344, nr_sectors = 14968 limit=40427 [ 335.209332][ T1141] kworker/u8:8: attempt to access beyond end of device [ 335.209332][ T1141] loop4: rw=1, sector=72312, nr_sectors = 1416 limit=40427 [ 335.301413][ T1141] kworker/u8:8: attempt to access beyond end of device [ 335.301413][ T1141] loop4: rw=1, sector=73728, nr_sectors = 8 limit=40427 [ 335.379347][ T1141] kworker/u8:8: attempt to access beyond end of device [ 335.379347][ T1141] loop4: rw=1, sector=73736, nr_sectors = 8 limit=40427 [ 335.470074][ T1141] kworker/u8:8: attempt to access beyond end of device [ 335.470074][ T1141] loop4: rw=1, sector=73744, nr_sectors = 8 limit=40427 [ 335.498896][ T1141] kworker/u8:8: attempt to access beyond end of device [ 335.498896][ T1141] loop4: rw=1, sector=73752, nr_sectors = 8 limit=40427 [ 335.570195][ T1141] kworker/u8:8: attempt to access beyond end of device [ 335.570195][ T1141] loop4: rw=1, sector=73760, nr_sectors = 8 limit=40427 [ 335.618638][ T1141] kworker/u8:8: attempt to access beyond end of device [ 335.618638][ T1141] loop4: rw=1, sector=73768, nr_sectors = 8 limit=40427 [ 335.658813][ T1141] kworker/u8:8: attempt to access beyond end of device [ 335.658813][ T1141] loop4: rw=1, sector=73776, nr_sectors = 8 limit=40427 [ 335.713738][ T1141] kworker/u8:8: attempt to access beyond end of device [ 335.713738][ T1141] loop4: rw=1, sector=73784, nr_sectors = 8 limit=40427 [ 335.718519][ T5825] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 335.738935][ T1141] kworker/u8:8: attempt to access beyond end of device [ 335.738935][ T1141] loop4: rw=1, sector=73792, nr_sectors = 8 limit=40427 [ 336.054412][ T5825] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.065863][ T5825] usb 7-1: too many endpoints for config 1 interface 1 altsetting 0: 209, using maximum allowed: 30 [ 336.128195][ T5825] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 209 [ 336.168759][ T5825] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 336.208850][ T5825] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.226589][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.257494][ T5825] usb 7-1: Product: syz [ 336.273261][ T5825] usb 7-1: Manufacturer: syz [ 337.171084][ T5825] usb 7-1: SerialNumber: syz [ 337.393580][ T5825] cdc_mbim 7-1:1.0: skipping garbage [ 337.724768][ T7573] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 339.996498][ T1141] CPU: 1 UID: 0 PID: 1141 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.996526][ T1141] Tainted: [L]=SOFTLOCKUP [ 339.996533][ T1141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.996545][ T1141] Workqueue: writeback wb_workfn (flush-7:4) [ 339.996574][ T1141] Call Trace: [ 339.996581][ T1141] [ 339.996589][ T1141] dump_stack_lvl+0xe8/0x150 [ 339.996619][ T1141] f2fs_handle_critical_error+0x37c/0x540 [ 339.996648][ T1141] f2fs_write_end_io+0xcdb/0xff0 [ 339.996693][ T1141] __submit_merged_bio+0x256/0x700 [ 339.996714][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.996736][ T1141] ? _raw_spin_unlock+0x28/0x50 [ 339.996768][ T1141] f2fs_submit_page_write+0x2260/0x23e0 [ 339.996820][ T1141] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 339.996846][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.996867][ T1141] ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0 [ 339.996899][ T1141] do_write_page+0x40f/0xac0 [ 339.996935][ T1141] f2fs_outplace_write_data+0x11a/0x220 [ 339.996974][ T1141] f2fs_do_write_data_page+0x123b/0x16f0 [ 339.997012][ T1141] ? __pfx_f2fs_do_write_data_page+0x10/0x10 [ 339.997042][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.997086][ T1141] f2fs_write_single_data_page+0x976/0x18b0 [ 339.997128][ T1141] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 339.997187][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.997208][ T1141] ? folio_clear_dirty_for_io+0x573/0x710 [ 339.997240][ T1141] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 339.997271][ T1141] f2fs_write_data_pages+0x1a5b/0x35e0 [ 339.997335][ T1141] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 339.997437][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.997459][ T1141] ? __lock_acquire+0x6b5/0x2cf0 [ 339.997503][ T1141] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 339.997529][ T1141] do_writepages+0x32e/0x550 [ 339.997563][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.997585][ T1141] ? reacquire_held_locks+0x104/0x190 [ 339.997612][ T1141] ? writeback_sb_inodes+0x477/0x1a20 [ 339.997645][ T1141] __writeback_single_inode+0x133/0x11a0 [ 339.997672][ T1141] ? do_raw_spin_unlock+0xf5/0x210 [ 339.997697][ T1141] writeback_sb_inodes+0x992/0x1a20 [ 339.997753][ T1141] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 339.997777][ T1141] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.997838][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.997859][ T1141] ? rcu_is_watching+0x15/0xb0 [ 339.997886][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.997917][ T1141] wb_writeback+0x456/0xb70 [ 339.997946][ T1141] ? queue_io+0x241/0x4a0 [ 339.997987][ T1141] ? __pfx_wb_writeback+0x10/0x10 [ 339.998009][ T1141] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.998046][ T1141] wb_workfn+0x414/0xf50 [ 339.998070][ T1141] ? look_up_lock_class+0x57/0x110 [ 339.998104][ T1141] ? __pfx_wb_workfn+0x10/0x10 [ 339.998128][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.998151][ T1141] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.998181][ T1141] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.998208][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.998245][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.998281][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.998304][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.998334][ T1141] ? process_scheduled_works+0xa25/0x1830 [ 339.998366][ T1141] ? process_scheduled_works+0xa25/0x1830 [ 339.998400][ T1141] process_scheduled_works+0xb02/0x1830 [ 339.998465][ T1141] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.998497][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.998518][ T1141] ? assign_work+0x3d5/0x5e0 [ 339.998549][ T1141] worker_thread+0xa50/0xfc0 [ 339.998602][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.998634][ T1141] kthread+0x388/0x470 [ 339.998653][ T1141] ? __pfx_worker_thread+0x10/0x10 [ 339.998677][ T1141] ? __pfx_kthread+0x10/0x10 [ 339.998697][ T1141] ret_from_fork+0x51e/0xb90 [ 339.998726][ T1141] ? __pfx_ret_from_fork+0x10/0x10 [ 339.998749][ T1141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.998770][ T1141] ? __switch_to+0xc7d/0x1450 [ 339.998797][ T1141] ? __pfx_kthread+0x10/0x10 [ 339.998817][ T1141] ret_from_fork_asm+0x1a/0x30 [ 339.998864][ T1141] [ 340.347040][ T7594] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 340.429842][ T1141] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 340.884510][ T5825] cdc_mbim 7-1:1.0: bind() failure [ 340.951081][ T5825] usb 7-1: USB disconnect, device number 2 [ 350.002066][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 350.002912][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.694644][ T7661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.991332][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.409'. [ 357.834108][ T7701] netlink: 'syz.4.413': attribute type 4 has an invalid length. [ 358.788553][ T7722] loop4: detected capacity change from 0 to 64 [ 359.340135][ T30] audit: type=1800 audit(1772600105.860:27): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.418" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 359.341452][ T7729] hfs: keylen 1794 too large [ 359.661240][ T7729] hfs: keylen 1794 too large [ 365.369612][ T7774] netlink: 'syz.3.430': attribute type 4 has an invalid length. [ 367.371289][ T6007] IPVS: starting estimator thread 0... [ 367.458475][ T7784] IPVS: using max 29 ests per chain, 69600 per kthread [ 370.405327][ T7810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.487006][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.502139][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.915798][ T7838] netlink: 'syz.6.446': attribute type 4 has an invalid length. [ 375.209882][ T29] IPVS: starting estimator thread 0... [ 375.328833][ T7842] IPVS: using max 26 ests per chain, 62400 per kthread [ 377.898010][ T7862] loop5: detected capacity change from 0 to 40427 [ 377.979244][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.004616][ T7862] F2FS-fs (loop5): invalid crc value [ 378.066290][ T7862] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 378.077462][ T7862] F2FS-fs (loop5): Start checkpoint disabled! [ 378.094462][ T7862] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 378.188893][ T7862] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 379.250752][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 380.004487][ T30] audit: type=1800 audit(1772600126.510:28): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.453" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 381.681998][ T996] bio_check_eod: 991 callbacks suppressed [ 381.682020][ T996] kworker/u8:7: attempt to access beyond end of device [ 381.682020][ T996] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 381.830318][ T996] CPU: 1 UID: 0 PID: 996 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.830348][ T996] Tainted: [L]=SOFTLOCKUP [ 381.830355][ T996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.830367][ T996] Workqueue: writeback wb_workfn (flush-7:5) [ 381.830397][ T996] Call Trace: [ 381.830404][ T996] [ 381.830412][ T996] dump_stack_lvl+0xe8/0x150 [ 381.830441][ T996] f2fs_handle_critical_error+0x37c/0x540 [ 381.830467][ T996] f2fs_write_end_io+0xcdb/0xff0 [ 381.830507][ T996] __submit_merged_bio+0x256/0x700 [ 381.830534][ T996] __submit_merged_write_cond+0x3c9/0x4e0 [ 381.830561][ T996] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 381.830592][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.830622][ T996] f2fs_write_data_pages+0x2975/0x35e0 [ 381.830645][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.830696][ T996] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 381.830731][ T996] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 381.830786][ T996] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 381.830825][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.830847][ T996] ? __lock_acquire+0x6b5/0x2cf0 [ 381.830882][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.830907][ T996] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 381.830931][ T996] do_writepages+0x32e/0x550 [ 381.830964][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.830985][ T996] ? reacquire_held_locks+0x104/0x190 [ 381.831013][ T996] ? writeback_sb_inodes+0x477/0x1a20 [ 381.831043][ T996] __writeback_single_inode+0x133/0x11a0 [ 381.831070][ T996] ? do_raw_spin_unlock+0xf5/0x210 [ 381.831100][ T996] writeback_sb_inodes+0x992/0x1a20 [ 381.831142][ T996] ? do_raw_spin_unlock+0xf5/0x210 [ 381.831166][ T996] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 381.831189][ T996] ? do_raw_spin_lock+0x12b/0x2f0 [ 381.831241][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.831262][ T996] ? rcu_is_watching+0x15/0xb0 [ 381.831289][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.831317][ T996] wb_writeback+0x456/0xb70 [ 381.831345][ T996] ? queue_io+0x241/0x4a0 [ 381.831376][ T996] ? __pfx_wb_writeback+0x10/0x10 [ 381.831398][ T996] ? do_raw_spin_lock+0x12b/0x2f0 [ 381.831430][ T996] wb_workfn+0x414/0xf50 [ 381.831453][ T996] ? look_up_lock_class+0x57/0x110 [ 381.831483][ T996] ? __pfx_wb_workfn+0x10/0x10 [ 381.831505][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.831526][ T996] ? do_raw_spin_lock+0x12b/0x2f0 [ 381.831547][ T996] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 381.831566][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.831593][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.831616][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.831639][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.831663][ T996] ? process_scheduled_works+0xa25/0x1830 [ 381.831687][ T996] ? process_scheduled_works+0xa25/0x1830 [ 381.831713][ T996] process_scheduled_works+0xb02/0x1830 [ 381.831761][ T996] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.831790][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.831811][ T996] ? assign_work+0x3d5/0x5e0 [ 381.831840][ T996] worker_thread+0xa50/0xfc0 [ 381.831880][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.831909][ T996] kthread+0x388/0x470 [ 381.831927][ T996] ? __pfx_worker_thread+0x10/0x10 [ 381.831951][ T996] ? __pfx_kthread+0x10/0x10 [ 381.831970][ T996] ret_from_fork+0x51e/0xb90 [ 381.831997][ T996] ? __pfx_ret_from_fork+0x10/0x10 [ 381.832020][ T996] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.832041][ T996] ? __switch_to+0xc7d/0x1450 [ 381.832065][ T996] ? __pfx_kthread+0x10/0x10 [ 381.832089][ T996] ret_from_fork_asm+0x1a/0x30 [ 381.832132][ T996] [ 381.832139][ T996] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 388.996671][ T7938] loop1: detected capacity change from 0 to 40427 [ 389.041340][ T7938] F2FS-fs (loop1): invalid crc value [ 389.123235][ T7938] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 389.136471][ T7938] F2FS-fs (loop1): Start checkpoint disabled! [ 389.146316][ T7938] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 389.155047][ T7938] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 389.255413][ T30] audit: type=1800 audit(1772600135.760:29): pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.476" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 389.998806][ T6650] kworker/u8:11: attempt to access beyond end of device [ 389.998806][ T6650] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 390.046293][ T6650] CPU: 0 UID: 0 PID: 6650 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.046339][ T6650] Tainted: [L]=SOFTLOCKUP [ 390.046348][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.046364][ T6650] Workqueue: writeback wb_workfn (flush-7:1) [ 390.046403][ T6650] Call Trace: [ 390.046413][ T6650] [ 390.046423][ T6650] dump_stack_lvl+0xe8/0x150 [ 390.046461][ T6650] f2fs_handle_critical_error+0x37c/0x540 [ 390.046497][ T6650] f2fs_write_end_io+0xcdb/0xff0 [ 390.046550][ T6650] __submit_merged_bio+0x256/0x700 [ 390.046584][ T6650] __submit_merged_write_cond+0x3c9/0x4e0 [ 390.046621][ T6650] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 390.046663][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.046703][ T6650] f2fs_write_data_pages+0x2975/0x35e0 [ 390.046734][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.046802][ T6650] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 390.046849][ T6650] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 390.046923][ T6650] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 390.046977][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.047006][ T6650] ? __lock_acquire+0x6b5/0x2cf0 [ 390.047052][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.047085][ T6650] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 390.047118][ T6650] do_writepages+0x32e/0x550 [ 390.047162][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.047190][ T6650] ? reacquire_held_locks+0x104/0x190 [ 390.047226][ T6650] ? writeback_sb_inodes+0x477/0x1a20 [ 390.047267][ T6650] __writeback_single_inode+0x133/0x11a0 [ 390.047303][ T6650] ? do_raw_spin_unlock+0xf5/0x210 [ 390.047344][ T6650] writeback_sb_inodes+0x992/0x1a20 [ 390.047403][ T6650] ? __lock_acquire+0x6b5/0x2cf0 [ 390.047442][ T6650] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 390.047473][ T6650] ? do_raw_spin_lock+0x12b/0x2f0 [ 390.047542][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.047571][ T6650] ? rcu_is_watching+0x15/0xb0 [ 390.047606][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.047650][ T6650] wb_writeback+0x456/0xb70 [ 390.047689][ T6650] ? queue_io+0x241/0x4a0 [ 390.047731][ T6650] ? __pfx_wb_writeback+0x10/0x10 [ 390.047762][ T6650] ? do_raw_spin_lock+0x12b/0x2f0 [ 390.047805][ T6650] wb_workfn+0x414/0xf50 [ 390.047835][ T6650] ? look_up_lock_class+0x57/0x110 [ 390.047876][ T6650] ? __pfx_wb_workfn+0x10/0x10 [ 390.047900][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.047931][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.047964][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.047993][ T6650] ? do_raw_spin_unlock+0xf5/0x210 [ 390.048021][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.048049][ T6650] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 390.048091][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.048124][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.048155][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.048186][ T6650] ? process_scheduled_works+0xa25/0x1830 [ 390.048219][ T6650] ? process_scheduled_works+0xa25/0x1830 [ 390.048253][ T6650] process_scheduled_works+0xb02/0x1830 [ 390.048326][ T6650] ? __pfx_process_scheduled_works+0x10/0x10 [ 390.048367][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.048396][ T6650] ? assign_work+0x3d5/0x5e0 [ 390.048435][ T6650] worker_thread+0xa50/0xfc0 [ 390.048473][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.048511][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.048541][ T6650] kthread+0x388/0x470 [ 390.048560][ T6650] ? __pfx_worker_thread+0x10/0x10 [ 390.048583][ T6650] ? __pfx_kthread+0x10/0x10 [ 390.048602][ T6650] ret_from_fork+0x51e/0xb90 [ 390.048630][ T6650] ? __pfx_ret_from_fork+0x10/0x10 [ 390.048653][ T6650] ? srso_alias_return_thunk+0x5/0xfbef5 [ 390.048674][ T6650] ? __switch_to+0xc7d/0x1450 [ 390.048699][ T6650] ? __pfx_kthread+0x10/0x10 [ 390.048718][ T6650] ret_from_fork_asm+0x1a/0x30 [ 390.048761][ T6650] [ 390.828448][ T6650] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 392.478144][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 406.847469][ T8050] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 407.181557][ T8062] Bluetooth: MGMT ver 1.23 [ 411.738118][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.509'. [ 416.428816][ T8107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.075294][ T8119] loop6: detected capacity change from 0 to 64 [ 417.398101][ T8121] hfs: keylen 1794 too large [ 417.409080][ T30] audit: type=1800 audit(1772600163.900:30): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.519" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 417.675072][ T8121] hfs: keylen 1794 too large [ 424.375996][ T8165] loop6: detected capacity change from 0 to 256 [ 425.054839][ T8167] loop2: detected capacity change from 0 to 64 [ 425.674741][ T8171] hfs: keylen 1794 too large [ 425.680006][ T30] audit: type=1800 audit(1772600172.180:31): pid=8171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.532" name="file1" dev="loop2" ino=22 res=0 errno=0 [ 425.770346][ T8171] hfs: keylen 1794 too large [ 431.221685][ T5136] Bluetooth: hci6: command 0x0406 tx timeout [ 432.542288][ T8214] loop6: detected capacity change from 0 to 64 [ 433.312093][ T8221] hfs: keylen 1794 too large [ 433.322385][ T30] audit: type=1800 audit(1772600179.760:32): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.546" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 433.447765][ T8222] hfs: keylen 1794 too large [ 436.957755][ T8251] nfs: Unknown parameter '' [ 439.417474][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.206293][ T8300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.480466][ T8350] loop3: detected capacity change from 0 to 64 [ 448.842724][ T30] audit: type=1800 audit(1772600195.350:33): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.574" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 448.865109][ T8355] hfs: keylen 1794 too large [ 448.876453][ T8355] hfs: keylen 1794 too large [ 451.444102][ T8367] nfs: Unknown parameter '' [ 452.193162][ T8378] loop6: detected capacity change from 0 to 256 [ 458.689840][ T8442] overlayfs: missing 'lowerdir' [ 461.398561][ T8456] nfs: Unknown parameter '' [ 466.692291][ T8496] loop6: detected capacity change from 0 to 64 [ 467.038270][ T8496] hfs: keylen 1794 too large [ 467.041757][ T30] audit: type=1800 audit(1772600213.540:34): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.608" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 468.612717][ T8517] nfs: Unknown parameter '' [ 485.538492][ T5831] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 485.548096][ T5831] Bluetooth: hci2: Injecting HCI hardware error event [ 485.556775][ T5831] Bluetooth: hci2: hardware error 0x00 [ 487.848600][ T5831] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 488.544475][ T8646] netlink: 44 bytes leftover after parsing attributes in process `syz.3.644'. [ 494.388917][ T5956] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 494.558560][ T5956] usb 6-1: Using ep0 maxpacket: 32 [ 494.783855][ T5956] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.923489][ T5956] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.975723][ T5956] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 495.046793][ T8678] nfs: Unknown parameter 'ac' [ 495.428479][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.579801][ T5956] usb 6-1: config 0 descriptor?? [ 497.504003][ T5910] usb 6-1: USB disconnect, device number 2 [ 498.322162][ T5136] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 498.550465][ T5136] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 498.568677][ T5136] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 498.773279][ T5136] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 498.790601][ T5136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 500.958910][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.708514][ T5136] Bluetooth: hci4: command tx timeout [ 503.780320][ T5136] Bluetooth: hci4: command tx timeout [ 504.265973][ T8696] chnl_net:caif_netlink_parms(): no params data found [ 505.618844][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.683115][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.713957][ T8696] bridge_slave_0: entered allmulticast mode [ 505.758645][ T8696] bridge_slave_0: entered promiscuous mode [ 505.848668][ T5136] Bluetooth: hci4: command tx timeout [ 505.855316][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.895543][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.918742][ T8696] bridge_slave_1: entered allmulticast mode [ 505.926892][ T8696] bridge_slave_1: entered promiscuous mode [ 506.104510][ T8756] nfs: Unknown parameter 'ac' [ 507.906344][ T8696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.934969][ T5136] Bluetooth: hci4: command tx timeout [ 508.942999][ T8696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.079782][ T8696] team0: Port device team_slave_0 added [ 510.550745][ T8696] team0: Port device team_slave_1 added [ 512.534690][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.574180][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.658918][ T8696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.479593][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.972640][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.043913][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.207366][ T8696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.575792][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.369054][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.282480][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.443506][ T8696] hsr_slave_0: entered promiscuous mode [ 517.521270][ T8696] hsr_slave_1: entered promiscuous mode [ 517.549675][ T8696] debugfs: 'hsr0' already exists in 'hsr' [ 517.570363][ T8696] Cannot create hsr debugfs directory [ 518.558872][ T13] bridge_slave_1: left allmulticast mode [ 518.564648][ T13] bridge_slave_1: left promiscuous mode [ 518.640202][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.306485][ T13] bridge_slave_0: left allmulticast mode [ 519.348389][ T13] bridge_slave_0: left promiscuous mode [ 519.372263][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.715493][ T8855] loop6: detected capacity change from 0 to 64 [ 522.316463][ T8857] hfs: keylen 1794 too large [ 522.358537][ T30] audit: type=1800 audit(1772600268.810:35): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.695" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 525.149319][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.268975][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.388534][ T13] bond0 (unregistering): Released all slaves [ 525.564909][ T8870] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.574646][ T8870] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.682674][ T8885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 529.866600][ T8909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 530.679802][ T8696] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 530.781542][ T8696] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 530.854546][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.863395][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.934761][ T8696] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 531.625145][ T13] hsr_slave_0: left promiscuous mode [ 531.710493][ T8922] loop3: detected capacity change from 0 to 64 [ 532.038603][ T13] hsr_slave_1: left promiscuous mode [ 532.070158][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.229148][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.435141][ T13] veth1_macvtap: left promiscuous mode [ 532.451304][ T13] veth0_macvtap: left promiscuous mode [ 533.251426][ T13] veth1_vlan: left promiscuous mode [ 533.267030][ T13] veth0_vlan: left promiscuous mode [ 533.325849][ T8931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.712'. [ 533.538531][ T8931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.712'. [ 533.626848][ T8935] hfs: keylen 1794 too large [ 533.664785][ T8935] hfs: keylen 1794 too large [ 534.049503][ T30] audit: type=1800 audit(1772600280.120:36): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.708" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 534.097373][ T8931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.712'. [ 534.185475][ T8931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.712'. [ 534.816698][ T8942] netlink: 'syz.3.714': attribute type 6 has an invalid length. [ 535.311725][ T8952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 536.091558][ T13] team0 (unregistering): Port device team_slave_1 removed [ 536.201069][ T13] team0 (unregistering): Port device team_slave_0 removed [ 536.809228][ T8696] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 537.860785][ T8696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.647883][ T8696] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.697374][ T8696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.757231][ T8696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.825966][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.833176][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.122131][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.129370][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.325947][ T13] IPVS: stop unused estimator thread 0... [ 540.090621][ T8696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.544043][ T8696] veth0_vlan: entered promiscuous mode [ 542.758826][ T8696] veth1_vlan: entered promiscuous mode [ 542.794649][ T8696] veth0_macvtap: entered promiscuous mode [ 542.814422][ T8696] veth1_macvtap: entered promiscuous mode [ 543.847211][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 543.862887][ T8696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.905589][ T8696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.960444][ T996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.992050][ T996] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.057854][ T996] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.180973][ T996] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.407585][ T9064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 545.478749][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.507349][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.579077][ T9070] netlink: 'syz.2.736': attribute type 6 has an invalid length. [ 545.723732][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.849677][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.013647][ T9077] netlink: 60 bytes leftover after parsing attributes in process `syz.6.738'. [ 546.118679][ T9082] netlink: 'syz.2.740': attribute type 6 has an invalid length. [ 546.170163][ T9084] [U] M٭Q& K4 [ 547.019362][ T9095] lo: entered allmulticast mode [ 547.082275][ T9095] tunl0: entered allmulticast mode [ 547.132742][ T9095] gre0: entered allmulticast mode [ 547.407877][ T9095] gretap0: entered allmulticast mode [ 547.486566][ T9095] erspan0: entered allmulticast mode [ 548.553672][ T9095] ip_vti0: entered allmulticast mode [ 548.760392][ T9095] ip6_vti0: entered allmulticast mode [ 548.815482][ T9095] sit0: entered allmulticast mode [ 548.914525][ T9095] ip6tnl0: entered allmulticast mode [ 548.950153][ T9095] ip6gre0: entered allmulticast mode [ 549.174847][ T9095] syz_tun: entered allmulticast mode [ 549.565626][ T9095] ip6gretap0: entered allmulticast mode [ 549.638169][ T9095] bridge0: entered allmulticast mode [ 549.773520][ T9095] vcan0: entered allmulticast mode [ 549.859520][ T9095] bond0: entered allmulticast mode [ 549.917124][ T9095] bond_slave_0: entered allmulticast mode [ 549.968432][ T9095] bond_slave_1: entered allmulticast mode [ 550.017823][ T9095] team0: entered allmulticast mode [ 550.033251][ T9095] team_slave_0: entered allmulticast mode [ 550.090348][ T9095] team_slave_1: entered allmulticast mode [ 550.113890][ T9095] dummy0: entered allmulticast mode [ 550.157019][ T9095] nlmon0: entered allmulticast mode [ 550.187981][ T9095] caif0: entered allmulticast mode [ 550.223878][ T9095] batadv0: entered allmulticast mode [ 550.426088][ T9095] vxcan0: entered allmulticast mode [ 550.505035][ T9095] vxcan1: entered allmulticast mode [ 550.549280][ T9095] veth0: entered allmulticast mode [ 550.578816][ T9095] veth1: entered allmulticast mode [ 550.638855][ T9095] wg0: entered allmulticast mode [ 550.718205][ T9095] wg1: entered allmulticast mode [ 550.732003][ T9095] wg2: entered allmulticast mode [ 550.754405][ T9095] veth0_to_bridge: entered allmulticast mode [ 550.861191][ T9095] veth1_to_bridge: entered allmulticast mode [ 550.900592][ T9095] veth0_to_bond: entered allmulticast mode [ 550.925950][ T9095] veth1_to_bond: entered allmulticast mode [ 550.947913][ T9095] veth0_to_team: entered allmulticast mode [ 551.130082][ T9095] veth1_to_team: entered allmulticast mode [ 551.195393][ T9095] veth1_to_batadv: entered allmulticast mode [ 551.346034][ T9095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.585855][ T9095] batadv_slave_1: entered allmulticast mode [ 551.621990][ T9095] xfrm0: entered allmulticast mode [ 551.836960][ T9095] veth0_to_hsr: entered allmulticast mode [ 552.037570][ T9095] hsr_slave_0: entered allmulticast mode [ 552.247023][ T9095] veth1_to_hsr: entered allmulticast mode [ 552.328977][ T9095] hsr_slave_1: entered allmulticast mode [ 552.382012][ T9132] netlink: 60 bytes leftover after parsing attributes in process `syz.6.749'. [ 552.435180][ T9095] hsr0: entered allmulticast mode [ 552.451227][ T9095] veth1_virt_wifi: entered allmulticast mode [ 552.553036][ T9095] veth0_virt_wifi: entered allmulticast mode [ 552.574594][ T9095] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 552.593705][ T9133] [U] M٭Q& K4 [ 552.606482][ T9095] veth1_vlan: entered allmulticast mode [ 552.891786][ T9095] veth0_vlan: entered allmulticast mode [ 552.943757][ T9095] vlan0: entered allmulticast mode [ 552.953762][ T9095] vlan1: entered allmulticast mode [ 552.960228][ T9095] macvlan0: entered allmulticast mode [ 553.093630][ T9095] macvlan1: entered allmulticast mode [ 553.135522][ T9095] ipvlan0: entered allmulticast mode [ 553.159106][ T9095] ipvlan1: entered allmulticast mode [ 553.174579][ T9095] veth1_macvtap: entered allmulticast mode [ 553.297117][ T9095] veth0_macvtap: entered allmulticast mode [ 553.373534][ T9095] macvtap0: entered allmulticast mode [ 553.393605][ T9095] macsec0: entered allmulticast mode [ 553.471516][ T9095] geneve0: entered allmulticast mode [ 553.525262][ T9095] geneve1: entered allmulticast mode [ 553.620582][ T9095] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 553.690844][ T9095] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 553.709730][ T5956] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 553.777910][ T9095] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 553.796123][ T9095] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 553.935654][ T9095] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 553.964714][ T9095] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 553.973205][ T5956] usb 6-1: Using ep0 maxpacket: 16 [ 553.974114][ T9095] syztnl0: entered allmulticast mode [ 553.991744][ T5956] usb 6-1: config 5 has an invalid interface number: 168 but max is 0 [ 554.012052][ T5956] usb 6-1: config 5 has no interface number 0 [ 554.030086][ T5956] usb 6-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 554.078152][ T9125] netlink: 96 bytes leftover after parsing attributes in process `syz.7.748'. [ 554.160339][ T5956] usb 6-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 554.165976][ T7930] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.196123][ T5956] usb 6-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 554.211729][ T7930] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.245583][ T7930] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.257359][ T5956] usb 6-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid maxpacket 1280, setting to 1024 [ 554.287210][ T7930] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.308050][ T5956] usb 6-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 554.344996][ T5956] usb 6-1: config 5 interface 168 has no altsetting 0 [ 554.388871][ T5956] usb 6-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 554.400752][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.444151][ T5956] usb 6-1: Product: syz [ 554.487517][ T5956] usb 6-1: Manufacturer: syz [ 554.501295][ T5956] usb 6-1: SerialNumber: syz [ 554.511924][ T9144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 554.519347][ T9144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 555.297553][ T9160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.756'. [ 556.035907][ C1] usb 6-1: NFC: Urb failure (status -71) [ 556.065435][ C1] usb 6-1: NFC: Urb failure (status -71) [ 556.121177][ T5956] usb 6-1: NFC: Unable to get FW version [ 556.340860][ T5956] pn533_usb 6-1:5.168: probe with driver pn533_usb failed with error -71 [ 556.435551][ T5956] usb 6-1: USB disconnect, device number 3 [ 558.457191][ T9183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 559.807208][ T9192] netlink: 56 bytes leftover after parsing attributes in process `syz.7.761'. [ 560.202784][ T9192] netlink: 16 bytes leftover after parsing attributes in process `syz.7.761'. [ 562.257968][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.867447][ T5825] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 568.078628][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 568.119657][ T5825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.132156][ T5825] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.171028][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 568.280615][ T5825] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 568.339609][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.396246][ T5825] usb 6-1: config 0 descriptor?? [ 568.427688][ T5825] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 568.570559][ T9285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 569.543688][ T9290] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 570.091209][ T9038] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 570.427177][ T9038] usb 3-1: Using ep0 maxpacket: 16 [ 570.435592][ T9038] usb 3-1: config 5 has an invalid interface number: 168 but max is 0 [ 570.450560][ T9038] usb 3-1: config 5 has no interface number 0 [ 570.460846][ T9038] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 570.473267][ T9038] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 570.528256][ T9038] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 570.679087][ T9038] usb 3-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid maxpacket 1280, setting to 1024 [ 570.747906][ T9038] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 570.781445][ T9038] usb 3-1: config 5 interface 168 has no altsetting 0 [ 570.846413][ T9038] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 570.863858][ T9038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.902189][ T9038] usb 3-1: Product: syz [ 570.906496][ T9038] usb 3-1: Manufacturer: syz [ 570.912371][ T9038] usb 3-1: SerialNumber: syz [ 570.929847][ T9287] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 570.938854][ T9287] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 571.208469][ T9] usb 6-1: USB disconnect, device number 4 [ 571.403822][ C1] usb 3-1: NFC: Urb failure (status -71) [ 571.416581][ C1] usb 3-1: NFC: Urb failure (status -71) [ 571.424479][ T9038] usb 3-1: NFC: Unable to get FW version [ 571.438210][ T9038] pn533_usb 3-1:5.168: probe with driver pn533_usb failed with error -71 [ 571.686751][ T9038] usb 3-1: USB disconnect, device number 3 [ 571.708667][ T5821] udevd[5821]: setting mode of /dev/bus/usb/003/003 to 020664 failed: No such file or directory [ 571.805863][ T5821] udevd[5821]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 572.418831][ T9327] tipc: Started in network mode [ 572.424117][ T9327] tipc: Node identity e2bc9f87cd1, cluster identity 4711 [ 572.577056][ T9327] tipc: Enabled bearer , priority 10 [ 572.650653][ T9325] tipc: Resetting bearer [ 572.969952][ T9323] tipc: Disabling bearer [ 576.072843][ T9361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 577.053776][ T9366] netlink: 56 bytes leftover after parsing attributes in process `syz.5.794'. [ 577.129973][ T9366] netlink: 16 bytes leftover after parsing attributes in process `syz.5.794'. [ 581.008878][ T9417] netlink: 'syz.2.803': attribute type 6 has an invalid length. [ 581.171470][ T9417] loop6: detected capacity change from 0 to 7 [ 581.203553][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.213952][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.230802][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.240582][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.271465][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.281205][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.289606][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.299844][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.325948][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.335643][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.345430][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.355212][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.366344][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.376207][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.385743][ T9417] ldm_validate_partition_table(): Disk read failed. [ 581.408367][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.418109][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.462255][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.472050][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.500071][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.509809][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.547930][ T9417] Dev loop6: unable to read RDB block 0 [ 581.560731][ T9417] loop6: unable to read partition table [ 581.748240][ T9417] loop6: partition table beyond EOD, truncated [ 581.872137][ T9417] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 582.126323][ T5185] ldm_validate_partition_table(): Disk read failed. [ 582.144464][ T5185] Dev loop6: unable to read RDB block 0 [ 582.221613][ T5185] loop6: unable to read partition table [ 582.289794][ T5185] loop6: partition table beyond EOD, truncated [ 582.662616][ T9437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 582.768918][ T9437] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.787355][ T9437] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.232852][ T9466] netlink: 14 bytes leftover after parsing attributes in process `syz.5.811'. [ 586.394210][ T9466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.937604][ T9466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.017732][ T9466] bond0 (unregistering): Released all slaves [ 587.556315][ T9477] netlink: 'syz.2.814': attribute type 6 has an invalid length. [ 588.714507][ T9498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 589.918554][ T9038] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 590.122298][ T9038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.149996][ T9038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.161697][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.824'. [ 590.200441][ T9038] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 590.391256][ T9038] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 590.402798][ T9038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.837860][ T9038] usb 4-1: config 0 descriptor?? [ 591.410084][ T9038] usbhid 4-1:0.0: can't add hid device: -71 [ 591.499754][ T9038] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 591.538177][ T9038] usb 4-1: USB disconnect, device number 4 [ 594.291539][ T9557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 596.774690][ T9038] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 596.982481][ T9038] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.994402][ T9038] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 209, using maximum allowed: 30 [ 597.074272][ T9038] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 209 [ 597.128432][ T9038] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 597.352494][ T9038] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.717299][ T9038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.170997][ T9038] usb 3-1: Product: syz [ 598.175207][ T9038] usb 3-1: Manufacturer: syz [ 598.181766][ T9038] usb 3-1: SerialNumber: syz [ 598.199572][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 598.222076][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 598.266074][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 598.284391][ T9038] cdc_mbim 3-1:1.0: skipping garbage [ 598.302342][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 598.317721][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 598.555737][ T9578] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 599.325208][ T9612] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 599.339599][ T9038] cdc_mbim 3-1:1.0: dwNtbInMaxSize=64 is too small. Using 2048 [ 599.360162][ T9038] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 599.633790][ T9612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.712706][ T9622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 600.385895][ T9612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.490146][ T5831] Bluetooth: hci1: command tx timeout [ 600.611489][ T9596] chnl_net:caif_netlink_parms(): no params data found [ 600.868857][ T9626] netlink: 'syz.5.850': attribute type 6 has an invalid length. [ 601.044636][ T9038] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 601.055674][ T9038] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 601.072135][ T9038] wwan wwan0: port wwan0mbim0 attached [ 601.128551][ T9038] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, e6:f2:21:7a:a6:6c [ 601.140933][ T9626] loop6: detected capacity change from 0 to 7 [ 601.149847][ C0] blk_print_req_error: 25 callbacks suppressed [ 601.149870][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.156027][ T9038] usb 3-1: USB disconnect, device number 4 [ 601.156085][ C0] buffer_io_error: 25 callbacks suppressed [ 601.156099][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.167740][ T9038] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 601.172993][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.204007][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.235344][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.245059][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.318409][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.328098][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.357394][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.367170][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.382701][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.392593][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.418293][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.428020][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.435989][ T9626] ldm_validate_partition_table(): Disk read failed. [ 601.458195][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.467882][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.478377][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.488012][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.508906][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.518576][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.545435][ T9626] Dev loop6: unable to read RDB block 0 [ 601.560154][ T9626] loop6: unable to read partition table [ 601.577386][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.586649][ T9626] loop6: partition table beyond EOD, truncated [ 601.594882][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.637149][ T9626] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 601.637542][ T9038] wwan wwan0: port wwan0mbim0 disconnected [ 601.698693][ T9596] bridge_slave_0: entered allmulticast mode [ 601.743853][ T9596] bridge_slave_0: entered promiscuous mode [ 601.779080][ T9596] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.821956][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.852291][ T9596] bridge_slave_1: entered allmulticast mode [ 601.895394][ T9596] bridge_slave_1: entered promiscuous mode [ 602.167795][ T9596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.245231][ T9596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.577932][ T5831] Bluetooth: hci1: command tx timeout [ 602.800000][ T9596] team0: Port device team_slave_0 added [ 602.819801][ T9596] team0: Port device team_slave_1 added [ 603.148975][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.178841][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.443005][ T9596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.901604][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.932216][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.738901][ T5831] Bluetooth: hci1: command tx timeout [ 604.845309][ T9596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.812155][ T9596] hsr_slave_0: entered promiscuous mode [ 605.824831][ T9596] hsr_slave_1: entered promiscuous mode [ 605.886068][ T9596] debugfs: 'hsr0' already exists in 'hsr' [ 605.910386][ T9596] Cannot create hsr debugfs directory [ 606.230510][ T9689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 606.927670][ T5831] Bluetooth: hci1: command tx timeout [ 608.068545][ T9038] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 608.245274][ T9038] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.289605][ T9038] usb 6-1: too many endpoints for config 1 interface 1 altsetting 0: 209, using maximum allowed: 30 [ 608.472916][ T9038] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 209 [ 608.620322][ T9038] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 608.678691][ T9038] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.689091][ T9038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.697219][ T9038] usb 6-1: Product: syz [ 608.702483][ T9038] usb 6-1: Manufacturer: syz [ 608.720586][ T9038] usb 6-1: SerialNumber: syz [ 608.757883][ T9038] cdc_mbim 6-1:1.0: skipping garbage [ 608.829056][ T9708] netlink: 'syz.4.867': attribute type 6 has an invalid length. [ 608.960870][ T9696] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 609.501537][ T9596] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 609.628513][ T9596] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 609.684108][ T9596] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 609.734994][ T9596] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 609.919638][ T9713] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 609.927575][ T9038] cdc_mbim 6-1:1.0: dwNtbInMaxSize=64 is too small. Using 2048 [ 609.943200][ T9038] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 610.331636][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.340979][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.387399][ T9038] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 610.419943][ T9038] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 610.624563][ T9038] wwan wwan0: port wwan0mbim0 attached [ 610.665392][ T9038] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 86:4d:35:67:c0:b2 [ 611.671762][ T9596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.805097][ T9] usb 6-1: USB disconnect, device number 5 [ 611.835070][ T9] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 611.870342][ T9596] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.974697][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.981878][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.084611][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 612.372798][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.380007][ T6323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.842048][ T9746] : renamed from bridge_slave_0 (while UP) [ 613.269813][ T9756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 615.347907][ T9596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.557580][ T9775] netlink: 'syz.5.879': attribute type 6 has an invalid length. [ 618.576087][ T9596] veth0_vlan: entered promiscuous mode [ 618.642553][ T9596] veth1_vlan: entered promiscuous mode [ 618.958807][ T9596] veth0_macvtap: entered promiscuous mode [ 619.460917][ T9820] netlink: 68 bytes leftover after parsing attributes in process `syz.5.887'. [ 619.529269][ T9596] veth1_macvtap: entered promiscuous mode [ 619.681725][ T9596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.747324][ T9596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.858727][ T5896] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 619.881646][ T9825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 620.793061][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.811571][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.856093][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.887688][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.898796][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 620.950614][ T5896] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.987404][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 621.007700][ T5896] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.235261][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.263478][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.431717][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.440906][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.666726][ T9848] netlink: 56 bytes leftover after parsing attributes in process `syz.8.842'. [ 623.723763][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.788624][ T9848] netlink: 16 bytes leftover after parsing attributes in process `syz.8.842'. [ 624.148602][ T5925] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 624.308418][ T5925] usb 8-1: Using ep0 maxpacket: 8 [ 624.406896][ T5925] usb 8-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 624.416798][ T5925] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.470638][ T5925] usb 8-1: config 0 descriptor?? [ 624.531542][ T5925] pwc: Logitech QuickCam Zoom USB webcam detected. [ 624.573025][ T5925] pwc: Warning: more than 1 configuration available. [ 625.768674][ T5136] Bluetooth: hci4: command 0x0406 tx timeout [ 625.867848][ T5896] usb 6-1: string descriptor 0 read error: -71 [ 625.888642][ T5896] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.933938][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.242869][ T5896] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 626.278575][ T5896] usb 6-1: no configuration chosen from 1 choice [ 627.117931][ T5896] usb 6-1: USB disconnect, device number 6 [ 629.706565][ T5925] pwc: Failed to set LED on/off time (-110) [ 630.710788][ T5925] pwc: send_video_command error -32 [ 630.716102][ T5925] pwc: Failed to set video mode VGA@30 fps; return code = -32 [ 630.735146][ T5925] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -32 [ 633.001288][ T5896] usb 8-1: USB disconnect, device number 2 [ 633.256457][ T9904] netlink: 'syz.7.905': attribute type 6 has an invalid length. [ 636.545261][ T9936] : renamed from bridge_slave_0 (while UP) [ 638.492554][ T9954] netlink: 40 bytes leftover after parsing attributes in process `syz.5.917'. [ 640.053071][ T9962] tipc: Started in network mode [ 640.089390][ T9962] tipc: Node identity eabc6dbe67d9, cluster identity 4711 [ 640.110227][ T9962] tipc: Enabled bearer , priority 10 [ 640.139353][ T9964] syzkaller0: entered promiscuous mode [ 640.148935][ T9964] syzkaller0: entered allmulticast mode [ 640.189005][ T9962] tipc: Resetting bearer [ 640.209766][ T9965] netlink: 56 bytes leftover after parsing attributes in process `syz.7.920'. [ 640.309643][ T9965] netlink: 16 bytes leftover after parsing attributes in process `syz.7.920'. [ 640.325242][ T9960] tipc: Resetting bearer [ 640.482753][ T9960] tipc: Disabling bearer [ 641.759247][ T9038] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 641.970926][ T9038] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.007909][ T9038] usb 9-1: too many endpoints for config 1 interface 1 altsetting 0: 209, using maximum allowed: 30 [ 642.058462][ T9038] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 209 [ 642.348477][ T9038] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 642.372022][ T9038] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 642.438638][ T9038] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.468169][ T9038] usb 9-1: Product: syz [ 642.536162][ T9038] usb 9-1: Manufacturer: syz [ 642.559689][ T9038] usb 9-1: SerialNumber: syz [ 642.762214][ T9038] cdc_mbim 9-1:1.0: skipping garbage [ 643.448831][ T9978] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 644.477885][ T9978] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 644.514518][ T9038] cdc_mbim 9-1:1.0: dwNtbInMaxSize=64 is too small. Using 2048 [ 644.524796][ T9038] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 644.812200][ T9978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.821270][ T9978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.845310][ T9038] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 644.948950][ T9038] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 645.039066][ T9038] wwan wwan0: port wwan0mbim0 attached [ 645.123235][ T9038] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 7e:64:28:1f:fd:0d [ 645.513818][ T9038] usb 9-1: USB disconnect, device number 2 [ 645.579523][ T9038] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 645.953410][ T9038] wwan wwan0: port wwan0mbim0 disconnected [ 659.361534][ T5956] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 659.548553][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 659.586268][ T5956] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 659.601954][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.659800][ T5956] usb 4-1: config 0 descriptor?? [ 659.689592][ T5956] pwc: Logitech QuickCam Zoom USB webcam detected. [ 659.729618][ T5956] pwc: Warning: more than 1 configuration available. [ 664.268624][ T5956] pwc: Failed to set LED on/off time (-71) [ 664.275032][ T5956] pwc: send_video_command error -71 [ 664.284179][ T5956] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 664.435654][ T5956] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 664.761582][ T5956] usb 4-1: USB disconnect, device number 5 [ 667.548449][ T5925] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 667.735845][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 667.780580][ T5925] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 667.805764][ T5925] usb 4-1: config 5 has no interface number 0 [ 667.832453][ T5925] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 667.885569][ T5925] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 667.928463][ T5925] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 667.969880][ T5925] usb 4-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid maxpacket 1280, setting to 1024 [ 668.038462][ T5925] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 668.089360][ T5925] usb 4-1: config 5 interface 168 has no altsetting 0 [ 668.161324][ T5925] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 668.218861][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.248502][ T5925] usb 4-1: Product: syz [ 668.252710][ T5925] usb 4-1: Manufacturer: syz [ 668.285519][ T5925] usb 4-1: SerialNumber: syz [ 668.328562][T10190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 668.336181][T10190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 668.686166][ C1] usb 4-1: NFC: Urb failure (status -71) [ 668.715562][ C1] usb 4-1: NFC: Urb failure (status -71) [ 668.724559][ T5925] usb 4-1: NFC: Unable to get FW version [ 668.745116][ T5925] pn533_usb 4-1:5.168: probe with driver pn533_usb failed with error -71 [ 668.807242][ T5925] usb 4-1: USB disconnect, device number 6 [ 670.642889][T10214] netlink: 14 bytes leftover after parsing attributes in process `syz.8.992'. [ 671.567893][T10214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.651580][T10214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.707605][T10214] bond0 (unregistering): Released all slaves [ 674.249281][T10247] netlink: 27 bytes leftover after parsing attributes in process `syz.4.999'. [ 676.430231][T10272] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1006'. [ 676.641342][T10276] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1008'. [ 676.680030][T10276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1008'. [ 682.489754][T10328] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1024'. [ 682.536133][T10328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1024'. [ 682.641597][T10330] : renamed from bridge_slave_0 [ 683.012753][T10344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 684.419786][T10352] tipc: Enabling of bearer rejected, failed to enable media [ 685.142824][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.928839][ T5910] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 685.989974][T10366] program syz.3.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.098424][ T5910] usb 8-1: Using ep0 maxpacket: 32 [ 686.244038][ T5910] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.244081][ T5910] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.244104][ T5910] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.244124][ T5910] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 686.244148][ T5910] usb 8-1: config 0 interface 0 has no altsetting 0 [ 686.244176][ T5910] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 686.244197][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.265765][ T5910] usb 8-1: config 0 descriptor?? [ 686.728218][ T5910] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 686.728276][ T5910] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 686.728304][ T5910] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 686.729645][ T5910] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 686.729673][ T5910] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 686.750650][ T5910] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 686.751084][ T5910] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 686.983064][ C0] hid-thrustmaster 0003:044F:B65D.0001: Unknown packet type 0x0, unable to proceed further with wheel init [ 687.533103][ T6007] usb 8-1: USB disconnect, device number 3 [ 689.937352][T10400] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1042'. [ 690.329382][ T9038] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 690.500918][ T9038] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.528559][ T9038] usb 9-1: too many endpoints for config 1 interface 1 altsetting 0: 209, using maximum allowed: 30 [ 690.570262][ T9038] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 209 [ 690.748806][ T9038] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 690.883317][ T9038] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 690.958096][T10414] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1046'. [ 690.987824][ T9038] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.008785][ T9038] usb 9-1: Product: syz [ 691.020508][ T9038] usb 9-1: Manufacturer: syz [ 691.047161][ T9038] usb 9-1: SerialNumber: syz [ 691.106036][ T9038] cdc_mbim 9-1:1.0: skipping garbage [ 691.296940][T10402] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 691.446407][T10414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.922463][T10414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.936893][T10414] bond0 (unregistering): Released all slaves [ 692.176112][T10425] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 692.186128][ T9038] cdc_mbim 9-1:1.0: dwNtbInMaxSize=64 is too small. Using 2048 [ 692.193970][ T9038] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 692.463529][T10425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.492582][T10425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.611019][ T9038] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 692.652029][ T9038] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 692.751442][ T9038] wwan wwan0: port wwan0mbim0 attached [ 692.896464][ T9038] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 42:8b:7f:ae:93:4f [ 694.168195][ T9038] usb 9-1: USB disconnect, device number 3 [ 694.211507][ T9038] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 694.799199][ T9038] wwan wwan0: port wwan0mbim0 disconnected [ 703.230634][T10536] lo: entered allmulticast mode [ 703.254132][T10536] tunl0: entered allmulticast mode [ 703.275781][T10536] gre0: entered allmulticast mode [ 703.412207][T10536] gretap0: entered allmulticast mode [ 703.531649][T10536] erspan0: entered allmulticast mode [ 703.603559][T10536] ip_vti0: entered allmulticast mode [ 703.664224][T10536] ip6_vti0: entered allmulticast mode [ 703.744331][T10536] sit0: entered allmulticast mode [ 703.979800][T10536] ip6tnl0: entered allmulticast mode [ 704.028238][T10536] ip6gre0: entered allmulticast mode [ 704.139654][T10536] syz_tun: entered allmulticast mode [ 704.219362][T10536] ip6gretap0: entered allmulticast mode [ 704.299930][T10536] bridge0: entered allmulticast mode [ 704.320036][T10536] vcan0: entered allmulticast mode [ 704.393083][T10536] team0: entered allmulticast mode [ 704.478439][T10536] team_slave_0: entered allmulticast mode [ 704.525030][T10536] team_slave_1: entered allmulticast mode [ 704.532353][T10550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1073'. [ 704.571251][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1073'. [ 704.599965][T10536] dummy0: entered allmulticast mode [ 704.624456][T10550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1073'. [ 704.717870][T10550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1073'. [ 704.818970][T10536] nlmon0: entered allmulticast mode [ 704.942393][T10536] caif0: entered allmulticast mode [ 704.986696][T10536] batadv0: entered allmulticast mode [ 705.033577][T10536] vxcan0: entered allmulticast mode [ 705.065715][T10536] vxcan1: entered allmulticast mode [ 705.099807][T10536] veth0: entered allmulticast mode [ 705.117254][T10536] veth1: entered allmulticast mode [ 705.743067][T10536] wg0: entered allmulticast mode [ 705.905558][T10536] wg1: entered allmulticast mode [ 706.000519][T10536] wg2: entered allmulticast mode [ 706.035223][T10536] veth0_to_bridge: entered allmulticast mode [ 706.081123][T10536] veth1_to_bridge: entered allmulticast mode [ 706.442626][T10536] veth0_to_bond: entered allmulticast mode [ 707.497451][T10536] bond_slave_0: entered allmulticast mode [ 707.791597][T10570] nfs: Unknown parameter '' [ 707.821476][T10536] veth1_to_bond: entered allmulticast mode [ 708.020937][T10536] bond_slave_1: entered allmulticast mode [ 708.027045][T10536] veth0_to_team: entered allmulticast mode [ 708.256578][T10536] veth1_to_team: entered allmulticast mode [ 709.015865][T10536] veth0_to_batadv: entered allmulticast mode [ 709.127281][T10536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.165265][T10536] batadv_slave_0: entered allmulticast mode [ 709.197740][T10536] veth1_to_batadv: entered allmulticast mode [ 709.274416][T10536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.305958][T10536] batadv_slave_1: entered allmulticast mode [ 709.359589][T10536] xfrm0: entered allmulticast mode [ 709.407869][T10536] veth0_to_hsr: entered allmulticast mode [ 709.434554][T10536] hsr_slave_0: entered allmulticast mode [ 709.454350][T10536] veth1_to_hsr: entered allmulticast mode [ 709.497420][T10536] hsr_slave_1: entered allmulticast mode [ 709.560779][T10536] hsr0: entered allmulticast mode [ 709.615332][T10536] veth1_virt_wifi: entered allmulticast mode [ 709.654615][T10536] veth0_virt_wifi: entered allmulticast mode [ 709.684798][T10536] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 709.706493][T10536] veth1_vlan: entered allmulticast mode [ 709.737482][T10536] veth0_vlan: entered allmulticast mode [ 709.803080][T10536] vlan0: entered allmulticast mode [ 709.819044][T10536] vlan1: entered allmulticast mode [ 709.839413][T10536] macvlan0: entered allmulticast mode [ 709.871637][T10536] macvlan1: entered allmulticast mode [ 709.882587][T10536] ipvlan0: entered allmulticast mode [ 709.904771][T10536] ipvlan1: entered allmulticast mode [ 709.931525][T10536] veth1_macvtap: entered allmulticast mode [ 709.973774][T10536] veth0_macvtap: entered allmulticast mode [ 709.991293][T10536] macvtap0: entered allmulticast mode [ 710.016220][T10536] macsec0: entered allmulticast mode [ 710.034508][T10536] geneve0: entered allmulticast mode [ 710.060904][T10536] geneve1: entered allmulticast mode [ 710.092689][T10536] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 710.116463][T10536] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 710.137070][T10536] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 710.158995][T10536] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 710.202821][T10536] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 710.222882][T10536] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 710.234826][T10536] ip6tnl1: entered allmulticast mode [ 710.311986][ T36] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.496343][ T36] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.537102][ T36] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.583703][ T36] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.457562][T10624] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1091'. [ 713.700289][ T5995] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 713.870956][ T5995] usb 9-1: Using ep0 maxpacket: 32 [ 714.079299][ T5995] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.298410][ T5995] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.338263][ T5995] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.391192][ T5995] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 714.486904][ T5995] usb 9-1: config 0 interface 0 has no altsetting 0 [ 714.508652][ T5995] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 714.564213][ T5995] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.690303][ T5995] usb 9-1: config 0 descriptor?? [ 715.262520][ T5995] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 715.279200][ T5995] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 715.325369][ T5995] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 715.383780][ T5995] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 715.422077][ T5995] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 715.467266][ T5995] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 716.430347][ T5995] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 716.752449][ C0] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -71 [ 716.753021][T10583] usb 9-1: USB disconnect, device number 4 [ 717.699498][T10639] fido_id[10639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 717.849968][T10648] nfs: Unknown parameter '' [ 718.251081][T10652] lo: entered allmulticast mode [ 718.291078][T10652] tunl0: entered allmulticast mode [ 718.320519][T10652] gre0: entered allmulticast mode [ 718.415443][T10652] gretap0: entered allmulticast mode [ 718.468827][T10652] erspan0: entered allmulticast mode [ 718.529753][T10652] ip_vti0: entered allmulticast mode [ 718.563731][T10652] ip6_vti0: entered allmulticast mode [ 718.719459][T10652] sit0: entered allmulticast mode [ 718.809263][T10659] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1086'. [ 718.899632][T10652] ip6tnl0: entered allmulticast mode [ 718.942925][T10652] ip6gre0: entered allmulticast mode [ 719.001163][T10652] syz_tun: entered allmulticast mode [ 719.043009][T10652] ip6gretap0: entered allmulticast mode [ 719.198771][T10584] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 719.215381][T10652] bridge0: entered allmulticast mode [ 719.279219][T10652] vcan0: entered allmulticast mode [ 719.325912][T10652] team0: entered allmulticast mode [ 719.341680][T10652] team_slave_0: entered allmulticast mode [ 719.347525][T10652] team_slave_1: entered allmulticast mode [ 719.365526][T10652] dummy0: entered allmulticast mode [ 719.500060][T10652] nlmon0: entered allmulticast mode [ 719.508505][T10584] usb 5-1: Using ep0 maxpacket: 16 [ 719.662872][T10652] caif0: entered allmulticast mode [ 719.668282][T10652] batadv0: entered allmulticast mode [ 719.675377][T10663] program syz.2.1103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 719.725378][T10652] vxcan0: entered allmulticast mode [ 719.756676][T10652] vxcan1: entered allmulticast mode [ 719.810027][T10652] veth0: entered allmulticast mode [ 719.820742][T10584] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.838587][T10584] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 719.840639][T10652] veth1: entered allmulticast mode [ 719.851209][T10584] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 719.963480][T10652] wg0: entered allmulticast mode [ 720.031623][T10652] wg1: entered allmulticast mode [ 720.039900][T10652] wg2: entered allmulticast mode [ 720.046785][T10652] veth0_to_bridge: entered allmulticast mode [ 720.095052][T10652] veth1_to_bridge: entered allmulticast mode [ 720.188268][T10652] veth0_to_bond: entered allmulticast mode [ 720.228555][T10652] bond_slave_0: entered allmulticast mode [ 720.321205][T10652] veth1_to_bond: entered allmulticast mode [ 720.341964][T10652] bond_slave_1: entered allmulticast mode [ 720.355327][T10652] veth0_to_team: entered allmulticast mode [ 720.530968][T10652] veth1_to_team: entered allmulticast mode [ 720.636513][T10652] veth1_to_batadv: entered allmulticast mode [ 720.721609][T10652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.734700][T10652] batadv_slave_1: entered allmulticast mode [ 720.772965][T10652] xfrm0: entered allmulticast mode [ 720.818315][ C1] hrtimer: interrupt took 43470 ns [ 720.853454][T10652] veth0_to_hsr: entered allmulticast mode [ 720.895250][T10652] hsr_slave_0: entered allmulticast mode [ 720.940907][T10652] veth1_to_hsr: entered allmulticast mode [ 720.986308][T10652] hsr_slave_1: entered allmulticast mode [ 721.045528][T10652] hsr0: entered allmulticast mode [ 721.133818][T10652] veth1_virt_wifi: entered allmulticast mode [ 721.396972][T10652] veth0_virt_wifi: entered allmulticast mode [ 721.676566][T10652] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 721.831131][T10652] veth1_vlan: entered allmulticast mode [ 721.990141][T10652] veth0_vlan: entered allmulticast mode [ 722.088085][T10652] vlan0: entered allmulticast mode [ 722.150079][T10652] vlan1: entered allmulticast mode [ 722.168480][T10652] macvlan0: entered allmulticast mode [ 722.210341][T10652] macvlan1: entered allmulticast mode [ 722.277031][T10652] ipvlan0: entered allmulticast mode [ 722.290754][T10652] ipvlan1: entered allmulticast mode [ 722.296478][T10652] veth1_macvtap: entered allmulticast mode [ 722.329659][T10679] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1107'. [ 722.371961][T10652] veth0_macvtap: entered allmulticast mode [ 722.409389][T10652] macvtap0: entered allmulticast mode [ 722.449880][T10652] macsec0: entered allmulticast mode [ 722.498616][T10652] geneve0: entered allmulticast mode [ 722.571347][T10652] geneve1: entered allmulticast mode [ 722.636575][T10652] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 722.731554][T10652] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 722.817222][T10652] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 722.865861][T10652] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 722.937201][T10652] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 723.058299][ T5136] Bluetooth: hci1: command 0x0406 tx timeout [ 723.079673][T10652] syztnl0: entered allmulticast mode [ 723.103654][T10652] ip6tnl1: entered allmulticast mode [ 723.208628][T10584] usb 5-1: string descriptor 0 read error: -71 [ 723.221667][T10584] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 723.273591][T10584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.318056][T10584] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 723.376200][T10584] usb 5-1: no configuration chosen from 1 choice [ 723.568734][T10584] usb 5-1: USB disconnect, device number 4 [ 723.622775][T10679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.773167][T10679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.378052][T10679] bond0 (unregistering): Released all slaves [ 724.697315][ T7930] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.755313][ T7930] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.502884][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.593772][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.831627][T10714] netlink: 'syz.3.1113': attribute type 6 has an invalid length. [ 727.341812][T10718] nfs: Unknown parameter '' [ 727.848834][T10721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1115'. [ 729.597498][T10747] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1122'. [ 729.898466][T10586] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 730.088557][T10586] usb 6-1: Using ep0 maxpacket: 16 [ 730.096484][T10586] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.138864][T10586] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 730.198726][T10586] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.568143][T10753] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1125'. [ 732.588578][ T5925] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 733.400821][ T5925] usb 8-1: Using ep0 maxpacket: 32 [ 733.417619][ T5925] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.434682][ T5925] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.581130][ T5925] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.637419][ T5925] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 733.770548][ T31] INFO: task syz.6.804:9420 blocked for more than 143 seconds. [ 733.798627][ T5925] usb 8-1: config 0 interface 0 has no altsetting 0 [ 733.818564][ T31] Tainted: G L syzkaller #0 [ 733.828630][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 733.847781][T10586] usb 6-1: string descriptor 0 read error: -71 [ 733.863603][ T5925] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 733.893069][T10586] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 733.914715][ T5925] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.930649][T10586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.958582][ T31] task:syz.6.804 state:D stack:23904 pid:9420 tgid:9420 ppid:7116 task_flags:0x400040 flags:0x00080002 [ 733.979301][ T5925] usb 8-1: config 0 descriptor?? [ 733.996872][T10586] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 734.055317][T10586] usb 6-1: no configuration chosen from 1 choice [ 734.055937][ T31] Call Trace: [ 734.098428][ T31] [ 734.115174][ T31] __schedule+0x15dd/0x52d0 [ 734.136580][T10586] usb 6-1: USB disconnect, device number 7 [ 734.142698][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.187543][ T31] ? __pfx___schedule+0x10/0x10 [ 734.227265][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.267427][ T31] ? schedule+0x90/0x360 [ 734.291747][ T31] schedule+0x164/0x360 [ 734.308432][ T31] schedule_timeout+0xc3/0x2c0 [ 734.332873][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 734.359819][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.385471][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 734.412688][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.432660][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.452359][ T5925] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 734.457793][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 734.483769][ T5925] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 734.488620][T10578] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 734.521931][ T31] ? wait_for_completion+0x274/0x5e0 [ 734.528210][ T5925] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 734.536630][ T31] wait_for_completion+0x2cc/0x5e0 [ 734.556052][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 734.563257][ T5925] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 734.574873][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 734.591738][ T5925] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 734.595617][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.625868][ T31] restrict_one_thread_callback+0x320/0x570 [ 734.632841][ T31] task_work_run+0x1d9/0x270 [ 734.640974][ T31] ? __pfx_task_work_run+0x10/0x10 [ 734.642751][ T5925] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 734.646131][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.646177][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.690348][T10578] usb 9-1: Using ep0 maxpacket: 32 [ 734.703195][ T5925] hid-thrustmaster 0003:044F:B65D.0003: Wrong number of endpoints? [ 734.720615][T10578] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.738505][T10578] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.752609][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 734.761301][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.766998][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 734.773018][T10578] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.783018][ T31] get_signal+0x11eb/0x1330 [ 734.787562][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.793712][T10578] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 734.806893][ T31] ? __free_object+0x442/0x5e0 [ 734.813483][T10578] usb 9-1: config 0 interface 0 has no altsetting 0 [ 734.820325][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.826026][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 734.832428][T10578] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 734.844899][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 734.850645][T10578] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.864472][ T31] ? debug_object_free+0x2d7/0x490 [ 734.871749][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.877426][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 734.885183][T10578] usb 9-1: config 0 descriptor?? [ 734.891356][ T31] exit_to_user_mode_loop+0x86/0x480 [ 734.897643][ T31] ? rcu_is_watching+0x15/0xb0 [ 734.907847][ T31] do_syscall_64+0x32d/0xf80 [ 734.930894][ T31] ? trace_irq_disable+0x3b/0x150 [ 734.936047][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.971522][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.977519][ T31] RIP: 0033:0x7f199a55cfce [ 734.988486][ T31] RSP: 002b:00007ffdfb71c588 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 734.996973][ T31] RAX: fffffffffffffdfc RBX: 0000555580fac500 RCX: 00007f199a55cfce [ 735.005700][ T31] RDX: 00007ffdfb71c5e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 735.014360][ T31] RBP: 00007f199a817da0 R08: 0000000000000000 R09: 0000000000000000 [ 735.022714][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000008e29f [ 735.031214][ T31] R13: 00007f199a81636c R14: 000000000008e26d R15: 00007f199a816360 [ 735.039793][ T31] [ 735.044374][ C1] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71 [ 735.054439][ T5995] usb 8-1: USB disconnect, device number 4 [ 735.116201][ T31] INFO: task syz.6.804:9421 blocked for more than 144 seconds. [ 735.125218][ T31] Tainted: G L syzkaller #0 [ 735.134041][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.143119][ T31] task:syz.6.804 state:D stack:26560 pid:9421 tgid:9420 ppid:7116 task_flags:0x400040 flags:0x00080002 [ 735.155277][ T31] Call Trace: [ 735.158855][ T31] [ 735.161829][ T31] __schedule+0x15dd/0x52d0 [ 735.166399][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 735.174194][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 735.181171][ T31] ? __pfx___schedule+0x10/0x10 [ 735.186098][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.192354][ T31] ? schedule+0x90/0x360 [ 735.196674][ T31] schedule+0x164/0x360 [ 735.203850][ T31] schedule_timeout+0xc3/0x2c0 [ 735.210775][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 735.216275][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.223732][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 735.229335][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.235058][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.240980][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 735.246252][ T31] ? wait_for_completion+0x274/0x5e0 [ 735.251951][ T31] wait_for_completion+0x2cc/0x5e0 [ 735.257155][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 735.262978][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 735.268090][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.275921][ T31] restrict_one_thread_callback+0x320/0x570 [ 735.282065][ T31] task_work_run+0x1d9/0x270 [ 735.286898][ T31] ? __pfx_task_work_run+0x10/0x10 [ 735.292729][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.298543][ T31] ? vfs_readv+0x6ed/0x840 [ 735.303186][ T31] get_signal+0x11eb/0x1330 [ 735.307706][ T31] ? __pfx_vfs_readv+0x10/0x10 [ 735.312783][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.318619][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 735.324208][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.329971][ T31] ? __fget_files+0x3a0/0x420 [ 735.334704][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 735.341324][ T31] ? do_readv+0x2b1/0x2e0 [ 735.347299][ T31] exit_to_user_mode_loop+0x86/0x480 [ 735.352988][ T31] ? rcu_is_watching+0x15/0xb0 [ 735.354747][T10578] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 735.367452][T10578] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 735.377768][ T31] do_syscall_64+0x32d/0xf80 [ 735.382500][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.388735][T10578] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 735.396578][T10578] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 735.404603][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.410652][ T31] RIP: 0033:0x7f199a59c799 [ 735.415076][ T31] RSP: 002b:00007f19987f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 735.423598][T10578] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 735.435481][ T31] RAX: fffffffffffffe00 RBX: 00007f199a815fa0 RCX: 00007f199a59c799 [ 735.444214][ T31] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000008 [ 735.444264][T10578] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 735.465353][ T31] RBP: 00007f199a632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 735.473514][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.485490][T10578] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 735.493477][ T31] R13: 00007f199a816038 R14: 00007f199a815fa0 R15: 00007ffdfb71c4a8 [ 735.503153][ T31] [ 735.506240][ T31] INFO: task syz.6.804:9422 blocked for more than 145 seconds. [ 735.519576][ T31] Tainted: G L syzkaller #0 [ 735.526200][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.535243][ T31] task:syz.6.804 state:D stack:28392 pid:9422 tgid:9420 ppid:7116 task_flags:0x400140 flags:0x00080006 [ 735.548972][ T31] Call Trace: [ 735.552300][ T31] [ 735.555267][ T31] __schedule+0x15dd/0x52d0 [ 735.560170][ T31] ? register_lock_class+0x31/0x2e0 [ 735.565461][ T31] ? __pfx___schedule+0x10/0x10 [ 735.570713][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.576431][ T31] ? schedule+0x90/0x360 [ 735.583048][ T31] schedule+0x164/0x360 [ 735.587298][ T31] schedule_timeout+0xc3/0x2c0 [ 735.596428][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.602572][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 735.607808][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 735.614088][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.645792][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 735.650999][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.656698][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.662568][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 735.667850][ T31] ? wait_for_completion+0x274/0x5e0 [ 735.673571][ T31] wait_for_completion+0x2cc/0x5e0 [ 735.679169][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 735.686900][ T31] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 735.693781][ T31] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 735.700865][ T31] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 735.707813][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.713577][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.719420][ T31] ? landlock_put_ruleset+0x10/0xb0 [ 735.724672][ T31] __se_sys_landlock_restrict_self+0x540/0x810 [ 735.732390][ T31] do_syscall_64+0x14d/0xf80 [ 735.737017][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.744929][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.751508][ T31] RIP: 0033:0x7f199a59c799 [ 735.755955][ T31] RSP: 002b:00007f19987d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 735.764474][ T31] RAX: ffffffffffffffda RBX: 00007f199a816090 RCX: 00007f199a59c799 [ 735.772857][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000007 [ 735.780976][ T31] RBP: 00007f199a632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 735.791301][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.799413][ T31] R13: 00007f199a816128 R14: 00007f199a816090 R15: 00007ffdfb71c4a8 [ 735.807435][ T31] [ 735.810832][ T31] INFO: task syz.6.804:9423 blocked for more than 145 seconds. [ 735.813760][ T5925] usb 9-1: USB disconnect, device number 5 [ 735.818487][ C0] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71 [ 735.818528][ T31] Tainted: G L syzkaller #0 [ 735.818546][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.818559][ T31] task:syz.6.804 state:D stack:28176 pid:9423 tgid:9420 ppid:7116 task_flags:0x400140 flags:0x00080006 [ 735.818644][ T31] Call Trace: [ 735.818655][ T31] [ 735.818673][ T31] __schedule+0x15dd/0x52d0 [ 735.818746][ T31] ? register_lock_class+0x31/0x2e0 [ 735.889042][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.894736][ T31] ? __pfx___schedule+0x10/0x10 [ 735.900036][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.905695][ T31] ? schedule+0x90/0x360 [ 735.910006][ T31] schedule+0x164/0x360 [ 735.914188][ T31] schedule_timeout+0xc3/0x2c0 [ 735.919038][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.924696][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 735.929830][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 735.935225][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.940941][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 735.946021][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.951698][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.957344][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 735.962733][ T31] ? wait_for_completion+0x274/0x5e0 [ 735.968077][ T31] wait_for_completion+0x2cc/0x5e0 [ 735.973266][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 735.978992][ T31] ? landlock_restrict_sibling_threads+0xd0b/0x11f0 [ 735.985671][ T31] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 735.996740][ T31] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 736.003425][ T31] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 736.010628][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.016446][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.022168][ T31] ? landlock_put_ruleset+0x10/0xb0 [ 736.027407][ T31] __se_sys_landlock_restrict_self+0x540/0x810 [ 736.033672][ T31] do_syscall_64+0x14d/0xf80 [ 736.038283][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.044421][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.050467][ T31] RIP: 0033:0x7f199a59c799 [ 736.054889][ T31] RSP: 002b:00007f19987b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 736.063385][ T31] RAX: ffffffffffffffda RBX: 00007f199a816180 RCX: 00007f199a59c799 [ 736.071500][ T31] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000007 [ 736.079552][ T31] RBP: 00007f199a632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 736.087528][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.097608][ T31] R13: 00007f199a816218 R14: 00007f199a816180 R15: 00007ffdfb71c4a8 [ 736.105808][ T31] [ 736.110745][ T31] INFO: task syz.6.804:9424 blocked for more than 145 seconds. [ 736.118306][ T31] Tainted: G L syzkaller #0 [ 736.125550][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.134286][ T31] task:syz.6.804 state:D stack:27752 pid:9424 tgid:9420 ppid:7116 task_flags:0x400040 flags:0x00080002 [ 736.146718][ T31] Call Trace: [ 736.150119][ T31] [ 736.153301][ T31] __schedule+0x15dd/0x52d0 [ 736.157855][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.163586][ T31] ? __pfx___schedule+0x10/0x10 [ 736.168545][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.174184][ T31] ? schedule+0x90/0x360 [ 736.178525][ T31] schedule+0x164/0x360 [ 736.182713][ T31] schedule_timeout+0xc3/0x2c0 [ 736.187481][ T31] ? __pfx_____sys_recvmsg+0x10/0x10 [ 736.194782][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 736.200519][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.206275][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 736.211581][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.217244][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.223131][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 736.228680][ T31] ? wait_for_completion+0x274/0x5e0 [ 736.234088][ T31] wait_for_completion+0x2cc/0x5e0 [ 736.239366][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 736.245057][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 736.250818][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.256513][ T31] restrict_one_thread_callback+0x320/0x570 [ 736.262527][ T31] task_work_run+0x1d9/0x270 [ 736.267141][ T31] ? __pfx_task_work_run+0x10/0x10 [ 736.272451][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.278125][ T31] ? fput+0xa0/0xd0 [ 736.282032][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.287890][ T31] ? do_recvmmsg+0x736/0x800 [ 736.292693][ T31] get_signal+0x11eb/0x1330 [ 736.299429][ T31] ? __pfx_do_recvmmsg+0x10/0x10 [ 736.304438][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 736.310097][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 736.316276][ T31] ? __x64_sys_recvmmsg+0x198/0x250 [ 736.321570][ T31] exit_to_user_mode_loop+0x86/0x480 [ 736.326884][ T31] ? rcu_is_watching+0x15/0xb0 [ 736.335350][ T31] do_syscall_64+0x32d/0xf80 [ 736.340332][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.346477][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.353153][ T31] RIP: 0033:0x7f199a59c799 [ 736.357586][ T31] RSP: 002b:00007f1998391028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 736.366133][ T31] RAX: fffffffffffffe00 RBX: 00007f199a816270 RCX: 00007f199a59c799 [ 736.374200][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 736.382307][ T31] RBP: 00007f199a632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 736.390350][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 736.400968][ T31] R13: 00007f199a816308 R14: 00007f199a816270 R15: 00007ffdfb71c4a8 [ 736.409367][ T31] [ 736.412423][ T31] INFO: task syz.6.804:9427 blocked for more than 146 seconds. [ 736.423546][ T31] Tainted: G L syzkaller #0 [ 736.430282][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.449691][ T31] task:syz.6.804 state:D stack:26592 pid:9427 tgid:9420 ppid:7116 task_flags:0x400040 flags:0x00080002 [ 736.461875][ T31] Call Trace: [ 736.465161][ T31] [ 736.468087][ T31] __schedule+0x15dd/0x52d0 [ 736.472935][ T31] ? __pfx___schedule+0x10/0x10 [ 736.478101][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.484206][ T31] ? schedule+0x90/0x360 [ 736.488618][ T31] schedule+0x164/0x360 [ 736.492811][ T31] schedule_timeout+0xc3/0x2c0 [ 736.497578][ T31] ? futex_unqueue+0x22/0x240 [ 736.504601][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 736.510231][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.515903][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 736.521034][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.526696][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.532750][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 736.537982][ T31] ? wait_for_completion+0x274/0x5e0 [ 736.543443][ T31] wait_for_completion+0x2cc/0x5e0 [ 736.548707][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 736.554367][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 736.559903][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.565569][ T31] restrict_one_thread_callback+0x320/0x570 [ 736.571689][ T31] task_work_run+0x1d9/0x270 [ 736.576298][ T31] ? __pfx_task_work_run+0x10/0x10 [ 736.581713][ T31] ? __pfx_futex_wait+0x10/0x10 [ 736.586619][ T31] get_signal+0x11eb/0x1330 [ 736.591443][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.597312][ T31] ? do_futex+0x333/0x420 [ 736.603595][ T31] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 736.609784][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 736.615377][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 736.621673][ T31] exit_to_user_mode_loop+0x86/0x480 [ 736.626988][ T31] ? rcu_is_watching+0x15/0xb0 [ 736.631936][ T31] do_syscall_64+0x32d/0xf80 [ 736.636568][ T31] ? trace_irq_disable+0x3b/0x150 [ 736.641882][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.648106][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.654136][ T31] RIP: 0033:0x7f199a59c799 [ 736.658744][ T31] RSP: 002b:00007f1997f6e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 736.667220][ T31] RAX: fffffffffffffe00 RBX: 00007f199a816368 RCX: 00007f199a59c799 [ 736.675719][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f199a816368 [ 736.685984][ T31] RBP: 00007f199a816360 R08: 0000000000000000 R09: 0000000000000000 [ 736.694538][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.702622][ T31] R13: 00007f199a8163f8 R14: 00007ffdfb71c3c0 R15: 00007ffdfb71c4a8 [ 736.712925][ T31] [ 736.715992][ T31] [ 736.715992][ T31] Showing all locks held in the system: [ 736.723961][ T31] 1 lock held by khungtaskd/31: [ 736.728958][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 736.740470][ T31] 3 locks held by kworker/u8:4/60: [ 736.745938][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 736.756541][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 736.765632][ T31] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 736.774774][ T31] 2 locks held by getty/5574: [ 736.779717][ T31] #0: ffff8880366300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 736.789739][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 736.800205][ T31] 4 locks held by kworker/u8:13/7930: [ 736.805587][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 736.817938][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 736.827154][ T31] #2: ffffffff9a52de80 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 736.837541][ T31] #3: ffffffff9a45dcc8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 736.848017][ T31] [ 736.850493][ T31] ============================================= [ 736.850493][ T31] [ 736.859076][ T31] NMI backtrace for cpu 0 [ 736.859097][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 736.859130][ T31] Tainted: [L]=SOFTLOCKUP [ 736.859139][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 736.859154][ T31] Call Trace: [ 736.859164][ T31] [ 736.859173][ T31] dump_stack_lvl+0xe8/0x150 [ 736.859213][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 736.859249][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 736.859285][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 736.859324][ T31] sys_info+0x135/0x170 [ 736.859352][ T31] watchdog+0xfd9/0x1030 [ 736.859398][ T31] ? watchdog+0x21a/0x1030 [ 736.859446][ T31] kthread+0x388/0x470 [ 736.859471][ T31] ? __pfx_watchdog+0x10/0x10 [ 736.859508][ T31] ? __pfx_kthread+0x10/0x10 [ 736.859534][ T31] ret_from_fork+0x51e/0xb90 [ 736.859573][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 736.859605][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.859635][ T31] ? __switch_to+0xc7d/0x1450 [ 736.859668][ T31] ? __pfx_kthread+0x10/0x10 [ 736.859694][ T31] ret_from_fork_asm+0x1a/0x30 [ 736.859752][ T31] [ 736.859761][ T31] Sending NMI from CPU 0 to CPUs 1: [ 736.984604][ C1] NMI backtrace for cpu 1 [ 736.984626][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.984656][ C1] Tainted: [L]=SOFTLOCKUP [ 736.984664][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 736.984678][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 736.984720][ C1] Code: 3e 6d 02 e9 8e c2 62 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 e0 1b 00 fb f4 67 c2 62 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 736.984755][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 736.984775][ C1] RAX: 0000000001ade6b9 RBX: ffffffff819a886d RCX: 0000000080000001 [ 736.984791][ C1] RDX: 0000000000000001 RSI: ffffffff8def3648 RDI: ffffffff8c27b080 [ 736.984807][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 736.984824][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901190b0 [ 736.984842][ C1] R13: 1ffff11003ad9000 R14: 0000000000000001 R15: 0000000000000001 [ 736.984860][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 736.984878][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.984894][ C1] CR2: 00007f0bf39e82f8 CR3: 00000000782b7000 CR4: 0000000000350ef0 [ 736.984912][ C1] Call Trace: [ 736.984923][ C1] [ 736.984931][ C1] default_idle+0x9/0x20 [ 736.984956][ C1] default_idle_call+0x72/0xb0 [ 736.984991][ C1] do_idle+0x1bd/0x500 [ 736.985029][ C1] ? __pfx_do_idle+0x10/0x10 [ 736.985064][ C1] ? do_idle+0x4d6/0x500 [ 736.985097][ C1] cpu_startup_entry+0x43/0x60 [ 736.985129][ C1] start_secondary+0x101/0x110 [ 736.985157][ C1] common_startup_64+0x13e/0x147 [ 736.985192][ C1] [ 737.160241][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 737.167125][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 737.177849][ T31] Tainted: [L]=SOFTLOCKUP [ 737.182161][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 737.192295][ T31] Call Trace: [ 737.195567][ T31] [ 737.198622][ T31] vpanic+0x56c/0xa60 [ 737.202615][ T31] ? __pfx___schedule+0x10/0x10 [ 737.207470][ T31] ? __pfx_vpanic+0x10/0x10 [ 737.212014][ T31] ? __pfx_console_unlock+0x10/0x10 [ 737.217309][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.222949][ T31] panic+0xc5/0xd0 [ 737.226683][ T31] ? __pfx_panic+0x10/0x10 [ 737.231144][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.236957][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 737.242337][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.247985][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 737.254152][ T31] watchdog+0x1023/0x1030 [ 737.258502][ T31] ? watchdog+0x21a/0x1030 [ 737.262934][ T31] kthread+0x388/0x470 [ 737.266999][ T31] ? __pfx_watchdog+0x10/0x10 [ 737.271740][ T31] ? __pfx_kthread+0x10/0x10 [ 737.276502][ T31] ret_from_fork+0x51e/0xb90 [ 737.281183][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 737.286295][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.292014][ T31] ? __switch_to+0xc7d/0x1450 [ 737.296693][ T31] ? __pfx_kthread+0x10/0x10 [ 737.301305][ T31] ret_from_fork_asm+0x1a/0x30 [ 737.306210][ T31] [ 737.309954][ T31] Kernel Offset: disabled [ 737.314272][ T31] Rebooting in 86400 seconds..