last executing test programs: 13m26.36141976s ago: executing program 32 (id=3154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcc9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xffffffffffffffff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 13m1.822133428s ago: executing program 5 (id=3155): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') rmdir(&(0x7f0000000040)='./file0\x00') 13m1.348219739s ago: executing program 5 (id=3223): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x109042, 0x98) fallocate(r0, 0x10, 0x10, 0x7000000) writev(r0, &(0x7f0000007bc0)=[{&(0x7f0000000040)="fecf", 0x2}, {0x0}], 0x2) 13m0.488740112s ago: executing program 5 (id=3225): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000240)={[{@umask={'umask', 0x3d, 0xe}}, {@nodecompose}, {@nobarrier}, {@nobarrier}, {@nobarrier}, {@gid}, {@nls={'nls', 0x3d, 'macgreek'}}]}, 0x44, 0x708, &(0x7f0000001f80)="$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") symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 12m59.579363148s ago: executing program 33 (id=3225): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000240)={[{@umask={'umask', 0x3d, 0xe}}, {@nodecompose}, {@nobarrier}, {@nobarrier}, {@nobarrier}, {@gid}, {@nls={'nls', 0x3d, 'macgreek'}}]}, 0x44, 0x708, &(0x7f0000001f80)="$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") symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 11m27.84555113s ago: executing program 0 (id=3451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a32000000001400048008000240ff"], 0xcc}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 11m26.680857574s ago: executing program 0 (id=3453): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(0x0, 0x1) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0xffffffff, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0x0, 0x0, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x8000, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x0, 0x48c93690, 0x42, 0x400002], [0x6, 0x6, 0x80000001, 0x5, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x1000, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1ef, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 11m26.393895704s ago: executing program 0 (id=3454): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x103500, 0x0) 11m26.231754083s ago: executing program 0 (id=3455): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f00000029c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 11m25.840018334s ago: executing program 0 (id=3457): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r5, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x4, 0x1) 11m25.230706934s ago: executing program 0 (id=3460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), 0x0}, 0x20) 11m24.292964408s ago: executing program 34 (id=3460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), 0x0}, 0x20) 10m20.387775478s ago: executing program 4 (id=3715): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x102) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x802c, &(0x7f0000000900)={[{@noprefix}]}) 10m20.009342463s ago: executing program 4 (id=3716): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r1 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x0, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 10m19.740492136s ago: executing program 4 (id=3720): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x561, &(0x7f0000000640)="$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") 10m19.052400465s ago: executing program 4 (id=3725): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc00, &(0x7f0000000240)={[{@uid_forget}, {@unhide}, {@utf8}, {@anchor={'anchor', 0x3d, 0x4cb}}, {@adinicb}, {@uid_ignore}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x1}}, {@dmode={'dmode', 0x3d, 0x1}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 10m18.520597323s ago: executing program 4 (id=3728): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000740)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2000000000000005, 0x3a, '\xe3?\xd8J@\xfa\xfe\xcfe\xe0\x91\xb7\x89\xe5\x14\x82\xfe\xe5Dd4S\xd2S\x17[\x14$\x9e\x04\xbd\xc4\x1a\x88\x139\x11\t\x96\xe7\xbbv\xa6H\xa8\xb5\"[\xa2\xb9wn\xab\x96\xeaS\x00\x00\x19\xef\xdbL\xd7\xc6\xacO-\xa9T\xd5f\x82\xfdq%i\xcf\x03\x04m\xa1\xe6\"\x92\xba\xca\xe3\xbd\xd9D\x00\xe63uk\x9b\x85\x8d|\x98 C\xdd$\xd2\xccu\xb7]\"%^EM&z\xa6.O\xc0\x14Q\xa6`\xaa\xdaJ?\x97\xaf\xf1V\xde6\x98\x86@*j\x88Y\xd7F\xa9\xd2\xb1\x05\xd9\x95y\x9c\xa3\xbeQ9\xe177*\x9f\b}\x96\xe1\xa1\xa5\xd0\xdd\xea\x1f\x96\x1a\x02d\xc3\xbc\x15\x9e\x99\x1f\xad\xab\xea\xf4\xfd\xad.\x1f\xb5\xe2\x91z%_P\xecY~\xa4A\xda\x9e\xf47J\xb2q\x103\xc8]\xaf\x9d\xb3,\x9f\xb1\v\x85\x87\xef\xce6h\xcf\xbd\xbf4\x9b\xc8R\n\x8c', 0x3a, '^', 0x3a, './file0'}, 0x111) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) 10m17.902099141s ago: executing program 4 (id=3730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @mcast2}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 10m17.322712133s ago: executing program 35 (id=3730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @mcast2}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 8m47.940070765s ago: executing program 6 (id=4034): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES32=0x0], 0x1, 0x5eaa, &(0x7f000000bcc0)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs4Zaio9NANMVzPn95OGqqdOVfcp/t3T3VNVfQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiB9+/8fnehFx9VdpwXLE/8Ugoh+xWNcrEbG4spzXH0bE67HVHK/Vq89H1Ntv/XMs4mJE3D8a8fDRnbV68fmn7Me/j/z/sX/+9Qenf/+33907+cdTb7fb/7T+j3s/uZvuCwAAANiXqqqqXvqYfzx9vu933SkAYCry63+V5OVqtVqtVqsPX91UjXe3WUTERnOb+j3D3XE3BgDMro34ousu0CH5F20YEUe67gQw05x3fzg9fHRnrZfy7TVfD1a22/O5ILvy3+jtXN+x13SS9jkm03p8bcYgXt2jP4tT6sMsyfn32/lf3W4fpfUOOv9p2Sv/0falT8XJ+Q/a+bccnvz7Y/MvVc5/uK/8B/IHAAAAAIAZlv/+vzy147+9Xbebzb+Y3ZnoScd/V6bUBwAAAAAAAAB40Z53/L8dxv8DAACAmVV/Vq/9+ejjZXt9xq6XX+lFvNJaHyhMulhmqet+AAAAAAAAAAAAAEBJhtvn8F7pRcxFxCtLS1VV1T9N7Xq/nnf7l13p+w8l6/qXPAAAbLt/tHUtfy9iISKupO/6m1taWqqqhcWlaqlanM/vZ0fzC9Vi43NtntbL5kdP8YZ4OKrqG1tobNc06fPypPb27dX3NaoGT9Gx6egwcACIiO1Xo4dekQ6ZqjoWXb/L4eXg+X/4eP7zNLp+nAIAAAAHr6qqqpe+zvt4Oubf77pTAMBU5Nf/9nEBtVqtVqvVh69uqsa72ywiYqO5Tf2e4e64GwMAZtdGfNF1F+iQ/Is2jIjXu+4EMNN6XXeAA/Hw0Z21Xsq313w9SOO753NBduW/0dvaLm8/bto0P+Z+2+eYTOvxtRmDeHWP/rw2pT7Mkpx/v53/1e32UVrvefIfp6tzjPbKv97P5Q7607Wc/6Cdf8vhyb8/Nv9S5fyH+8p/IH8AAAAAAJhh+e//ywd4/HecWTz+uzKlPgAAAAAAAADAi/bw0Z21fN1rPv7/pTHruf7zcMr59+RfpJx/v5X/11rrDRrzD95/nP+/Ht1Z+9EfPj+ep0+b/853QvTSI6uXHhG9dE+9YZo+866N+9qJ2JwbjOp7muv1B8N0zk8192FcjxuxHqu71u2n/4/H7ed2tdc9nUsP5e3287vah9vtje0v7GqfS987UC3m9jOxFj+PG/HBVnvdNj9h/xcmtFcT2nP+A8//IuX8h42fOv+l1N5rTWsPPuv/z/O+OR13P+/99t791YPfnYk2Y7Czb031/p3ooD9b/ydHRvHLW+s3z/z62u3bN89Fmuxaej7S5AXL+c+ln53f/29ut+ff+83n64PPRvvOf1ZsxnDP/N9szNf7e3LKfetCzn+UfnL+H6T28c//lzn/vZ//pzroDwAAAAAAAAAAAAAAADxJVVVbl4i+FxGX0vU/XV2bCQBMV379r5K8XK1Wq9Vq9eGrm6rx3m0WEfH35jb1e4bfjLsxAGCW/SciPu+6E3RG/gXL3/dXT9/qujPAVN365NOfXrtxY/3mra57AgAAAAAAAAA8qzz+50pj/Oe3ImK5td6u8V/fj5XnHf9zmGd2Bhh99oG+92OzPxr0G8ONvxFPHv/7RDx5/O/hhPubm9A+mtA+dhDzhoUJ7WMv9GjI+b/RGO+8zv94a/j1EsZ/bY95X4Kc/4nG47nO/6ut9Zr5V395mfPv78r/7O2Pf3H21iefnr7+8bWP1j9a/9nF1dVLFy6/s3p59eyH12+sp3877PHByvnnsa+dB1qWnH/OXP5lyfl/OdXyL0vO/yupln9Zcv75/Z78y5Lzz5995F+WnP/JVMu/LDn/r6da/mXJ+Z9KtfzLkvN/O9XyL0vO/3Sq5V+WnP+ZVMu/LDn/s6mWf1ly/vkIl/zLkvPPZzbIvyw5//Opln9Zcv4XUi3/suT8L6Za/mXJ+b+TavmXJed/KdXyL0vO/3Kq5V+WnP83Ui3/suT8v5lq+Zcl5/+tVMu/LDn/b6da/mXJ+X8n1fIvS87/u6mWf1ly/t9LtfzLkvN/N9XyL8vj7/83Y8aMmTzT9W8mAAAAAAAAAAAAAKBtGqcTd72PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO8g7gZ2/O2uGyhRDcEGDjmGCSJbu+x7QGcytpQloKhLb0Ylx7bQy+1Wtza6QYhZZIjdpI5QN8KLcilS8VEaCKqhS5UiuQQCKfaKW2IVWgiii0hvYDVIStZuZ93p0Z7/XMxp455/eT4seePTPzzpl3Zve/zn8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0O6m185+eKgoisZ/zV8miuIZjd9vnJxo/HHrK672CgEAAIBePdX89dKz8wUHVnGltmO++qJvfnF+fn6+eOy7L3v+R+bn8wcmi2LimqJofiw8ec/fbm0/JnmgGB8abvvz8Ap3P7LCx0dX+PjYCh/fsMLHr1nh4+MrfPyyE3CZja3vxzRvbGvztxOtU1pcV4w1P7Z1kWs9MHTN8HB8L6dpqHmd+bGjxfHiRDFbzHQc3zp2qHn8l29q3NedRdzXcNt93djYIT+873CsYSid460d97Vwm+EHry4mf/TD+w6/6WOP37DYXPE0dNxea53btjTW+aF0SWutQ8U1+ZzEOofb1nnjIs/JSMc6h5rXa/y+e52XVrnOkYVlXlHdz/l4Mdz8/aPN8zTa/m29fJ5uTJf9+OaiKC4sLLv7mMvuqxguNnVcMrzw/Iy3dmTjNhpb6TnF6Jr26U2r2KeNeWRr5z7tfk3E839Tut7oEmtof5p+8MENlz3va92nofGol3qtdO/B9X6t9MsejH3xaPNBP7joHtyaHv99tyy9BxfdO4vswfy42/bglpX24PCGkeaa85Mw1LzOwh7c3nH8SPOehprzyVuW34PT506emZ57/wdefvzkoWOzx2ZP7ZqZ2bNz7+6ZvTPTR4+fmE2/ljzb/W9TMZxfA1vSuYvXwEu7jm3fqvOfWr/X4fgyr8OJrmPX+3U42v3ghq7MC/LyPd16bby1cdLHHxoulniNNZ+fW3t/HebH3fY6HG17HS76OWWR1+HoKl6HjWPO3Lq6r1lG2/5bbA1P1+eCibY92P31SPceXO+vR/plD46nffGvty79ueDGtN4Hp9b69cjIZXswP9z03tO4JH+9P35Hcyy2L29ofODaDcX5udmzt7/v0LlzZ7cXaVwRz23bK937dVPbYyou26/Da96vBz789W/csMjlE+lcjb+88cv4ks9V45hdty//XDU/uy1+Pjsu3VGksc6u9Plc7LN543zmLLnM+Wwc86Hp3r8Wz7m07f13bIn338j9P2vez9Z8Uw+MjI22Xr8j+eyMdbwfdz5Vo833rqHmfV+aXt378Vj670q/H1+3zPvx5q5j1/v9eKz7wcX78dBK3+3oTffzOZ72yYmZ5d+PG8ds3rHWPTm67PvxzWkOpfP/spQUci5q2ztL7dt8X6OjY+lxjcY9dO7TnR3Hj6Vs1rivz+4ot0+33dy6rZH86BZcqX062XXseu/T/H611D4dWum7b+V0P5/jaV9ct3P5fdo45uKu3t87N8Zv2947N6y0B8dGNjTWPJY3Yev9fn5j7MHbi8PF6eJEcaT50Q3N/TTUvK+p3avbgxvSf1f6vXLzMntwW9ex670H8+expfbe0OjlD34ddD+f42lffHT38nuwcczr9q7v167b0iX5mLavXbu/v7bU97xu6DpNT+f3vBrr/Ie9y39vtnHMiTvWmjOXP0+3pUuuXeQ8db9+l3pNHSmuzHnanNb5/TuWPk+N9TSO+ci+Ve6nA0VRfOHuA83v96a/X/n8+W99sePvXQ60PvalfQu3ddlXHYv9vc8X7j5w8Z/v+slaHiMA/e1nzV+3bmp9rmv7m6nV/P0/AAAAMBAi9w+nmcn/AAAAUBmR++P/Cs/kfwAAAKiMyP2jaWY1yf8P/tvz3v3T+4vczJ9P4uNxGs480TouOq6fTH+enF/QuPw1n/nHr7/9/tXd93BRFD+9618WPf7BJ2JdLQ+ndU5+u/Pyy2z+9qru/x33LhzX3gGcSLcfj6d7G3z5v59oXm9yX2tevOtic775woMPND5+aV/rz9GdfPJ/Wsf9eSrzHjj69x3X3/ZY6/62Prb844rrfe6NG+9+wdsW7i+uN7TlWc2H8dFXtm43fu7Nw69tHX8pHbfU+v/ujz/7ucbx73vJ4uu/f3jx9T+Zbvc7af7kqdbl7ee08ee43h+m9cf9xfVu//RXFl3/I29oHf9Iel4+mWb3+l/9py98qv18xfrjfg483rpe3P/MX/9H83pxe3H73esff9UTHeej+/Yvfr51O/vf878j7cfH5XE/ed893vk8N26nfb+Fz/7RxY7zXPx763p/07X+uL0zjy++/tu61nlm+6bm9ZeqjH989juLPt5Yz4G/erTj8TzyvXT+XnNP83bHf5z2Y/r4/z3cur3un5bw6Pc630/i+E9OtF6XcXvTXet/uGv9F17cOHcrr//OH7XW/8irvtr5fPxnax0HftCaK63/2Ce+2XH9T32r9Xycfe/UqdNz549Hh3oi/eyfM99t3d414xs3XfuMZz7r2em9svvPB0+fe+fs2cmZyZmimBzAH4n3dK//02n+V2tcWO/bv68oive2fV679fWt/Ve86NKfvPjOz7wzjvun17Uuf+ju1uetl6bjHk6XX0jPd9zOxz/W+nzY6/rjfpaaeb2rdP5rH96zqgPT4//oTdc3X2VDF1sXd79flRWv88ef1/m6f+ytrfmldF7n009m3nL915rHdd9//GyEh97Sen3HV3Jx/V7X/5fp+b7nO63bj9vN601fx3xlc+f7Yzw/X7q/6ycNTLR+iseF9P5RXGh9PI6Kr6keunT9Wpa5pLn3z02fOH7q/Pumz83OnZuee/8HDp48ff7UuYPNn8158F0rXX/h9b2p+fo+MrtnV9F8tZ9ujafZ1V7/mXsPH9k7c8uR2aOHzh89d++Z2bPHDs/NHZ49MnfLoaNHZ9+70vWPH9m/fce+nXt3TB07fmT/Hfv27dw3dfzU6cYyWotawZ6Zd0+dOnuweZW5/bv2bd+9e9fM1MnTR2b3752ZmTq/0vWbn5umGtd+z9TZ2ROHzh0/OTs1d/wDs/u379uzZ8eKP93v5Jmjc5PTZ8+fmj4/N3t2uvVYJs81L2587lvp+tAw94mNi36eGkpfvW+/bU/++awNn/ngkjfVOqTrB4h+P/0smm/8xZ/tXs2fI/ePpZnVJP8DAABAHUTu35BmJv8DAABAZUTuvybNTP4HAACAyojcP55mVpP8r/+v/6//r/8f9P/1/8vQ/9f/L0P/X/9/ENav/6//T+/6rf8fuX9jUdQy/wMAAEAdRO7flGYm/wMAAEBlRO6/Ns1M/gcAAIDKiNz/jDSzmuR//X/9f/1//f+g/6//X4b+v/5/Gfr/+v+DsH79f/1/etdv/f/I/c9MM6tJ/gcAAIA6iNz/rDQz+R8AAAAqI3L/s9PM5H8AAACojMj9E2lmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+38uzawm+R8AAADqIHL/c9LM5H8AAACojMj9z00zk/8BAACgMiL3X5dmVpP8r/+v/98//f+FWqz+v/6//v/g0P/X/y9D/1//fxDWr/+v/0/v+q3/H7n/eWlmNcn/AAAAUAeR+69PM5P/AQAAoDIi9z8/zUz+BwAAgMqI3L85zawm+V//X/+/f/r//v3/oP+v/z9I9P/1/8vQ/9f/H4T16//r/9O7fuv/R+7/+TSzmuR/AAAAqIPI/Tekmcn/AAAAUBmR+1+QZib/AwAAQGVE7r8xzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/C9PMapL/AQAAoA4i978ozUz+BwAAgMqI3P/iNDP5HwAAACojcv9kmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+m9LMapL/AQAAoA4i929JM5P/AQAAoDIi99+cZib/AwAAQGVE7t+aZlaT/K//r/+v/6//H/T/9f/L0P/X/y9D/1//fxDWr/+v/0/v+q3/H7n/JWlmNcn/AAAAUAeR+29JM5P/AQAAoDIi9780zUz+BwAAgMqI3L8tzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/y9LMapL/AQAAoA4i99+aZib/AwAAQGVE7r8tzUz+BwAAgMqI3D+VZlaT/K//r/+v/6//H/T/9f/L0P/X/y9D/1//fxDWr/+v/0/v+q3/H7n/5WlmNcn/AAAAUAeR+29PM5P/AQAAoDIi90+nmcn/AAAAUBmR+2fSzGqS//X/9f/1//X/g/6//n8Z+v/6/2Xo/+v/D8L69f/1/+ldv/X/I/dvTzOrSf4HAACAOojcvyPNTP4HAACAyojcvzPNTP4HAACAyojcvyvNrCb5X/9f/1//X/8/6P/r/5eh/6//X4b+v/7/IKxf/1//n971W/8/cv/uNLOa5H8AAACog8j9e9LM5H8AAACojMj9e9PM5H8AAACojMj9d6SZ1ST/6//r/+v/6/8H/X/9/zL0//X/y9D/1/8fhPVfkf7/A0v/GAD9f6qg3/r/kfv3pZnVJP8DAABAHUTuf0WamfwPAAAAlRG5/xfSzOR/AAAAqIzI/b+YZlaT/K//r/+v/6//H/T/9f/L0P/X/y9D/1//fxDW79//1/+nd/3W/4/cvz/NrCb5HwAAAOogcv8r08zkfwAAAKiMyP2vSjOT/wEAAKAyIvcfSDOrSf7X/9f/1//X/w/6/wPS//+DVRxzBen/6/+Xof+v/z8I69f/1/+nd/3W/4/c/+o0s5rkfwAAAKiDyP2vSTOT/wEAAKAyIve/Ns1M/gcAAIDKiNz/ujSzmuR//X/9f/1//f+g/z8g/f8+o/+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/69PMapL/AQAAoA4i9/9Smpn8DwAAAJURuf8NaWbyPwAAAFRG5P4708xqkv/1//X/n67+/4Z0G/r/bftO/79J/1//fy30//X/i7X0/4fSK1j/v+lq9+cHff36//r/9K7f+v+R+385zawm+R8AAADqIHL/XWlm8j8AAABURuT+u9PM5H8AAACojMj9b0wzq0n+7/v+f7pD/f8l+//PbMx+7P8H/f+2faf/36T/r/+/Fvr/+v+Ff/+/tKvdnx/09ev/6//Tu37r/0fuvyfNrCb5HwAAAOogcv+vpJm15/+l/rIMAAAAGAiR+381zczf/wMAAEBlRO5/U5pZTfJ/3/f/E/3/wfv3/4P+f9u+0/9v0v/X/18L/X/9/0L/v7Sr3Z8f9PXr/+v/07t+6/9H7v+1NLOa5H8AAACog8j9b04zk/8BAACgMiL3vyXNTP4HAACAyojc/9Y0s5rkf/1//X/9f/3/oP+v/1+G/r/+fxn6//r/g7B+/X/9f3rXb/3/yP33ppnVJP8DAABAHUTuf1uamfwPAAAAlRG5/9fTzOR/AAAAqIzI/b+RZlaT/K//r/+v/6//H/T/9f/L0P/X/y9D/1//fxDWr/+v/0/v+q3/H7n/N9PMapL/AQAAoA4i9789zUz+BwAAgMqI3P9baWbyPwAAAFRG5P7fTjOrSf7X/9f/1//X/w/6//r/Zej/6/+Xof+v/z8I69f/1/+nd/3W/4/c/ztpZjXJ/wAAAFAHkft/N81M/gcAAIDKiNx/MM1M/gcAAIDKiNz/jjSzmuR//X/9f/1//f+g/6//X4b+v/5/Gfr/+v+DsH79f/1/etdv/f/I/YfSzGqS/wEAAKAOIvf/XpqZ/A8AAACVEbn/cJqZ/A8AAACVEbn/SJpZTfK//r/+v/6//n/Q/9f/L0P/X/+/DP1//f+w3BNytde/Xv3/kUL/n/rqt/5/5P7ZNLOa5H8AAACog8j9R9PM5H8AAACojMj9x9LM5H8AAACojMj970wzq0n+1//X/9f/1/8P+v/6/2Xo/+v/l6H/r/8/COv37//r/9O7fuv/R+4/nmZWk/wPAAAAdRC5/11pZvI/AAAAVEbk/nenmcn/AAAAUBmR+0+kmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+4/mWZWk/wPAAAAdRC5/1SamfwPAAAAlRG5/3SamfwPAAAAlRG5/0yaWU3yv/6//r/+v/5/0P/X/y9D/1//vwz9f/3/QVi//r/+P73rt/5/5P7fTzOrSf4HAACAOojcfzbNTP4HAACAyojcP5dmJv8DAABAZUTuP5dmVpP8r/+v/6//r////+zd1atg6ZXG4WKYgbqa/3bc3V3i7p503N3d3d3dcxGSs94Vku4k5Nste3/reW4WnIbmozgX9VL82KH/1/+v0P/r/1fo//X/V3i//l//z3Fn6/+z+3+vbhuy/wEAAGCC7P7fr9vsfwAAANhGdv8f1G32PwAAAGwju/8P67Yh+1//r//X/+v/Q/+v/1+h/9f/r9D/6/+v8H79v/6f487W/2f3/1HdNmT/AwAAwATZ/X9ct9n/AAAAsI3s/j+p2+x/AAAA2EZ2/5/WbUP2v/5f/6//1/+H/l//v0L/r/9fof/X/1/h/fp//T/Hna3/z+7/s7ptyP4HAACACbL7/7xus/8BAABgG9n9f1G32f8AAACwjez+v6zbhux//b/+X/+v/w/9v/5/hf5f/79C/6//v8L79f/6f447W/+f3f9XdduQ/Q8AAAATZPf/dd1m/wMAAMA2svv/pm6z/wEAAGAb2f1/W7cN2f/6f/2//l//H/p//f8K/b/+f4X+X/9/hffr//X/HHe2/j+7/+/qtiH7HwAAACbI7v/7us3+BwAAgG1k9/9D3Wb/AwAAwDay+/+xbhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K79f/6/857mz9f3b/P9VtQ/Y/AAAATJDd/891m/0PAAAA28ju/5e6zf4HAACAbWT3/2vdNmT/6//1//p//X/o//X/K/T/+v8V+n/9/xXer//X/3Pc2fr/7P5/q9uG7H8AAACYILv/3+s2+x8AAAC2kd3/H3XbL+7/2/fmqwAAAIC7U3b/f9ZtQ/79X/+v/9f/6/9D/6//X6H/1/+v0P/r/6/wfv2//p/jztb/Z/f/V902ZP8DAADABNn9/1232f8AAACwjez+/6nb7H8AAADYRnb//9ZtQ/a//l//r//X/4f+X/+/Qv+v/1+h/9f/X+H9+n/9P8edrf/P7v+/um3I/gcAAIAJsvv/v26z/wEAAGAb2f33q9vsfwAAANhGdv/967Yh+1//r//X/+v/Q/+v/1+h/9f/r9D/6/+v8H79v/6f487W/2f3P6BuG7L/AQAAYILs/gfWbfY/AAAAbCO7/0F1m/0PAAAA28juf3DdNmT/6//1//p//X/o//X/K/T/+v8V+n/9/xXer//X/3Pc2fr/7P6H1G1D9j8AAABMkN3/0LrN/gcAAIBtZPc/rG6z/wEAAGAb2f0Pr9uG7H/9v/5f/6//D/2//n/Fhv3/za+A/l//r//X/+v/9f8cdrb+P7v/EXXbkP0PAAAAE2T3P7Jus/8BAABgG9n9j6rb7H8AAADYRnb/o+u2Iftf/6//1//r/0P/r/9fsWH/7/v/t+7u/v/2nX6i/9f/X+H9+n/9P8edrf/P7n9M3TZk/wMAAMAE2f2PrdvsfwAAANhGdv/j6jb7HwAAALaR3f/4um3I/tf/6//1//r/0P/r/1fo/zft/3/rlu//6//1//p//T+Hna3/z+5/Qt02ZP8DAADABNn9T6zb7H8AAADYRnb/k+o2+x8AAAC2kd3/5LptyP7X/+v/9f/6/9D/6/9X6P837f/v1u//35n+X/9/hffr//X/HHe2/j+7/yl125D9DwAAAJf1G2z37P6n1l35fwAAAADnlt3/tLrN/gcAAIBtZPc/vW4bsv/1//r/c/T/d9y6q/fr//X/t/T/p6f/1/+v0P/r/6/w/nuo/8+vqf6fEc7W/2f3P6NuG7L/AQAAYILs/jvqNvsfAAAAtpHd/8y6zf4HAACAbWT3P6tuG7L/9f/6/3P0/zO//39b//9zf576f/3/XdH/6/9v6f+X3df9/NXf7/v/+n+OO1v/n93/7LptyP4HAACACbL7n1O32f8AAACwjez+59Zt9j8AAABsI7v/eXXbkP2v/9f/6/99/z/0//r/Ffp//f8K/b/+/wrv1//r/znubP1/dv/z67Yh+x8AAAAmyO5/Qd1m/wMAAMA2svtfWLfZ/wAAALCN7P4X1W1D9r/+X/+v/9f/h/5f/79C/6//X6H/1/9f4f36f/0/x52t/8/uf3HdNmT/AwAAwATZ/S+p2+x/AAAA2EZ2/0vrNvsfAAAAtpHd/7K6bcj+1//r//X/+v/Q/+v/V+j/9f8r9P/6/yu8X/+v/+e4s/X/2f0vr9uG7H8AAACYILv/FXWb/Q8AAADbyO5/Zd1m/wMAAMA2svtfVbcN2f/6f/2//l//H/p//f8K/b/+f4X+X/9/hffr//X/HHe2/j+7/9V125D9DwAAABNk97+mbrP/AQAAYBvZ/a+t2+x/AAAA2EZ2/+vqtiH7X/+v/9f/6/9D/6//X6H/1/+v0P/r/6/wfv2//p/jztb/Z/e/vm4bsv8BAABgguz+N9Rt9j8AAABsI7v/jXWb/Q8AAADbyO5/U902ZP/r//X/+n/9f+j/9f8r9P/6/xX6f/3/Fd6v/9f/c9zZ+v/s/jfXbUP2PwAAAEyQ3f+Wus3+BwAAgG1k97+1brP/AQAAYBvZ/W/76f3tn/2HIftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/B+/b/+n+PO1v/f7P7bt95etw3Z/wAAADBBdv876jb7HwAAALaR3f/Ous3+BwAAgG1k97+rbhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K79f/6/857mz9f3b/u+u2IfsfAAAAJsjuf0/dZv8DAADANrL731u32f8AAACwjez+99VtQ/a//l//v1f/f5Pi6f9v6P9v6P/vWfp//f8K/b/+/wrv1//r/znubP1/dv/767Yh+x8AAAAmyO7/QN1m/wMAAMA2svs/WLfZ/wAAALCN7P4P1W1D9r/+X/+/V/9/Q/9/Q/9/Q/9/z9L/6/9X6P/1/1d4v/5f/89xZ+v/s/s/XLcN2f8AAAAwQXb/R+o2+x8AAAC2kd3/0brN/gcAAIBtZPd/rG4bsv/1//p//b/+P/T/+v8V+n/9/wr9v/7/l/ndE71f/6//57iz9f/Z/R+v24bsfwAAAJggu/8TdZv9DwAAANvI7v9k3Wb/AwAAwDay+z9Vtw3Z//p//b/+X/8f+n/9/wr9v/5/hf5f/3+F9+v/9f8cd7b+P7v/03XbkP0PAAAAE2T3f6Zus/8BAABgG9n9n63b7H8AAADYRnb/5+q2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/B+/b/+n+PO1v9n93++bhuy/wEAAGCC7P4v1G32PwAAAGwju/+LdZv9DwAAANvI7v9S3TZk/+v/9f/6f/1/6P/1/yv0//r/Ffp//f8V3q//1/9z3K/q/+vv/Pdq/5/d/+W6bcj+BwAAgAmy+79St9n/AAAAsI3s/q/WbfY/AAAAbCO7/2t125D9r//X/+v/9f+h/9f/r9D/6/9X6P/1/1d4v/5f/89xZ/v+f3b/1+u2IfsfAAAAJsju/0bdZv8DAADANrL7v1m32f8AAACwjez+b9VtQ/b/r+v/f6fufdj/5wn6f/2//l//r/8/If2//n+F/l//f4X36//1/xx3tv4/u//bdduQ/Q8AAAATZPd/p26z/wEAAGAb2f3frdvsfwAAANhGdv/36rYh+9/3//X/+n/9f+j/9f8r9P/6/xXj+/+f/Fj/f/r36//1/xx3tv4/u//7dduQ/Q8AAAATZPf/oG6z/wEAAGAb2f0/rNvsfwAAANhGdv+P6rYh+1//r//X/+v/Q/+v/1+h/9f/rxjf//v+/yXer//X/3Pc2fr/7P4fBwAA///qIGX0") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(0x0, 0x1000, 0x1) creat(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x32) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8m45.855279775s ago: executing program 6 (id=4040): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrusage(0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r5 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrusage(0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r6 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r5, 0x0, 0x800) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 8m36.521903932s ago: executing program 6 (id=4059): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xfff3, 0x7}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) 8m33.553748582s ago: executing program 36 (id=4059): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xfff3, 0x7}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) 5m9.453775718s ago: executing program 1 (id=4659): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5m9.033887232s ago: executing program 1 (id=4663): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) r4 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) 5m8.084234389s ago: executing program 1 (id=4666): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b23, 0x0) 5m7.368845023s ago: executing program 1 (id=4668): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 5m6.262953846s ago: executing program 1 (id=4671): openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r2, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000040)={0x2, 0x9, 0x4, 0x8, 0x7f, "cdb1114e0aaa374e87fb21004e0d8bce9470a8", 0xbcfd, 0x3}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 5m4.910207121s ago: executing program 1 (id=4675): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000a00)={[{@i_version}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43e, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') readv(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/140, 0x8c}], 0x1) 4m48.170772914s ago: executing program 37 (id=4675): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000a00)={[{@i_version}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43e, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') readv(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/140, 0x8c}], 0x1) 20.421011158s ago: executing program 8 (id=5503): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0/file0\x00', 0x38103b, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@resuid}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x5b0b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000002440)=0x1) 18.813341302s ago: executing program 2 (id=5510): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x3c}}, 0x0) 18.727892621s ago: executing program 8 (id=5512): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000530000001801000020696c2500000000002020207b1af8ff00000000400000000000000007010000f8ffffffb702000008000000b703000004000000850000009b00000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) creat(&(0x7f0000000040)='./file0\x00', 0x1a) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10, 0x1, {0x4, 0xfffffffe, 0x46}}]}}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@deltclass={0x24, 0x29, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0x1}, {0xc, 0xffff}, {0xfff3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4) 16.567707776s ago: executing program 2 (id=5514): mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c280)={0x2020}, 0x202f) r1 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x10000000}) 16.292016585s ago: executing program 2 (id=5515): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4800) 16.133474424s ago: executing program 2 (id=5516): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x0, 0x0, 0x12000000, 0x101, '\x00', 0x7f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000104c, &(0x7f0000000700)=ANY=[@ANYBLOB="787fd34580c3b851d7919ec27e2a54f25b0444d29317e95422c8ad6f58dc523658866778b829702d93c36b05eec8fa599c90daa58df75c4f11a6df03e400b1778e570b59d206130f9c189902d6950277350ef6d34bf836dc9478bd94ba9453693c070b5a66a4a22802a101a983b865f493eac79ddaaafabfb457e71ded03f5b11a0d3f8c4e56fb5a9a0221d03910f32ae62d94621a39581e91b2dd10081c69e0b98f2eb883b1e0eefe97bc8103d533811a1341e218c74c803ecede84e3d986f8a4a4627a7950aa4309a84d7035b8b9b0fe40a994eaff22f15dc5cb65fb35454c23e9f5ca965e012db566798d4678eef4fc6ac55313a6f2", @ANYRES8=r2, @ANYRES64, @ANYRES16, @ANYRESHEX], 0x1, 0x14fb, &(0x7f0000002a80)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x0, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00005cf000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.921938112s ago: executing program 2 (id=5517): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001a0001002dbd7004000800000a000000", @ANYRES32=0x0, @ANYBLOB="0100e80814000300070001"], 0x30}}, 0x71d0b8801b5f1c98) 15.565930567s ago: executing program 9 (id=5518): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.504009325s ago: executing program 2 (id=5519): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x40, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/igmp\x00') pread64(r1, &(0x7f00000001c0)=""/179, 0xfffffde2, 0x3c) syz_open_pts(r1, 0x422180) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000010001000000000000000000760f"]) getpgid(0x0) 15.132777404s ago: executing program 9 (id=5521): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf70606000017", 0x15}], 0x1}, 0x9cdc2384056b48b8) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00'], 0xfe33) 14.070110713s ago: executing program 9 (id=5524): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000000)={0x7, 0x3}, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0xc01a, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000002c0)={@remote, @mcast1, @mcast2, 0x4, 0x40, 0x5, 0x100, 0x0, 0x40180041, r6}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xffbff034}, {0x80000006, 0x66}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000001100)=ANY=[], 0x3c}}, 0x0) 13.943879152s ago: executing program 8 (id=5525): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) shutdown(r0, 0x2) 13.107685755s ago: executing program 3 (id=5527): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080), &(0x7f0000000180)=r6}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6, r5}, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000b80)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0xa4ce, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x0, &(0x7f0000000180)) setsockopt$sock_int(r7, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000010c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc4003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347024e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbea58626ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca71930011dd817ed8dbc67111bc1b502f398dc205ea03496bc50a0f2dbc4abef0606e6bf37a889c90a3b173f9d00dce1bba803b5dc1b77605e9cbc8d8fd0780cfa7e9dc0dbf0ee5ce2d7f6e7aab0bdc9cfca8c50f5fd0e5deccf31ed86a5eed20c968ce5ae64bef9c375915b6122bd106dbda19"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) 13.002873851s ago: executing program 9 (id=5528): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGblE7hw4Xu4cy+48Q0EH8CdgxSO3NzbJLZp2rSmlfr7bXo45/vu+U7uabO43NPPXxsePHw6evz869+i1cqi1otevMiiE7U4lioBANwKL1KKPy71/V6vbaomAGCzFr7/G2eEbJ/uenvTZQEAG/ThRx+/f39/f++DPG9FDL8d97Mof5bj9x/HkxjEo7gb7TiaPwtIqWy/+97+XtTzQifuDCfjfpE5/OyXxccGRX432tFZnt/NSwv5k3G/ES9HZFnEk15RyL1oxyun8ovxvXtL8qPfjDda1SKL+XejHb9+EU9jEA+nzzTm83/TzfN30nd/fvVJEVzkZ5Nxf3saN5e2rvveAAAAAAAAAAAAAAAAAAAAAABwe+3mM524Myy6qvN3to6m47v/GJ+er1Objpf5WURz2jhxPtAkxQ/H5+vczfM8ZWX8/Hyferxaj/qNLRwAAAAAAAAAAAAAAAAAAAD+Q0bPvjx4MBg8OvxXGtVL/rPX+i97nd5Cz+uxOnh7rbliqwovaj0Z0/350+Gsp1jEZYofN/KIVTU3TvW8VNRz/pX/SimlLIu42m1qXGSucxo7q2OKD/in73fePHiQnfcZto5v3I+LQ804HD07cU8jW6fCtNb2a66IaVY75kLX2bniL9Fbv5eTVT3ZGqtoVI04a/u11trP1/c3CAAAAAAAAAAAAAAAAAAAKM1f+l0y+Hxlam1jRQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANZv///81GpMqeXlMSmky62nG4eiGlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wN8BAAD//7DYbww=") open(0x0, 0x14507e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() 11.892404166s ago: executing program 3 (id=5529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080), 0x10010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b00000000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="487000001972070008000e"], 0x28}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x6, {0x0, 0x1}, {0x45, 0x2}, @period={0x59, 0x200, 0x4, 0x7, 0x0, {0xffff, 0xf, 0x4, 0x5}, 0x0, 0x0}}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000004c0)={0x2, {{0x2, 0x4e20, @empty}}, 0x1, 0x7, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @rand_addr=0x64010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}}]}, 0x410) 10.957903406s ago: executing program 8 (id=5531): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 10.716517809s ago: executing program 9 (id=5532): syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x5b0b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3) 7.448860023s ago: executing program 7 (id=5533): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x80040) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000f00)={{0x7, 0x5, 0x7fffffff, 0x10000, 'syz1\x00', 0x7}, 0x1, [0xffffffffffffffff, 0x747, 0x6, 0x3, 0x8, 0xffffffffffffffff, 0x100000000, 0xff, 0x80000000, 0x7, 0x3, 0xfff, 0xffffffffffffdf28, 0x10001, 0x100000d, 0xffffffffffff8000, 0x7, 0x9, 0x10001, 0xc, 0x3, 0xe, 0x2, 0xfffffffffffffc07, 0x8000, 0x7, 0x2, 0x0, 0x10000, 0x3, 0x5, 0xfffffffffffffff9, 0xef, 0x4, 0x9, 0x4, 0x9, 0xfffffffffffffff9, 0x0, 0x7fffffff, 0x5, 0x0, 0x4, 0x10000000000061d, 0x7ff, 0x100000000, 0x2, 0x6, 0x6, 0x14, 0x300000000000, 0xffff, 0x9, 0x4b, 0xca85, 0x1, 0x1, 0x3, 0x6, 0x1, 0x3f800000000, 0x8, 0x5, 0x0, 0x1, 0x8, 0x8, 0x7, 0x100000001, 0xc, 0xf, 0x0, 0x9, 0x2, 0x1, 0x1ff, 0x200, 0x0, 0x26, 0x6, 0xfffffffffffffffe, 0x4, 0x2, 0x5, 0x1, 0xa, 0xc784, 0x80, 0x2, 0x8000000000000000, 0x5, 0x6d, 0x100000001, 0x80000000000042e, 0x1f, 0x444, 0x17, 0x8000, 0x0, 0x0, 0xd, 0x1, 0x1, 0x7, 0xc, 0x2, 0x8001, 0x1d, 0x8000000000000001, 0x1, 0xff, 0x9, 0x6, 0x6, 0x3, 0xf420, 0x7, 0x53c5, 0x100, 0x9, 0xa, 0x0, 0x2, 0x9, 0x10, 0x4, 0x3, 0x4]}) 7.359564128s ago: executing program 3 (id=5534): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000003040)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x2}, "02f5"}}, 0x5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x6200c001}, 0x4004940) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.027475885s ago: executing program 8 (id=5535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x4, &(0x7f0000000180)={0x7, 0xb0}, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x6c}, {0x0, 0x0, 0xfffffffffffffffe, 0xa0, 0x0, 0x4, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@local, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200, 0x0, 0x10}}, 0xe8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x9, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x79, 0x0, 0x419}}}, 0x7) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x44014) 5.847794113s ago: executing program 7 (id=5536): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgsnd(0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = add_key(&(0x7f0000000180)='cifs.spnego\x00', 0x0, &(0x7f0000000300), 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000380)={r4, 0xc8}, 0x0, &(0x7f0000000980)="2a0c1012ec54c35692c42b900603bf424b0df7548869c1b74801f578dd4bb13eb53083b8c27d5707096f9e5eb00019bba69c5975a571a786105800cdb2bb63d965c819c0eddbcb39b1a04e460fc7d3ada5bfb45b0089cc62cf4d0eb854276b9b6f18290e438edae60e74dc35eee115dd19295ac0e03f1594191d0c1dfecfc4dc79d5f652fc388e0ad49b59c120406715922e5423e16b87bd0d91d84e4d64317ccf9fbdc51bf825095199682f06e3115b4f16eabb786e6280a29aa91d91ff0c07a4d9c183a43ee8fb", 0x0) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) 5.772648785s ago: executing program 3 (id=5537): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000000)={0x7, 0x3}, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0xc01a, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000002c0)={@remote, @mcast1, @mcast2, 0x4, 0x40, 0x5, 0x100, 0x0, 0x40180041, r6}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xffbff034}, {0x80000006, 0x66}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000001100)=ANY=[], 0x3c}}, 0x0) 2.863659067s ago: executing program 9 (id=5538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x2, &(0x7f0000000400)={[0x3]}, 0x8) 2.832726146s ago: executing program 8 (id=5539): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x0, 0x5c8cff7d, {{0x13, 0x4, 0x3, 0x7, 0x4c, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @private=0xa010100, {[@timestamp_prespec={0x44, 0x4, 0x47, 0x3, 0x6}, @end, @ssrr={0x89, 0x17, 0x71, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @empty]}, @timestamp={0x44, 0x4, 0x5e, 0x0, 0x8}, @ssrr={0x89, 0x13, 0xf6, [@broadcast, @local, @empty, @local]}, @timestamp_prespec={0x44, 0x4, 0x5c, 0x3, 0x8}]}}}}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080f1ff00", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="000000000200000004000000000000000000"], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44008) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffdffff) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="680000001200000328bd7000fedbdf25ac1414bb000000000000000000000000000004d602002b0014000d00e000000200000000000000000000000005001900ff00000024000900050000000000000009000000000000000c0000000000000003000000000000009e735d8da47408612e6cd542ea34a1320e19f1f169b7e82502b74327b8bb6c4c2326"], 0x68}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) syz_usbip_server_init(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) 2.696312067s ago: executing program 7 (id=5540): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711028000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.558163155s ago: executing program 3 (id=5541): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setrlimit(0x0, &(0x7f0000000100)={0x6, 0xa}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, 0x0, 0xb0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r4, 0x127f, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2.307969318s ago: executing program 7 (id=5542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 1.425324778s ago: executing program 7 (id=5543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080), 0x10010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b00000000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="487000001972070008000e"], 0x28}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x6, {0x0, 0x1}, {0x45, 0x2}, @period={0x59, 0x200, 0x4, 0x7, 0x0, {0xffff, 0xf, 0x4, 0x5}, 0x0, 0x0}}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000004c0)={0x2, {{0x2, 0x4e20, @empty}}, 0x1, 0x7, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @rand_addr=0x64010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}}]}, 0x410) 1.354753023s ago: executing program 3 (id=5544): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 0s ago: executing program 7 (id=5545): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "6216cbec"}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): using interface batadv_slave_0 (retrying later): interface not active [ 1332.458825][ T5920] usb 2-1: Failed to register entities (-22). [ 1332.527329][T20402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.535539][ T5920] usb 2-1: USB disconnect, device number 80 [ 1332.558688][T20402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.681423][T20402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.810493][T14877] Bluetooth: hci2: command tx timeout [ 1332.884063][T20492] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4084'. [ 1332.947055][T20402] hsr_slave_0: entered promiscuous mode [ 1332.966142][T20402] hsr_slave_1: entered promiscuous mode [ 1332.974627][T20402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1332.984880][T20402] Cannot create hsr debugfs directory [ 1334.434880][T20512] loop7: detected capacity change from 0 to 40427 [ 1334.611346][T20512] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1334.786205][T20523] loop1: detected capacity change from 0 to 512 [ 1334.850638][T20523] EXT4-fs: Ignoring removed i_version option [ 1334.934351][T20523] ext4: Unknown parameter 'seclabel' [ 1335.035997][T14877] Bluetooth: hci2: command tx timeout [ 1335.278508][T20402] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1335.318035][T20402] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1336.378763][T20402] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1336.783483][T20402] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1336.980371][ T5961] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1337.183941][ T5961] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1337.257178][T14877] Bluetooth: hci2: command tx timeout [ 1337.272820][T20402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.302881][ T5961] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1337.335769][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.411716][ T5961] usb 9-1: Product: syz [ 1337.460647][ T5961] usb 9-1: Manufacturer: syz [ 1337.497415][ T5961] usb 9-1: SerialNumber: syz [ 1337.519063][T20402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.630021][T16541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.638724][T16541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.971772][ T5961] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1337.996326][T20554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4094'. [ 1338.010332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.018950][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.048774][ T5961] usb 9-1: USB disconnect, device number 7 [ 1338.167520][ T5961] usblp0: removed [ 1339.184216][T20402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1339.672384][T20575] loop1: detected capacity change from 0 to 128 [ 1342.445431][T20575] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1342.488045][T20575] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1342.781700][T16650] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1342.839876][ T30] audit: type=1326 audit(1750101911.193:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.2.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1342.944363][ T30] audit: type=1326 audit(1750101911.231:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.2.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1342.996417][ T30] audit: type=1326 audit(1750101911.240:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.2.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1343.027485][ T30] audit: type=1326 audit(1750101911.240:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.2.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d5c58e963 code=0x7ffc0000 [ 1343.058824][ T30] audit: type=1326 audit(1750101911.240:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.2.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0d5c58d3df code=0x7ffc0000 [ 1343.090490][T19842] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1343.214311][ T30] audit: type=1326 audit(1750101911.259:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.2.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0d5c58e9b7 code=0x7ffc0000 [ 1343.304198][T19842] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.329975][T19842] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1343.356044][T20402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.360615][ T30] audit: type=1326 audit(1750101911.259:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.2.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d5c58d290 code=0x7ffc0000 [ 1343.412385][T19842] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1343.446276][T19842] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1343.458337][ T30] audit: type=1326 audit(1750101911.259:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.2.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0d5c58d58a code=0x7ffc0000 [ 1343.506412][T19842] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1343.517719][T19842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.538217][T19842] usb 9-1: Product: syz [ 1343.565475][ T30] audit: type=1326 audit(1750101911.268:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.2.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1343.592622][T19842] usb 9-1: Manufacturer: syz [ 1343.606525][T19842] usb 9-1: SerialNumber: syz [ 1343.622697][ T30] audit: type=1326 audit(1750101911.296:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.2.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1343.655759][T19842] cdc_mbim 9-1:1.0: skipping garbage [ 1343.871560][T20580] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1344.039493][T20612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4105'. [ 1344.115633][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4105'. [ 1344.542647][T20580] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1344.637422][T20402] veth0_vlan: entered promiscuous mode [ 1344.714130][T20402] veth1_vlan: entered promiscuous mode [ 1344.949425][T20402] veth0_macvtap: entered promiscuous mode [ 1345.029021][T20402] veth1_macvtap: entered promiscuous mode [ 1345.163207][T20402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.278847][T20402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.285726][T20636] loop1: detected capacity change from 0 to 512 [ 1345.356062][T20636] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.4107: corrupted in-inode xattr: invalid ea_ino [ 1345.362316][T20402] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.383142][T20402] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.393779][T20402] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.406774][T20402] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.418448][T19842] cdc_mbim 9-1:1.0: bind() failure [ 1345.431100][T19842] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1345.454024][T19842] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1345.468235][T19842] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1345.477928][T20636] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4107: couldn't read orphan inode 15 (err -117) [ 1345.497851][T19842] usb 9-1: USB disconnect, device number 8 [ 1345.549946][T20636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1345.709511][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.731171][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.761013][T16650] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.792153][T15718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.811195][T15718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.281823][T20646] loop8: detected capacity change from 0 to 512 [ 1346.444356][T20646] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1346.523293][T20659] loop7: detected capacity change from 0 to 128 [ 1346.531329][T20646] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1346.872497][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4115'. [ 1346.887221][T20667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4115'. [ 1348.004748][T19029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1349.104554][T20688] loop8: detected capacity change from 0 to 1024 [ 1349.243686][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1349.251664][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1350.638248][T20684] loop1: detected capacity change from 0 to 512 [ 1351.514240][T20684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1351.635468][T20684] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1351.675275][T20684] EXT4-fs: failed to create workqueue [ 1351.795648][T20684] EXT4-fs (loop1): mount failed [ 1353.602427][ T5920] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1353.803561][ T5920] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.975204][ T5920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1353.989475][ T5920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1354.006948][ T5920] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1355.044830][ T5920] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1356.040083][ T5920] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1356.061004][ T5920] usb 10-1: Manufacturer: syz [ 1356.168841][ T5920] usb 10-1: config 0 descriptor?? [ 1356.185220][T20731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1356.196423][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1356.599331][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1356.599352][ T30] audit: type=1326 audit(1750101924.064:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c58e929 code=0x7fc00000 [ 1356.633759][ T5920] rc_core: IR keymap rc-hauppauge not found [ 1356.652223][ T5920] Registered IR keymap rc-empty [ 1356.659407][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1356.683129][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1356.746166][ T5920] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1356.805057][ T5920] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input53 [ 1356.862630][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1356.918813][ T2936] hfsplus: b-tree write err: -5, ino 4 [ 1356.948743][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1357.166123][ T30] audit: type=1326 audit(1750101924.597:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d5c52ab19 code=0x7fc00000 [ 1357.269462][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1357.889182][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1357.907941][ T30] audit: type=1326 audit(1750101924.597:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0d5c52abdf code=0x7fc00000 [ 1357.968384][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1357.979166][ T30] audit: type=1326 audit(1750101924.597:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0d5c58e929 code=0x7fc00000 [ 1358.049528][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1358.135097][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1358.156591][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1358.188530][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1358.218447][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1358.252697][ T5920] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1358.276793][ T5920] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1358.298153][ T5920] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1358.357814][ T5920] usb 10-1: USB disconnect, device number 2 [ 1359.421310][T20752] loop1: detected capacity change from 0 to 1024 [ 1359.558281][T20752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1359.832771][T16650] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.086230][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4141'. [ 1360.130943][T20779] loop8: detected capacity change from 0 to 1024 [ 1360.149903][T20775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4141'. [ 1360.532895][T20759] loop9: detected capacity change from 0 to 40427 [ 1360.593116][T20759] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 1360.637570][T20759] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1360.743798][T20759] F2FS-fs (loop9): invalid crc value [ 1361.993908][T20780] loop1: detected capacity change from 0 to 32768 [ 1362.038041][ T5920] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1362.143814][T20800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4145'. [ 1362.232716][ T5920] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.294477][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1362.365808][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1362.402112][ T5920] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1362.465957][ T5920] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1362.488801][ T5920] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1362.539610][ T5920] usb 8-1: Manufacturer: syz [ 1362.573960][ T5920] usb 8-1: config 0 descriptor?? [ 1363.737358][ T5920] rc_core: IR keymap rc-hauppauge not found [ 1363.744491][ T5920] Registered IR keymap rc-empty [ 1363.827135][T19842] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1363.865714][T20812] loop1: detected capacity change from 0 to 512 [ 1364.035498][T20812] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.4149: corrupted in-inode xattr: invalid ea_ino [ 1364.053926][T20812] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4149: couldn't read orphan inode 15 (err -117) [ 1364.084651][T20812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1364.741932][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1364.763253][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1364.785852][ T5920] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1364.808441][ T5920] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input54 [ 1364.853580][T20695] hfsplus: b-tree write err: -5, ino 4 [ 1365.447506][ T5842] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1365.714716][T19842] usb 10-1: Using ep0 maxpacket: 8 [ 1366.083820][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1366.095553][T19842] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1366.200362][T20824] Cannot find add_set index 0 as target [ 1366.623361][ T5842] usb 9-1: Using ep0 maxpacket: 8 [ 1366.633273][ T5842] usb 9-1: config index 0 descriptor too short (expected 61008, got 80) [ 1366.645644][ T5842] usb 9-1: config 0 has an invalid interface number: 31 but max is -1 [ 1366.655557][ T5842] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.667706][ T5842] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1366.741646][T19842] usb 10-1: config 8 has an invalid interface number: 255 but max is 0 [ 1366.754376][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1366.787679][T19842] usb 10-1: config 8 has no interface number 0 [ 1366.831672][T16650] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.842735][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1366.867458][T19842] usb 10-1: config 8 interface 255 has no altsetting 0 [ 1366.943030][T19842] usb 10-1: string descriptor 0 read error: -71 [ 1366.964871][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1366.972386][ T5842] usb 9-1: config 0 has no interface number 0 [ 1366.986510][ T5842] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1367.027556][T19842] usb 10-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1367.060301][T19842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.070263][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1367.082686][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.122845][T19842] usb 10-1: can't set config #8, error -71 [ 1367.130229][ T5842] usb 9-1: Product: syz [ 1367.130253][ T5842] usb 9-1: Manufacturer: syz [ 1367.130270][ T5842] usb 9-1: SerialNumber: syz [ 1367.149547][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1367.153766][ T5842] usb 9-1: config 0 descriptor?? [ 1367.211418][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1367.220901][T19842] usb 10-1: USB disconnect, device number 3 [ 1367.248557][ T5842] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 1367.269314][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1367.282571][ T5842] uvcvideo 9-1:0.31: Entity type for entity Output 6 was not initialized! [ 1367.328935][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4155'. [ 1367.331724][ T5842] usb 9-1: Failed to create links for entity 6 [ 1367.339806][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1367.380390][T20833] loop1: detected capacity change from 0 to 128 [ 1367.381267][ T5842] usb 9-1: Failed to register entities (-22). [ 1367.395945][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4155'. [ 1367.425322][ T5920] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1367.485271][T20827] syzkaller0: entered promiscuous mode [ 1367.491735][ T5920] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1367.511198][ T5842] usb 9-1: USB disconnect, device number 9 [ 1367.526103][ T5920] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1367.542769][T20827] syzkaller0: entered allmulticast mode [ 1367.676867][ T5920] usb 8-1: USB disconnect, device number 9 [ 1369.480165][T20847] loop8: detected capacity change from 0 to 1024 [ 1371.128670][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1372.525204][ T3502] hfsplus: b-tree write err: -5, ino 4 [ 1373.208889][T20873] netlink: 'syz.1.4165': attribute type 4 has an invalid length. [ 1373.218274][T20873] netlink: 'syz.1.4165': attribute type 5 has an invalid length. [ 1373.227660][T20873] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4165'. [ 1375.155568][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4168'. [ 1375.166405][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4168'. [ 1376.603236][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1377.284066][T20902] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4170'. [ 1377.340965][T20902] ip6erspan0: entered promiscuous mode [ 1377.710136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1378.325017][T20908] loop9: detected capacity change from 0 to 1024 [ 1378.821840][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1379.118022][T20915] netlink: 'syz.2.4171': attribute type 4 has an invalid length. [ 1379.127461][T20915] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4171'. [ 1379.420274][ T5842] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1379.542907][T20917] loop8: detected capacity change from 0 to 128 [ 1379.639169][T20917] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1379.655393][T20917] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.731327][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 1379.748926][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.791201][ T5842] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1379.904470][ T5842] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1379.922814][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.002488][ T5842] usb 2-1: Product: syz [ 1380.007536][ T5842] usb 2-1: Manufacturer: syz [ 1380.085026][ T5842] usb 2-1: SerialNumber: syz [ 1380.151161][ T5842] usb 2-1: config 0 descriptor?? [ 1380.624417][ T5842] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1380.698296][ T5842] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1380.763043][ T5842] usb 2-1: USB disconnect, device number 81 [ 1382.192718][T19029] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1382.524379][T20931] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1383.893895][T20948] loop1: detected capacity change from 0 to 16 [ 1383.954028][T20948] erofs (device loop1): mounted with root inode @ nid 36. [ 1384.365548][T15717] hfsplus: b-tree write err: -5, ino 4 [ 1386.087851][T20963] loop9: detected capacity change from 0 to 256 [ 1387.180673][T20974] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1387.518726][T20987] loop7: detected capacity change from 0 to 512 [ 1387.676886][T20990] loop9: detected capacity change from 0 to 1024 [ 1387.707566][T20987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1387.741829][T20987] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.785414][T20987] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.4200: corrupted inode contents [ 1387.816374][T20987] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.4200: mark_inode_dirty error [ 1387.838635][T20987] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.4200: corrupted inode contents [ 1387.950295][T20987] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.4200: mark_inode_dirty error [ 1388.498619][T17784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.098269][T21021] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1390.186792][T21024] loop8: detected capacity change from 0 to 128 [ 1391.725626][ T5842] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1391.917700][ T5842] usb 9-1: Using ep0 maxpacket: 16 [ 1391.947008][ T5842] usb 9-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 1391.979313][ T5842] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1392.004150][ T3502] hfsplus: b-tree write err: -5, ino 4 [ 1392.012162][ T5842] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1392.034029][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.057557][ T5842] usb 9-1: Product: syz [ 1392.067342][ T5842] usb 9-1: Manufacturer: syz [ 1392.082415][ T5842] usb 9-1: SerialNumber: syz [ 1392.320378][ T5842] usb 9-1: 0:2 : does not exist [ 1392.379460][ T5842] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1392.560316][ T5842] usb 9-1: USB disconnect, device number 10 [ 1393.313575][T15852] udevd[15852]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1393.511635][T21065] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1393.946729][T21078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1393.963596][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1393.966610][T21079] loop8: detected capacity change from 0 to 512 [ 1394.400675][T21079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1394.429842][T21079] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.874134][T21089] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4229'. [ 1395.396333][T19029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1396.484229][T21109] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1396.713956][T21116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4238'. [ 1396.735893][T21116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4238'. [ 1397.001788][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4241'. [ 1397.031971][T21122] loop9: detected capacity change from 0 to 1024 [ 1397.062938][T21120] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4239'. [ 1397.087566][T21122] EXT4-fs: Ignoring removed bh option [ 1397.122049][T21122] EXT4-fs: inline encryption not supported [ 1397.165338][T21122] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1397.197405][T21122] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1397.224473][T21122] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.4240: lblock 2 mapped to illegal pblock 2 (length 1) [ 1397.248520][T21122] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 1397.280888][T21122] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.4240: lblock 0 mapped to illegal pblock 48 (length 1) [ 1397.353324][T21122] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 1398.278502][T21122] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4240: Failed to acquire dquot type 0 [ 1398.420146][T21122] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 1398.947162][T21122] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.4240: mark_inode_dirty error [ 1399.080733][T21122] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1399.130928][T21122] EXT4-fs (loop9): 1 orphan inode deleted [ 1399.186203][T21122] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.455187][T15717] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1399.571624][T21122] ext4: Bad value for 'resuid' [ 1399.582518][T15717] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1399.624809][T21122] ext4: Bad value for 'resuid' [ 1399.668390][T15717] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 1399.843692][T20402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.948477][T20402] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1400.074477][T20402] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 1400.136792][T20402] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 1400.957296][T21147] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1401.223239][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4251'. [ 1401.282431][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4251'. [ 1402.677232][T21167] loop9: detected capacity change from 0 to 16 [ 1402.780141][T21167] erofs (device loop9): mounted with root inode @ nid 36. [ 1402.848104][T21167] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1402.905938][T21167] erofs (device loop9): failed to decompress -29 in[58, 4038] out[1851] [ 1402.921728][T21167] erofs (device loop9): read error -117 @ 43 of nid 36 [ 1403.592713][T21182] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1405.869501][ T5842] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1406.062531][ T5842] usb 10-1: Using ep0 maxpacket: 32 [ 1406.074926][ T5842] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1406.221604][ T5842] usb 10-1: config 0 has no interface number 0 [ 1406.229078][ T5842] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1406.337385][ T5842] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1406.391625][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.411275][ T5842] usb 10-1: Product: syz [ 1407.439394][ T5842] usb 10-1: Manufacturer: syz [ 1407.445103][ T5842] usb 10-1: SerialNumber: syz [ 1407.456523][ T5842] usb 10-1: config 0 descriptor?? [ 1410.927864][ T5842] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1410.953703][ T5842] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1411.013395][ T5842] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1411.038233][ T5842] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1411.103645][ T5842] usb 10-1: USB disconnect, device number 4 [ 1411.577397][ T5842] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1411.818937][ T5842] usb 10-1: Using ep0 maxpacket: 32 [ 1411.837756][ T5842] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1411.887327][ T5842] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1411.942050][ T5842] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1411.984727][ T5842] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.031977][ T5842] usb 10-1: config 0 descriptor?? [ 1412.664119][ T5842] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 1412.985166][T10435] usb 10-1: USB disconnect, device number 5 [ 1412.988543][ T30] audit: type=1326 audit(1750101976.802:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21257 comm="syz.9.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1413.324087][ T30] audit: type=1326 audit(1750101976.802:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21257 comm="syz.9.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1413.359448][ T30] audit: type=1326 audit(1750101976.802:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21257 comm="syz.9.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1413.405420][ T30] audit: type=1326 audit(1750101976.811:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21257 comm="syz.9.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1414.242736][ T30] audit: type=1326 audit(1750101976.811:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21257 comm="syz.9.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1414.418049][ T30] audit: type=1326 audit(1750101976.811:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21257 comm="syz.9.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1414.526718][ T30] audit: type=1326 audit(1750101976.821:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21257 comm="syz.9.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1414.656410][ T30] audit: type=1326 audit(1750101976.849:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21257 comm="syz.9.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1414.816702][ T5920] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1414.948547][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1414.959048][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1415.208390][ T5920] usb 10-1: Using ep0 maxpacket: 32 [ 1415.221431][ T5920] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1415.253074][ T5920] usb 10-1: config 0 has no interface number 0 [ 1415.274726][ T5920] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1415.286379][ T5920] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1415.308323][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.319277][ T5920] usb 10-1: Product: syz [ 1415.324404][ T5920] usb 10-1: Manufacturer: syz [ 1415.345523][ T5920] usb 10-1: SerialNumber: syz [ 1415.369206][ T5920] usb 10-1: config 0 descriptor?? [ 1418.156300][T21329] overlayfs: missing 'workdir' [ 1418.433682][ T5920] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1418.951931][ T5920] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1418.970353][ T5920] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1418.979978][ T5920] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1418.995613][ T5920] usb 10-1: USB disconnect, device number 6 [ 1420.761074][T21363] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4316'. [ 1421.619514][T21345] loop9: detected capacity change from 0 to 32768 [ 1421.723777][T21345] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1422.403558][T21345] XFS (loop9): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1422.597435][T21345] XFS (loop9): Starting recovery (logdev: internal) [ 1422.701796][T21345] XFS (loop9): Ending recovery (logdev: internal) [ 1422.841567][T20402] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1424.737431][T21409] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4328'. [ 1424.846917][T21407] ptrace attach of "./syz-executor exec"[21412] was attempted by "./syz-executor exec"[21407] [ 1426.187912][T21422] loop9: detected capacity change from 0 to 32768 [ 1426.351052][T21422] non-latin1 character 0x466c found in JFS file name [ 1426.394066][T21422] mount with iocharset=utf8 to access [ 1437.293634][T21534] nfs: Unknown parameter 'ntext' [ 1438.895446][T21555] tipc: Invalid UDP bearer configuration [ 1438.895752][T21555] tipc: Enabling of bearer rejected, failed to enable media [ 1438.961163][T21555] fuse: Unknown parameter 'group_i00000000000000000000' [ 1441.212209][T21572] futex_wake_op: syz.1.4380 tries to shift op by -33; fix this program [ 1441.248375][T21572] netdevsim netdevsim1: Direct firmware load for . [ 1441.248375][T21572] failed with error -2 [ 1441.261325][T21572] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1441.261325][T21572] [ 1441.542774][T21568] loop9: detected capacity change from 0 to 32768 [ 1441.647771][T21568] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1441.840404][T21568] XFS (loop9): Ending clean mount [ 1441.863177][T21568] XFS (loop9): Quotacheck needed: Please wait. [ 1441.965331][T21568] XFS (loop9): Quotacheck: Done. [ 1443.216550][T20402] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1447.814494][T21626] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1449.393464][T21653] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1450.731067][T21663] xt_time: unknown flags 0xc [ 1451.831547][T21673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1452.116338][T21677] futex_wake_op: syz.9.4406 tries to shift op by -33; fix this program [ 1452.133200][T21677] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1452.156613][T21677] netdevsim netdevsim9: Direct firmware load for . [ 1452.156613][T21677] failed with error -2 [ 1452.171977][T21677] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1452.171977][T21677] [ 1452.246654][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4414'. [ 1452.265441][T14877] Bluetooth: Wrong link type (-22) [ 1452.506584][T14877] Bluetooth: hci1: unexpected event for opcode 0x0c38 [ 1453.567126][T21693] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1454.670652][T21715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4427'. [ 1457.053845][T21747] sd 0:0:1:0: PR command failed: 1026 [ 1457.061050][T21747] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1457.069789][T21747] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1458.336731][T21760] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4440'. [ 1458.379414][T21751] tipc: Enabling of bearer rejected, already enabled [ 1458.767901][T21772] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4443'. [ 1459.704590][T21791] tipc: Invalid UDP bearer configuration [ 1459.704657][T21791] tipc: Enabling of bearer rejected, failed to enable media [ 1460.015652][T21799] bridge_slave_0: left allmulticast mode [ 1460.023951][T21799] bridge_slave_0: left promiscuous mode [ 1460.030882][T21799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.080191][T21799] bridge_slave_1: left allmulticast mode [ 1460.080364][T21808] netlink: 'syz.8.4453': attribute type 10 has an invalid length. [ 1460.089850][T21799] bridge_slave_1: left promiscuous mode [ 1460.104123][T21799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.274947][T21799] bond0: (slave bond_slave_0): Releasing backup interface [ 1460.463805][T21799] bond0: (slave bond_slave_1): Releasing backup interface [ 1460.480966][T21813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4457'. [ 1460.502751][T21799] team_slave_0: left promiscuous mode [ 1461.319356][T21802] Bluetooth: hci2: command 0x0406 tx timeout [ 1461.390962][T21799] team0: Port device team_slave_0 removed [ 1461.441231][T21799] team_slave_1: left promiscuous mode [ 1461.453136][T21799] team0: Port device team_slave_1 removed [ 1461.460951][T21799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.469832][T21799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.506210][T21799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.515155][T21799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.544703][T21808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.582377][T21808] bond0: entered promiscuous mode [ 1461.602886][T21808] team0: Port device bond0 added [ 1461.968411][ T30] audit: type=1326 audit(1750102022.627:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.9.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1462.013576][ T30] audit: type=1326 audit(1750102022.655:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.9.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1462.046923][ T30] audit: type=1326 audit(1750102022.655:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.9.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1462.164756][ T30] audit: type=1326 audit(1750102022.655:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.9.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1462.198633][T14877] Bluetooth: hci3: command 0x0406 tx timeout [ 1462.219034][ T30] audit: type=1326 audit(1750102022.655:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.9.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1462.246695][ T30] audit: type=1326 audit(1750102022.655:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.9.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1462.275596][ T30] audit: type=1326 audit(1750102022.655:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.9.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1462.302770][ T30] audit: type=1326 audit(1750102022.665:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.9.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1462.335002][ T30] audit: type=1326 audit(1750102022.665:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.9.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1462.362746][ T30] audit: type=1326 audit(1750102022.665:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.9.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1463.188207][T21845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4471'. [ 1463.270540][T21833] loop9: detected capacity change from 0 to 32768 [ 1463.396103][T21833] non-latin1 character 0x466c found in JFS file name [ 1463.404162][T21833] mount with iocharset=utf8 to access [ 1465.184468][T21867] overlayfs: workdir and upperdir must reside under the same mount [ 1465.379329][T21869] tipc: Enabling of bearer rejected, already enabled [ 1466.264097][T21878] netlink: 'syz.9.4481': attribute type 1 has an invalid length. [ 1469.510497][T21898] loop9: detected capacity change from 0 to 1024 [ 1469.574974][T21900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4488'. [ 1469.746201][T21898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1469.975598][T21898] overlayfs: failed to resolve './file1': -2 [ 1470.415661][T20402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.438524][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1470.438544][ T30] audit: type=1326 audit(1750102030.550:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.7.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1470.627831][ T30] audit: type=1326 audit(1750102030.550:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.7.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1470.755470][ T30] audit: type=1326 audit(1750102030.588:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.7.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1470.961193][ T30] audit: type=1326 audit(1750102030.588:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.7.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1471.714191][ T30] audit: type=1326 audit(1750102030.588:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.7.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1471.743915][ T30] audit: type=1326 audit(1750102030.597:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.7.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1471.772698][ T30] audit: type=1326 audit(1750102030.597:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.7.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1471.838522][ T30] audit: type=1326 audit(1750102030.597:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.7.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1471.852011][T21926] netlink: 'syz.8.4484': attribute type 13 has an invalid length. [ 1472.020508][ T30] audit: type=1326 audit(1750102030.672:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.7.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1472.164690][ T30] audit: type=1326 audit(1750102030.672:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.7.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1473.144695][T21942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4500'. [ 1474.552191][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4507'. [ 1475.908910][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1475.908930][ T30] audit: type=1326 audit(1750102035.667:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.2.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1476.025980][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4507'. [ 1476.187731][ T30] audit: type=1326 audit(1750102035.704:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.2.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1476.402825][ T30] audit: type=1326 audit(1750102035.704:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.2.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1476.524430][ T30] audit: type=1326 audit(1750102035.704:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.2.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1476.579935][T21773] Bluetooth: Wrong link type (-22) [ 1476.637405][ T30] audit: type=1326 audit(1750102035.704:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.2.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1476.680464][ T30] audit: type=1326 audit(1750102035.704:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.2.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1476.727639][ T30] audit: type=1326 audit(1750102035.704:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.2.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1476.933576][ T30] audit: type=1326 audit(1750102035.704:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.2.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1476.961125][ T30] audit: type=1326 audit(1750102035.704:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.2.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1477.089175][T21987] netlink: 'syz.9.4514': attribute type 4 has an invalid length. [ 1477.099024][T21987] netlink: 17 bytes leftover after parsing attributes in process `syz.9.4514'. [ 1477.220425][ T30] audit: type=1326 audit(1750102035.704:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.2.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5c58e929 code=0x7ffc0000 [ 1479.752517][T22021] overlayfs: failed to resolve './file1': -2 [ 1480.628303][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1480.635835][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1480.650589][T22033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4531'. [ 1481.691723][T22051] tipc: Started in network mode [ 1481.774582][T22051] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 1481.955567][T22051] tipc: Enabled bearer , priority 10 [ 1482.746555][T22062] xt_time: unknown flags 0xc [ 1483.151022][T14596] tipc: Node number set to 10070698 [ 1484.660851][T22084] futex_wake_op: syz.8.4540 tries to shift op by -33; fix this program [ 1484.684068][T22084] netdevsim netdevsim8: Direct firmware load for . [ 1484.684068][T22084] failed with error -2 [ 1484.709739][T22084] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1484.709739][T22084] [ 1485.847406][T22101] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1488.209681][T22116] tipc: Started in network mode [ 1488.215702][T22116] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 1488.359411][T22116] tipc: Enabled bearer , priority 10 [ 1489.811765][T10435] tipc: Node number set to 10070698 [ 1490.223344][T22141] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1493.209179][T22160] ceph: No mds server is up or the cluster is laggy [ 1494.214187][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1494.214208][ T30] audit: type=1326 audit(1750102052.785:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.7.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1494.633012][ T30] audit: type=1326 audit(1750102052.841:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.7.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1494.885905][ T30] audit: type=1326 audit(1750102052.841:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.7.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1494.933900][ T30] audit: type=1326 audit(1750102052.841:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.7.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1494.962034][ T30] audit: type=1326 audit(1750102052.841:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.7.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1494.990305][ T30] audit: type=1326 audit(1750102052.841:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.7.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1495.028235][ T30] audit: type=1326 audit(1750102052.878:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.7.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1495.086172][ T30] audit: type=1326 audit(1750102052.878:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.7.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1495.187385][ T30] audit: type=1326 audit(1750102052.888:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.7.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1495.247713][ T30] audit: type=1326 audit(1750102052.888:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.7.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1496.249955][T22205] sd 0:0:1:0: PR command failed: 1026 [ 1496.258110][T22205] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1496.266246][T22205] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1497.264443][T22210] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1497.753553][T22214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1498.665998][T22231] overlayfs: missing 'workdir' [ 1499.938625][T22233] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4591'. [ 1499.950044][T22233] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4591'. [ 1499.961504][T22233] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1502.401468][T22257] can0: slcan on ttyS3. [ 1507.338318][T22256] can0 (unregistered): slcan off ttyS3. [ 1509.676611][T22301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4608'. [ 1509.687470][T22301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4608'. [ 1509.698776][T22301] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1511.124331][T22315] loop9: detected capacity change from 0 to 1024 [ 1511.629618][T22327] overlayfs: failed to clone upperpath [ 1511.717658][T22328] lo speed is unknown, defaulting to 1000 [ 1511.742872][T22328] lo speed is unknown, defaulting to 1000 [ 1511.759638][T22328] lo speed is unknown, defaulting to 1000 [ 1512.355350][T22328] infiniband sz1: set active [ 1512.361432][T22328] infiniband sz1: added lo [ 1512.381989][T10376] lo speed is unknown, defaulting to 1000 [ 1512.517651][T22328] RDS/IB: sz1: added [ 1512.523387][T22328] smc: adding ib device sz1 with port count 1 [ 1512.531059][T22328] smc: ib device sz1 port 1 has pnetid [ 1512.543921][T22328] lo speed is unknown, defaulting to 1000 [ 1512.566911][T10376] lo speed is unknown, defaulting to 1000 [ 1513.162884][T22328] lo speed is unknown, defaulting to 1000 [ 1513.428621][T22328] lo speed is unknown, defaulting to 1000 [ 1513.729567][T22328] lo speed is unknown, defaulting to 1000 [ 1513.872354][T22328] lo speed is unknown, defaulting to 1000 [ 1514.015111][T22328] lo speed is unknown, defaulting to 1000 [ 1514.154312][T22328] lo speed is unknown, defaulting to 1000 [ 1516.389434][T22368] lo speed is unknown, defaulting to 1000 [ 1516.638573][T21773] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 1516.945058][T20189] hfsplus: b-tree write err: -5, ino 4 [ 1519.228836][T22397] lo speed is unknown, defaulting to 1000 [ 1520.964133][T21773] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1520.975094][T21773] Bluetooth: hci5: Injecting HCI hardware error event [ 1520.987980][T14877] Bluetooth: hci5: hardware error 0x00 [ 1522.360318][T22428] lo speed is unknown, defaulting to 1000 [ 1523.283611][T14877] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1527.434544][T22466] overlayfs: failed to resolve './file1': -2 [ 1527.733915][T22467] xt_time: unknown flags 0xc [ 1529.371384][T22480] lo speed is unknown, defaulting to 1000 [ 1531.460916][T22497] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4658'. [ 1531.528596][T22502] overlayfs: failed to resolve './file1': -2 [ 1532.840964][ T5920] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1533.046902][ T5920] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.059707][ T5920] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1533.078014][ T5920] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1533.090016][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.100030][ T5920] usb 10-1: Product: syz [ 1533.105294][ T5920] usb 10-1: Manufacturer: syz [ 1533.112328][ T5920] usb 10-1: SerialNumber: syz [ 1533.370899][T22510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.383878][T22510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.442784][ T5920] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 1533.470410][ T5920] usb 10-1: USB disconnect, device number 7 [ 1534.803165][T22538] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1535.034716][T22542] overlayfs: failed to resolve './file1': -2 [ 1535.285961][T22544] lo speed is unknown, defaulting to 1000 [ 1537.419342][T22560] lo speed is unknown, defaulting to 1000 [ 1539.348757][T14877] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 1540.212065][T22585] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1540.719860][T22597] lo speed is unknown, defaulting to 1000 [ 1543.733907][T22615] lo speed is unknown, defaulting to 1000 [ 1544.324542][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1544.324563][ T30] audit: type=1326 audit(1750102099.648:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.8.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1544.699425][ T30] audit: type=1326 audit(1750102099.667:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.8.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1544.860019][ T30] audit: type=1326 audit(1750102099.667:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.8.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1544.927353][ T30] audit: type=1326 audit(1750102099.835:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.8.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1544.958438][ T30] audit: type=1326 audit(1750102099.835:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.8.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27b5b8d290 code=0x7ffc0000 [ 1544.988192][ T30] audit: type=1326 audit(1750102099.835:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.8.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1545.138565][ T30] audit: type=1326 audit(1750102099.835:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.8.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1545.341109][ T30] audit: type=1326 audit(1750102099.835:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.8.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27b5b8e52b code=0x7ffc0000 [ 1545.546099][ T30] audit: type=1326 audit(1750102099.835:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.8.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1545.574214][ T30] audit: type=1326 audit(1750102099.835:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.8.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1545.718726][T22627] netlink: 'syz.9.4696': attribute type 4 has an invalid length. [ 1545.728126][T22627] netlink: 17 bytes leftover after parsing attributes in process `syz.9.4696'. [ 1546.301048][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.308650][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.603183][T22632] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4699'. [ 1549.053206][T22672] lo speed is unknown, defaulting to 1000 [ 1549.932527][T22663] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4710'. [ 1553.549263][T22709] futex_wake_op: syz.8.4715 tries to shift op by -33; fix this program [ 1554.108928][T22709] netdevsim netdevsim8: Direct firmware load for . [ 1554.108928][T22709] failed with error -2 [ 1554.121737][T22709] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1554.121737][T22709] [ 1554.540383][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1554.540405][ T30] audit: type=1326 audit(1750102109.217:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22716 comm="syz.7.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1554.787687][ T30] audit: type=1326 audit(1750102109.255:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22716 comm="syz.7.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1554.827351][ T30] audit: type=1326 audit(1750102109.255:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22716 comm="syz.7.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1554.871954][ T30] audit: type=1326 audit(1750102109.255:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22716 comm="syz.7.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1555.025277][ T30] audit: type=1326 audit(1750102109.255:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22716 comm="syz.7.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ae458d290 code=0x7ffc0000 [ 1555.120850][ T30] audit: type=1326 audit(1750102109.255:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22716 comm="syz.7.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1555.120909][ T30] audit: type=1326 audit(1750102109.273:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22716 comm="syz.7.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1555.120957][ T30] audit: type=1326 audit(1750102109.292:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22716 comm="syz.7.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ae458e52b code=0x7ffc0000 [ 1555.121005][ T30] audit: type=1326 audit(1750102109.292:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22716 comm="syz.7.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1555.121053][ T30] audit: type=1326 audit(1750102109.292:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22716 comm="syz.7.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0ae458e929 code=0x7ffc0000 [ 1555.247630][T21773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1555.251869][T21773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1555.252951][T21773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1555.254762][T21773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1555.255497][T21773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1555.449551][T22722] lo speed is unknown, defaulting to 1000 [ 1555.785148][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4724'. [ 1555.853973][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.856231][T22727] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4724'. [ 1556.511862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1556.638109][ C1] vkms_vblank_simulate: vblank timer overrun [ 1556.843585][T22722] chnl_net:caif_netlink_parms(): no params data found [ 1557.011888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1557.480499][T22722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.480674][T22722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.480878][T22722] bridge_slave_0: entered allmulticast mode [ 1557.483563][T22722] bridge_slave_0: entered promiscuous mode [ 1557.486583][T22722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.486708][T22722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.486877][T22722] bridge_slave_1: entered allmulticast mode [ 1557.488976][T22722] bridge_slave_1: entered promiscuous mode [ 1557.493526][T21773] Bluetooth: hci0: command tx timeout [ 1557.716840][T22722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.720678][T22722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.968009][T22722] team0: Port device team_slave_0 added [ 1557.973930][T22722] team0: Port device team_slave_1 added [ 1558.131895][T22722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.879246][T22722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1558.916359][T22722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.949593][T22722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.970228][T22722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.016935][T22722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1559.091073][T22761] lo speed is unknown, defaulting to 1000 [ 1559.500265][T22722] hsr_slave_0: entered promiscuous mode [ 1559.519679][T22722] hsr_slave_1: entered promiscuous mode [ 1559.530526][T22722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1559.545505][T22722] Cannot create hsr debugfs directory [ 1559.766500][T21773] Bluetooth: hci0: command tx timeout [ 1561.933648][T21773] Bluetooth: hci0: command tx timeout [ 1563.604052][T22722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1563.921576][T22722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1564.207603][T21773] Bluetooth: hci0: command tx timeout [ 1564.843273][T22722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1564.962292][T22722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1565.120499][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1565.120521][ T30] audit: type=1326 audit(1750102119.114:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22821 comm="syz.8.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1565.257926][ T30] audit: type=1326 audit(1750102119.161:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22821 comm="syz.8.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1565.376608][ T30] audit: type=1326 audit(1750102119.161:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22821 comm="syz.8.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1565.447267][ T30] audit: type=1326 audit(1750102119.161:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22821 comm="syz.8.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1565.513206][T22722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1565.626269][T22722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1565.735870][ T30] audit: type=1326 audit(1750102119.161:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22821 comm="syz.8.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27b5b8d290 code=0x7ffc0000 [ 1565.740647][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.771364][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.771650][ T30] audit: type=1326 audit(1750102119.161:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22821 comm="syz.8.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1566.469883][T22840] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1566.485058][T22840] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1566.498018][T22840] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1566.559094][ T30] audit: type=1326 audit(1750102119.161:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22821 comm="syz.8.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27b5b8e52b code=0x7ffc0000 [ 1566.624517][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.633163][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.715439][ T30] audit: type=1326 audit(1750102119.161:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22821 comm="syz.8.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1566.768559][ T30] audit: type=1326 audit(1750102119.161:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22821 comm="syz.8.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27b5b8e52b code=0x7ffc0000 [ 1566.897886][ T30] audit: type=1326 audit(1750102119.161:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22821 comm="syz.8.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1566.980120][T22851] overlayfs: failed to resolve './file0': -2 [ 1567.570802][T22722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1567.745051][T22722] veth0_vlan: entered promiscuous mode [ 1567.828170][T22722] veth1_vlan: entered promiscuous mode [ 1567.999807][T22722] veth0_macvtap: entered promiscuous mode [ 1568.055175][T22722] veth1_macvtap: entered promiscuous mode [ 1568.271518][T22722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.140638][T22889] dummy0: entered promiscuous mode [ 1569.157994][T22722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.206286][T14877] Bluetooth: hci4: command 0x1003 tx timeout [ 1569.322416][T21773] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1569.369584][T22883] dummy0: left promiscuous mode [ 1569.821743][T22722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.863624][T22722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.909991][T22722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.953121][T22722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.498840][T22908] lo speed is unknown, defaulting to 1000 [ 1573.176263][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.354910][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.380976][T22930] loop9: detected capacity change from 0 to 16 [ 1573.436298][T22930] erofs (device loop9): mounted with root inode @ nid 36. [ 1573.557819][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.580526][T22933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4767'. [ 1573.599862][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.617386][T22930] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1573.666775][T22930] erofs (device loop9): failed to decompress -43 in[46, 4050] out[1851] [ 1573.711244][T22930] erofs (device loop9): read error -117 @ 43 of nid 36 [ 1574.451722][T22953] vlan2: entered promiscuous mode [ 1574.475730][T22953] vlan2: entered allmulticast mode [ 1574.871081][T22970] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4778'. [ 1575.337932][T22982] netlink: 'syz.2.4780': attribute type 4 has an invalid length. [ 1575.347420][T22982] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4780'. [ 1575.743413][T22999] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4786'. [ 1575.767658][T22999] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4786'. [ 1576.091845][T23004] netlink: 'syz.9.4789': attribute type 13 has an invalid length. [ 1576.340017][T23012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4791'. [ 1576.429667][T23011] lo speed is unknown, defaulting to 1000 [ 1577.577773][T23037] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1578.566685][T23042] overlayfs: missing 'lowerdir' [ 1579.054392][T23053] loop9: detected capacity change from 0 to 512 [ 1579.234673][T23053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1579.271466][T23046] syzkaller1: entered promiscuous mode [ 1579.278063][T23046] syzkaller1: entered allmulticast mode [ 1579.288125][T23053] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1580.268870][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1580.268891][ T30] audit: type=1326 audit(1750102133.285:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23066 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1580.357362][T20402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1580.403404][ T30] audit: type=1326 audit(1750102133.332:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23066 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1580.488909][ T30] audit: type=1326 audit(1750102133.397:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23066 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1580.537585][ T30] audit: type=1326 audit(1750102133.397:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23066 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1580.677194][ T30] audit: type=1326 audit(1750102133.397:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23066 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1580.826342][ T30] audit: type=1326 audit(1750102133.426:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23066 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1581.102979][ T30] audit: type=1326 audit(1750102133.715:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23066 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1581.182326][ T30] audit: type=1326 audit(1750102133.715:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23066 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1581.793978][ T30] audit: type=1326 audit(1750102133.715:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23066 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1582.000116][ T30] audit: type=1326 audit(1750102133.715:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23066 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b5b8e929 code=0x7ffc0000 [ 1583.769537][T23134] loop9: detected capacity change from 0 to 512 [ 1583.783273][T23134] EXT4-fs: Ignoring removed i_version option [ 1583.964123][T23134] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1585.687288][T20402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.824231][T23152] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1586.307976][T23162] fuse: Bad value for 'fd' [ 1587.085789][T21773] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 1587.747204][T23176] loop3: detected capacity change from 0 to 1024 [ 1587.984180][T23176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1588.105144][T23182] lo speed is unknown, defaulting to 1000 [ 1588.229946][T23190] loop9: detected capacity change from 0 to 256 [ 1588.243754][T23190] exfat: Unknown parameter 'iochar' [ 1589.499763][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.011559][T23203] xt_time: unknown flags 0xc [ 1591.986768][T23218] lo speed is unknown, defaulting to 1000 [ 1593.385404][T23228] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1595.859636][T23253] overlayfs: failed to resolve './file0': -2 [ 1599.358730][T23291] overlayfs: failed to resolve './file2': -2 [ 1601.999414][T23320] loop9: detected capacity change from 0 to 2048 [ 1602.195219][T23300] loop9: p1 < > p3 [ 1602.245039][T23329] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4869'. [ 1602.245057][T23300] loop9: p3 size 134217728 extends beyond EOD, truncated [ 1602.425590][T23320] loop9: p1 < > p3 [ 1602.457649][T23320] loop9: p3 size 134217728 extends beyond EOD, truncated [ 1602.544706][ T5204] loop9: p1 < > p3 [ 1602.584363][ T5204] loop9: p3 size 134217728 extends beyond EOD, truncated [ 1604.109493][T23300] udevd[23300]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1604.125081][T23301] udevd[23301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1604.241978][T23300] udevd[23300]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1604.279999][T23301] udevd[23301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1604.475420][T23300] udevd[23300]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1604.490869][T23301] udevd[23301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1606.847200][T23440] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4876'. [ 1607.141958][T23444] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1607.503736][T23447] syzkaller0: entered promiscuous mode [ 1607.536388][T23447] syzkaller0: entered allmulticast mode [ 1607.572562][T23391] syzkaller0: tun_net_xmit 48 [ 1611.980715][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1611.989025][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.068049][T23482] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1612.680828][T23484] loop3: detected capacity change from 0 to 40427 [ 1612.714673][T23484] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1612.776058][T23484] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1612.819311][T23484] F2FS-fs (loop3): invalid crc value [ 1613.249749][T23484] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1613.275659][T23484] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1614.404033][T23497] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1616.010395][T22722] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1616.032804][T22722] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1616.070381][T22722] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1616.146407][T22722] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1616.179838][T22722] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1616.189238][T22722] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1616.198386][T22722] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1618.268595][T23510] loop3: detected capacity change from 0 to 512 [ 1618.314532][T23510] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1618.453758][T23510] EXT4-fs (loop3): 1 truncate cleaned up [ 1618.470465][T23510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1620.434863][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.895858][T23471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4887'. [ 1621.365661][T23521] syzkaller1: entered promiscuous mode [ 1621.372611][T23521] syzkaller1: entered allmulticast mode [ 1623.938244][T23544] lo speed is unknown, defaulting to 1000 [ 1626.050888][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1626.050911][ T30] audit: type=1326 audit(1750102176.108:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1627.182513][ T30] audit: type=1326 audit(1750102176.108:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1627.225729][ T30] audit: type=1326 audit(1750102176.164:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1627.489551][T23570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1628.500436][ T30] audit: type=1326 audit(1750102176.164:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1628.694308][ T30] audit: type=1326 audit(1750102176.164:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1629.142666][ T30] audit: type=1326 audit(1750102176.164:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1629.236211][T23580] loop9: detected capacity change from 0 to 256 [ 1629.872964][T23580] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1630.469445][T23587] binder: 23581:23587 ioctl c0306201 0 returned -14 [ 1631.041861][ T30] audit: type=1326 audit(1750102176.164:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1631.260211][ T30] audit: type=1326 audit(1750102176.164:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1631.516248][ T30] audit: type=1326 audit(1750102176.173:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1632.432708][ T30] audit: type=1326 audit(1750102176.173:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1632.672389][ T30] audit: type=1326 audit(1750102176.173:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1632.702821][ T30] audit: type=1326 audit(1750102176.173:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1632.814985][ T30] audit: type=1326 audit(1750102176.192:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1632.944858][T23602] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4919'. [ 1632.958475][ T30] audit: type=1326 audit(1750102176.192:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1633.189315][T23604] lo speed is unknown, defaulting to 1000 [ 1633.831250][ T30] audit: type=1326 audit(1750102176.192:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1634.012264][ T30] audit: type=1326 audit(1750102176.192:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59db8e929 code=0x7ffc0000 [ 1634.433427][T23610] futex_wake_op: syz.3.4915 tries to shift op by -33; fix this program [ 1634.470634][T23610] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1634.574047][T23611] netdevsim netdevsim3: Direct firmware load for . [ 1634.574047][T23611] failed with error -2 [ 1634.589194][T23611] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1634.589194][T23611] [ 1637.469452][T23633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4930'. [ 1637.927030][T23638] netlink: 46 bytes leftover after parsing attributes in process `syz.2.4931'. [ 1638.858945][T23642] loop9: detected capacity change from 0 to 512 [ 1639.085378][T23642] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1639.215324][T23642] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1641.018841][T23664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4936'. [ 1641.486958][T20402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1642.291900][T23671] xt_CT: No such helper "netbios-ns" [ 1643.185002][T23683] lo speed is unknown, defaulting to 1000 [ 1647.954926][T23725] loop3: detected capacity change from 0 to 128 [ 1648.037237][T23725] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1648.187800][T23725] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1648.331646][T23725] ext2 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1649.028037][T22722] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1650.238449][T23757] loop9: detected capacity change from 0 to 512 [ 1650.249256][T23757] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1650.972741][T23757] EXT4-fs (loop9): 1 truncate cleaned up [ 1650.981572][T23757] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1651.350058][T20402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.389399][ T5842] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1651.433642][T23776] overlayfs: failed to clone upperpath [ 1651.580257][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 1651.600841][ T5842] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 1651.644499][ T5842] usb 4-1: config 8 has no interface number 0 [ 1651.664877][ T30] audit: type=1326 audit(1750102200.063:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.9.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1651.692181][ T5842] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1651.709849][ T5842] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1651.722557][ T30] audit: type=1326 audit(1750102200.063:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.9.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1651.770641][ T5842] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1651.794014][ T5842] usb 4-1: config 8 interface 39 has no altsetting 0 [ 1651.814912][ T5842] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1651.829472][ T30] audit: type=1326 audit(1750102200.063:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.9.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1651.858859][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.909113][ T30] audit: type=1326 audit(1750102200.063:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.9.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1651.916828][ T5842] usb 4-1: Product: syz [ 1651.961760][ T30] audit: type=1326 audit(1750102200.063:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.9.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1651.995404][ T30] audit: type=1326 audit(1750102200.129:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.9.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1652.907358][T23785] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4978'. [ 1652.960376][ T5842] usb 4-1: Manufacturer: syz [ 1652.961414][T23785] unsupported nlmsg_type 40 [ 1652.966458][ T30] audit: type=1326 audit(1750102200.129:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.9.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1652.999453][ T5842] usb 4-1: SerialNumber: syz [ 1653.109919][ T30] audit: type=1326 audit(1750102200.157:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.9.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1653.247802][ T30] audit: type=1326 audit(1750102200.157:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.9.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1653.301185][ T30] audit: type=1326 audit(1750102200.157:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.9.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f971bb8e929 code=0x7ffc0000 [ 1654.397391][ T5842] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -110 [ 1654.407895][ T5842] ipheth 4-1:8.39: probe with driver ipheth failed with error -110 [ 1654.530342][T19842] usb 4-1: USB disconnect, device number 50 [ 1655.600501][T23809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4987'. [ 1655.613313][T23807] loop3: detected capacity change from 0 to 256 [ 1655.715671][T23807] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1659.525511][T23830] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4994'. [ 1660.080491][T19359] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1660.379910][T19359] usb 4-1: Using ep0 maxpacket: 16 [ 1660.411295][T19359] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 1660.440103][T19359] usb 4-1: config 8 has no interface number 0 [ 1660.448813][T19359] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1660.464748][T19359] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1660.477005][T19359] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1660.505646][T19359] usb 4-1: config 8 interface 39 has no altsetting 0 [ 1660.536536][T19359] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1660.577145][T19359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.600096][T19359] usb 4-1: Product: syz [ 1660.608149][T19359] usb 4-1: Manufacturer: syz [ 1660.613700][T19359] usb 4-1: SerialNumber: syz [ 1662.127174][T19359] ipheth 4-1:8.39: ipheth_enable_ncm: usb_control_msg: -110 [ 1662.371624][T23857] overlayfs: failed to clone upperpath [ 1662.463208][T23860] rdma_rxe: rxe_newlink: failed to add lo [ 1662.984491][T19359] ipheth 4-1:8.39: Apple iPhone USB Ethernet device attached [ 1663.042607][T19359] usb 4-1: USB disconnect, device number 51 [ 1663.174333][T19359] ipheth 4-1:8.39: Apple iPhone USB Ethernet now disconnected [ 1663.939181][T23872] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5007'. [ 1664.378244][T23878] overlayfs: failed to clone upperpath [ 1665.014353][T23887] loop3: detected capacity change from 0 to 512 [ 1665.193083][T23887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1665.209229][T23887] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1666.094236][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1666.751910][T23916] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5019'. [ 1668.309288][T23928] overlayfs: failed to clone upperpath [ 1668.316613][T19842] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1668.419700][T23929] rdma_rxe: rxe_newlink: failed to add lo [ 1668.885104][T19842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1668.942760][T19842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1668.967135][T19842] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1668.978819][T19842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1669.002753][T19842] usb 4-1: SerialNumber: syz [ 1669.314650][T19842] usb 4-1: 0:2 : does not exist [ 1669.355847][T19842] usb 4-1: USB disconnect, device number 52 [ 1669.640692][T23770] udevd[23770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1670.337812][T23951] loop3: detected capacity change from 0 to 1024 [ 1672.161100][T23970] netlink: 'syz.7.5038': attribute type 10 has an invalid length. [ 1672.257983][T23970] dummy0: entered promiscuous mode [ 1672.289573][T23970] dummy0: entered allmulticast mode [ 1675.278252][T23435] hfsplus: b-tree write err: -5, ino 4 [ 1675.672185][T24005] netlink: 'syz.2.5050': attribute type 6 has an invalid length. [ 1677.657025][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1677.664628][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.512877][T24030] loop9: detected capacity change from 0 to 512 [ 1679.562568][T24030] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1679.612798][T24030] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1679.655278][T24030] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 1679.697828][T24030] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1679.752013][T24030] System zones: 0-2, 18-18, 34-34 [ 1679.800557][T24030] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.5060: iget: bad i_size value: 360287970189639680 [ 1679.838896][T24042] lo speed is unknown, defaulting to 1000 [ 1679.868611][T24030] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.5060: couldn't read orphan inode 15 (err -117) [ 1679.968787][T24046] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1680.088731][T24030] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1680.518915][T24052] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5060'. [ 1681.174288][T20402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1682.525435][T21773] Bluetooth: hci1: ISO packet too small [ 1683.936073][T24074] lo speed is unknown, defaulting to 1000 [ 1684.160276][T24089] loop3: detected capacity change from 0 to 512 [ 1684.212554][T24089] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1684.259391][T24089] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1684.362408][T24089] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 1684.446529][T24089] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1684.497286][T24089] System zones: 0-2, 18-18, 34-34 [ 1684.549416][T24089] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.5078: iget: bad i_size value: 360287970189639680 [ 1684.611455][T24089] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.5078: couldn't read orphan inode 15 (err -117) [ 1684.678374][T24089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1685.145717][T24111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5078'. [ 1685.259569][T24103] lo speed is unknown, defaulting to 1000 [ 1686.005720][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.112988][T24136] netlink: 'syz.7.5091': attribute type 4 has an invalid length. [ 1687.122380][T24136] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5091'. [ 1687.922210][T24133] loop3: detected capacity change from 0 to 512 [ 1687.944008][T24133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1688.089573][T24133] EXT4-fs (loop3): 1 truncate cleaned up [ 1688.108649][T24133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1688.607189][ T5923] kworker/1:5 (5923) used greatest stack depth: 14712 bytes left [ 1689.667316][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.957269][T24160] loop3: detected capacity change from 0 to 512 [ 1690.000549][T24160] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1690.099502][T24160] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1690.146176][T24160] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 1690.159951][T24160] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1690.172171][T24160] System zones: 0-2, 18-18, 34-34 [ 1690.196020][T24160] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.5097: iget: bad i_size value: 360287970189639680 [ 1690.228637][T24160] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.5097: couldn't read orphan inode 15 (err -117) [ 1690.304295][T24160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1690.422609][T24163] lo speed is unknown, defaulting to 1000 [ 1690.501471][T24166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1690.598241][ T5842] lo speed is unknown, defaulting to 1000 [ 1690.681973][T24175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5097'. [ 1691.257139][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.807914][T24189] netlink: 'syz.3.5102': attribute type 4 has an invalid length. [ 1691.817378][T24189] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5102'. [ 1694.702974][T24215] loop9: detected capacity change from 0 to 4096 [ 1694.798437][T24215] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1695.585884][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.803224][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1695.846546][T24234] netlink: 'syz.2.5119': attribute type 1 has an invalid length. [ 1696.925877][T20402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1697.467428][T24249] lo speed is unknown, defaulting to 1000 [ 1698.046989][T24258] sd 0:0:1:0: PR command failed: 1026 [ 1698.115527][T24258] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1698.280083][T24258] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1698.660559][T24265] lo speed is unknown, defaulting to 1000 [ 1699.843634][T24296] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5141'. [ 1701.456613][T24314] loop3: detected capacity change from 0 to 512 [ 1701.607274][T24314] loop3: detected capacity change from 0 to 512 [ 1701.648482][T24314] EXT4-fs: Ignoring removed mblk_io_submit option [ 1701.732749][T24314] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 1702.433289][T24323] hub 8-0:1.0: USB hub found [ 1702.441183][T24323] hub 8-0:1.0: 1 port detected [ 1703.244358][T24345] loop3: detected capacity change from 0 to 512 [ 1703.464985][T24347] lo speed is unknown, defaulting to 1000 [ 1704.271047][T24345] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.5158: corrupted in-inode xattr: invalid ea_ino [ 1704.288000][T24345] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.5158: couldn't read orphan inode 15 (err -117) [ 1704.304889][T24345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1706.662913][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1707.262884][T24368] syzkaller1: entered promiscuous mode [ 1707.269669][T24368] syzkaller1: entered allmulticast mode [ 1708.413512][T24383] loop3: detected capacity change from 0 to 512 [ 1709.353541][T24383] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1710.081042][T24383] EXT4-fs (loop3): 1 truncate cleaned up [ 1710.089914][T24383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1710.439041][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1710.643568][T24389] loop3: detected capacity change from 0 to 1024 [ 1710.701720][T24389] hfsplus: failed to load catalog file [ 1710.852576][T24394] fuse: Bad value for 'group_id' [ 1710.863409][T24396] loop9: detected capacity change from 0 to 128 [ 1710.896858][T24394] fuse: Bad value for 'group_id' [ 1710.941267][T24396] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1711.007337][T24396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1711.084605][T24400] loop3: detected capacity change from 0 to 512 [ 1712.000924][T24408] lo speed is unknown, defaulting to 1000 [ 1712.723283][T24400] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.5175: corrupted in-inode xattr: invalid ea_ino [ 1712.740791][T24400] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.5175: couldn't read orphan inode 15 (err -117) [ 1712.759491][T24400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1714.084055][T24416] input: syz0 as /devices/virtual/input/input55 [ 1715.333722][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.486472][T24455] pimreg: entered allmulticast mode [ 1720.505255][T24455] pimreg: left allmulticast mode [ 1721.633384][T24464] lo speed is unknown, defaulting to 1000 [ 1722.695576][T14596] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1722.900257][T14596] usb 4-1: Using ep0 maxpacket: 8 [ 1722.948069][T14596] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.979236][T14596] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1723.017323][T14596] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1723.054817][T14596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.098594][T14596] usb 4-1: config 0 descriptor?? [ 1723.617450][T14596] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 1723.654150][T14596] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 1723.689423][T14596] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 1723.720409][T14596] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 1723.763625][T14596] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 1723.811570][T14596] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 1724.040190][T14596] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 1724.252271][T14596] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 1724.547553][T14596] wacom 0003:056A:0094.0011: Using device in hidraw-only mode [ 1724.750207][T14596] wacom 0003:056A:0094.0011: hidraw0: USB HID v3.ff Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 1724.895460][T14596] usb 4-1: USB disconnect, device number 53 [ 1726.408517][T24515] lo speed is unknown, defaulting to 1000 [ 1728.105435][T14596] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1728.308265][T14596] usb 4-1: Using ep0 maxpacket: 8 [ 1728.331336][T14596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.380504][T14596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1728.403345][T14596] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1728.454556][T14596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.494844][T14596] usb 4-1: config 0 descriptor?? [ 1729.895703][T14596] logitech 0003:046D:C24F.0012: unbalanced collection at end of report description [ 1729.918986][T14596] logitech 0003:046D:C24F.0012: parse failed [ 1729.927274][T14596] logitech 0003:046D:C24F.0012: probe with driver logitech failed with error -22 [ 1730.191712][T19842] usb 4-1: USB disconnect, device number 54 [ 1730.640085][T24562] sd 0:0:1:0: PR command failed: 1026 [ 1730.646854][T24562] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1730.655727][T24562] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1730.798716][T24562] lo speed is unknown, defaulting to 1000 [ 1732.637618][T24573] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1733.697259][T10376] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1734.284805][T10376] usb 10-1: Using ep0 maxpacket: 16 [ 1735.026838][T10376] usb 10-1: config 8 has an invalid interface number: 39 but max is 0 [ 1735.051942][T10376] usb 10-1: config 8 has no interface number 0 [ 1735.075245][T10376] usb 10-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1735.150731][T10376] usb 10-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid maxpacket 43540, setting to 1024 [ 1735.224783][T10376] usb 10-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 1024 [ 1735.304169][T10376] usb 10-1: config 8 interface 39 has no altsetting 0 [ 1735.348356][T10376] usb 10-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1735.395810][T10376] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.446083][T10376] usb 10-1: Product: syz [ 1735.478807][T10376] usb 10-1: Manufacturer: syz [ 1735.510534][T10376] usb 10-1: SerialNumber: syz [ 1735.598515][T24575] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1736.781906][T10376] ipheth 10-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 1736.803416][T10376] ipheth 10-1:8.39: Apple iPhone USB Ethernet device attached [ 1736.816379][T10376] usb 10-1: USB disconnect, device number 8 [ 1739.384758][T10376] ipheth 10-1:8.39: Apple iPhone USB Ethernet now disconnected [ 1739.799971][T24619] lo speed is unknown, defaulting to 1000 [ 1740.374810][T24611] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1742.714997][T21773] Bluetooth: hci0: command tx timeout [ 1742.882745][T24641] syzkaller1: entered promiscuous mode [ 1742.889363][T24641] syzkaller1: entered allmulticast mode [ 1743.343713][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1743.356764][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1744.744130][T24662] loop3: detected capacity change from 0 to 1024 [ 1745.803814][T24670] lo speed is unknown, defaulting to 1000 [ 1747.073863][T23385] hfsplus: b-tree write err: -5, ino 4 [ 1750.636203][T24716] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1753.450123][T24746] pimreg: entered allmulticast mode [ 1755.511873][T24763] lo speed is unknown, defaulting to 1000 [ 1756.456567][T10435] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1756.670784][T24781] loop9: detected capacity change from 0 to 512 [ 1756.715501][T10435] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1756.741147][T24781] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1756.777405][T24781] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1756.798514][T10435] usb 4-1: config 174 has an invalid interface number: 178 but max is 0 [ 1756.808562][T10435] usb 4-1: config 174 has an invalid descriptor of length 105, skipping remainder of the config [ 1756.852616][T10435] usb 4-1: config 174 has no interface number 0 [ 1756.860173][T10435] usb 4-1: config 174 interface 178 has no altsetting 0 [ 1756.861835][T24781] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 1756.903488][T10435] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 1756.926730][T10435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.936354][T10435] usb 4-1: Product: syz [ 1756.958762][T10435] usb 4-1: Manufacturer: syz [ 1756.964307][T10435] usb 4-1: SerialNumber: syz [ 1756.986405][T24781] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1757.014035][T24781] System zones: 0-2, 18-18, 34-34 [ 1757.036916][T24781] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.5297: iget: bad i_size value: 360287970189639680 [ 1757.097942][T24781] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.5297: couldn't read orphan inode 15 (err -117) [ 1757.164510][T24781] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1758.561452][T10435] usb 4-1: bad CDC descriptors [ 1758.568168][T10435] usb 4-1: unsupported MDLM descriptors [ 1758.610757][T10435] usb 4-1: USB disconnect, device number 55 [ 1760.102396][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1760.102420][ T30] audit: type=1800 audit(1750102301.480:508): pid=24821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5297" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 1760.788569][T20402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.280700][T24842] xt_SECMARK: invalid mode: 2 [ 1762.779851][T24840] loop9: detected capacity change from 0 to 512 [ 1763.567432][T24840] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1763.781187][T24840] EXT4-fs (loop9): 1 truncate cleaned up [ 1763.790136][T24840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1764.498427][T20402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.686356][T24927] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1774.141417][T24962] lo speed is unknown, defaulting to 1000 [ 1774.726214][T14596] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1775.857937][T14596] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1775.907560][T14596] usb 10-1: config 174 has an invalid interface number: 178 but max is 0 [ 1775.945244][T14596] usb 10-1: config 174 has an invalid descriptor of length 105, skipping remainder of the config [ 1776.009425][T14596] usb 10-1: config 174 has no interface number 0 [ 1776.017908][T14596] usb 10-1: config 174 interface 178 has no altsetting 0 [ 1776.128529][T14596] usb 10-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 1776.140246][T14596] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.169889][T14596] usb 10-1: Product: syz [ 1776.180466][T14596] usb 10-1: Manufacturer: syz [ 1776.186108][T14596] usb 10-1: SerialNumber: syz [ 1776.465916][T14596] usb 10-1: bad CDC descriptors [ 1776.480955][T14596] usb 10-1: unsupported MDLM descriptors [ 1776.506761][T14596] usb 10-1: USB disconnect, device number 9 [ 1776.673350][T24982] netlink: 46 bytes leftover after parsing attributes in process `syz.8.5360'. [ 1778.379138][T24992] loop9: detected capacity change from 0 to 1024 [ 1781.227017][T24992] EXT4-fs warning (device loop9): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop9. [ 1782.016395][T25006] loop9: detected capacity change from 0 to 256 [ 1782.143233][T25006] FAT-fs (loop9): Directory bread(block 64) failed [ 1782.177306][T25006] FAT-fs (loop9): Directory bread(block 65) failed [ 1782.206714][T25006] FAT-fs (loop9): Directory bread(block 66) failed [ 1782.215036][T25006] FAT-fs (loop9): Directory bread(block 67) failed [ 1782.295651][T25006] FAT-fs (loop9): Directory bread(block 68) failed [ 1782.562350][T25006] FAT-fs (loop9): Directory bread(block 69) failed [ 1782.587336][T25006] FAT-fs (loop9): Directory bread(block 70) failed [ 1782.595636][T25006] FAT-fs (loop9): Directory bread(block 71) failed [ 1782.605112][T25006] FAT-fs (loop9): Directory bread(block 72) failed [ 1782.650993][T25006] FAT-fs (loop9): Directory bread(block 73) failed [ 1786.016757][T25046] loop9: detected capacity change from 0 to 1024 [ 1786.127834][T25046] hfsplus: xattr searching failed [ 1786.220261][T25046] hfsplus: xattr searching failed [ 1786.261134][T25046] hfsplus: xattr searching failed [ 1786.342385][T25051] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5384'. [ 1787.173977][ T1037] hfsplus: b-tree write err: -5, ino 3 [ 1789.254678][T25072] loop3: detected capacity change from 0 to 512 [ 1789.263460][T25072] EXT4-fs: inline encryption not supported [ 1789.272442][T25072] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1789.329286][T25072] EXT4-fs (loop3): 1 truncate cleaned up [ 1790.014465][T25080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5395'. [ 1790.387807][T25072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1790.573311][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1790.720446][T25090] loop3: detected capacity change from 0 to 128 [ 1790.763868][T25090] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1790.779231][T25090] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1790.959828][T22722] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1792.011180][T25097] lo speed is unknown, defaulting to 1000 [ 1796.450002][T25136] loop9: detected capacity change from 0 to 512 [ 1796.480320][T25136] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1796.492807][T25136] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1796.596208][T25141] loop3: detected capacity change from 0 to 512 [ 1796.758202][T25141] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1796.965126][T25136] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 1797.318407][T25142] lo speed is unknown, defaulting to 1000 [ 1797.497573][T25136] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1797.507290][T25136] System zones: 0-2, 18-18, 34-34 [ 1798.396190][T25141] EXT4-fs (loop3): 1 truncate cleaned up [ 1798.412537][T25141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1798.484055][T25136] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.5415: iget: bad i_size value: 360287970189639680 [ 1798.812304][T25136] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.5415: couldn't read orphan inode 15 (err -117) [ 1798.918924][T25136] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1799.260298][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1799.436566][T25153] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5415'. [ 1799.837321][ T30] audit: type=1800 audit(1750102338.596:509): pid=25153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5415" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 1800.094656][T20402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1800.900918][T25173] lo speed is unknown, defaulting to 1000 [ 1800.951254][T21773] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 1801.581132][T25188] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5433'. [ 1802.849892][ T5842] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1803.158444][ T5842] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.196097][ T5842] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1804.284323][ T5842] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1805.421492][ T5842] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1805.482878][ T5842] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1805.514746][ T5842] usb 10-1: Manufacturer: syz [ 1805.524864][ T5842] usb 10-1: config 0 descriptor?? [ 1805.670619][ T10] usb 10-1: USB disconnect, device number 10 [ 1806.678591][T25224] netlink: 'syz.2.5447': attribute type 4 has an invalid length. [ 1806.688001][T25224] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5447'. [ 1807.591964][T25232] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5450'. [ 1807.967986][T25237] loop9: detected capacity change from 0 to 512 [ 1808.066117][T25237] EXT4-fs (loop9): Invalid log block size: 7 [ 1808.419984][T25237] loop9: detected capacity change from 0 to 1024 [ 1809.253620][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1809.268877][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1809.393432][T25253] hfsplus: request for non-existent node 33554434 in B*Tree [ 1809.402567][T25253] hfsplus: request for non-existent node 33554434 in B*Tree [ 1809.412187][T25253] hfsplus: request for non-existent node 33554434 in B*Tree [ 1809.420984][T25253] hfsplus: request for non-existent node 33554434 in B*Tree [ 1812.341324][T20695] hfsplus: request for non-existent node 33554434 in B*Tree [ 1812.369730][T20695] hfsplus: request for non-existent node 33554434 in B*Tree [ 1812.414885][T25289] loop3: detected capacity change from 0 to 512 [ 1812.458305][T25289] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1812.486505][T25289] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1812.571971][T25289] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 1812.597333][T25289] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1812.630503][T25294] loop9: detected capacity change from 0 to 256 [ 1812.647226][T25289] System zones: 0-2, 18-18, 34-34 [ 1812.691409][T25294] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1812.727748][T25289] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.5471: iget: bad i_size value: 360287970189639680 [ 1812.791981][T25294] exFAT-fs (loop9): error, data size is invalid(9000) [ 1812.811217][T25289] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.5471: couldn't read orphan inode 15 (err -117) [ 1812.821285][T25294] exFAT-fs (loop9): Filesystem has been set read-only [ 1812.848801][T25289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1812.895550][T25298] exFAT-fs (loop9): error, data size is invalid(10) [ 1813.045839][T25298] exFAT-fs (loop9): error, data size is invalid(10) [ 1813.556974][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1815.010433][T25326] loop9: detected capacity change from 0 to 1024 [ 1815.650987][T25344] loop3: detected capacity change from 0 to 512 [ 1815.698156][T25344] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1815.775799][T25344] EXT4-fs (loop3): 1 truncate cleaned up [ 1815.794193][T25344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1817.124890][T22722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1817.451273][T25354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5493'. [ 1818.450918][T25362] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1818.556200][T25363] loop3: detected capacity change from 0 to 256 [ 1820.016865][ C1] Unknown status report in ack skb [ 1822.253710][T25403] netlink: 46 bytes leftover after parsing attributes in process `syz.3.5511'. [ 1822.698514][T25405] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1824.988720][T25423] netlink: 'syz.2.5517': attribute type 3 has an invalid length. [ 1827.349993][T25446] xt_CT: No such helper "netbios-ns" [ 1827.563003][T14877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1827.578820][T14877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1827.589783][T14877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1827.622126][T14877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1827.634730][T14877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1828.985558][T25469] loop9: detected capacity change from 0 to 256 [ 1829.796742][T21773] Bluetooth: hci4: command tx timeout [ 1829.836886][T25469] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1829.906878][T25458] lo speed is unknown, defaulting to 1000 [ 1832.113786][T21773] Bluetooth: hci4: command tx timeout [ 1832.173731][T23391] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.346254][T25478] netlink: 46 bytes leftover after parsing attributes in process `syz.8.5531'. [ 1834.497985][T21773] Bluetooth: hci4: command tx timeout [ 1834.983476][T23391] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.933315][T21773] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 1837.026757][T14877] Bluetooth: hci4: command tx timeout [ 1839.501598][T23391] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.230297][T14877] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1840.244190][T14877] Bluetooth: hci1: Injecting HCI hardware error event [ 1840.271540][T21773] Bluetooth: hci1: hardware error 0x00 [ 1840.613005][T25514] netlink: 46 bytes leftover after parsing attributes in process `syz.3.5544'. [ 1840.916358][T23391] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.417282][ C1] ------------[ cut here ]------------ [ 1841.423864][ C1] WARNING: net/mac80211/tx.c:5024 at __ieee80211_beacon_get+0x125d/0x1630, CPU#1: syz.3.5544/25513 [ 1841.436723][ C1] Modules linked in: [ 1841.441698][ C1] CPU: 1 UID: 0 PID: 25513 Comm: syz.3.5544 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 1841.455542][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1841.467812][ C1] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 1841.475419][ C1] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 1841.498977][ C1] RSP: 0018:ffffc90000a089f8 EFLAGS: 00010246 [ 1841.506288][ C1] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff888030ed0000 [ 1841.515878][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1841.525471][ C1] RBP: 0000000000000000 R08: ffff888030ed0000 R09: 0000000000000003 [ 1841.535053][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888077afa500 [ 1841.544618][ C1] R13: dffffc0000000000 R14: ffff888077afa9d0 R15: ffff88806160a424 [ 1841.554180][ C1] FS: 00007fe59ea946c0(0000) GS:ffff888125d40000(0000) knlGS:0000000000000000 [ 1841.564885][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1841.572764][ C1] CR2: 0000200000b56030 CR3: 0000000046f8e000 CR4: 00000000003526f0 [ 1841.582347][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1841.591912][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1841.601471][ C1] Call Trace: [ 1841.605386][ C1] [ 1841.608815][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 1841.615455][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1841.622000][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1841.629277][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 1841.635920][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1841.644577][ C1] __iterate_interfaces+0x2a8/0x590 [ 1841.650814][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1841.658070][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1841.666714][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1841.673992][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1841.682448][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 1841.688697][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1841.695664][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1841.701892][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1841.708749][ C1] ? read_tsc+0x9/0x20 [ 1841.713630][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1841.720620][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1841.726760][ C1] handle_softirqs+0x283/0x870 [ 1841.732466][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1841.738178][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1841.744516][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1841.750042][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1841.756282][ C1] irq_exit_rcu+0x9/0x30 [ 1841.761366][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1841.768122][ C1] [ 1841.771616][ C1] [ 1841.775110][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1841.782278][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 1841.788721][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 cb b5 c6 f5 cc [ 1841.812242][ C1] RSP: 0018:ffffc9000d2b7228 EFLAGS: 00000282 [ 1841.819501][ C1] RAX: b2cd86cf4ca44d00 RBX: ffffffff822d3f99 RCX: b2cd86cf4ca44d00 [ 1841.829056][ C1] RDX: 0000000000000000 RSI: ffffffff8db79231 RDI: ffffffff8be2ec60 [ 1841.838615][ C1] RBP: 0000000000000cc0 R08: 0000000000000000 R09: ffffffff822d3f99 [ 1841.848185][ C1] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: ffff888046e0e140 [ 1841.857770][ C1] R13: dffffc0000000000 R14: ffff888079b38010 R15: 0000200000b56000 [ 1841.867335][ C1] ? percpu_ref_put+0x19/0x180 [ 1841.873038][ C1] ? percpu_ref_put+0x19/0x180 [ 1841.878765][ C1] percpu_ref_put+0x35/0x180 [ 1841.884251][ C1] ? percpu_ref_put+0x19/0x180 [ 1841.889962][ C1] __mem_cgroup_charge+0x56/0x80 [ 1841.895890][ C1] folio_prealloc+0x51/0x180 [ 1841.901390][ C1] do_wp_page+0x1231/0x5800 [ 1841.906802][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 1841.912602][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1841.918626][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1841.925060][ C1] __handle_mm_fault+0x1144/0x5620 [ 1841.931193][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1841.937735][ C1] ? find_vma+0xe7/0x160 [ 1841.942813][ C1] ? __pfx_find_vma+0x10/0x10 [ 1841.948404][ C1] handle_mm_fault+0x40a/0x8e0 [ 1841.954142][ C1] do_user_addr_fault+0x764/0x1390 [ 1841.960282][ C1] exc_page_fault+0x76/0xf0 [ 1841.965686][ C1] asm_exc_page_fault+0x26/0x30 [ 1841.971499][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1841.978343][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c1 30 03 00 90 90 90 90 90 90 90 90 90 90 [ 1842.001859][ C1] RSP: 0018:ffffc9000d2b78b8 EFLAGS: 00050202 [ 1842.009135][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000b56030 [ 1842.018697][ C1] RDX: ffff888030ed0000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1842.028270][ C1] RBP: ffffc9000d2b7a30 R08: ffffc9000d2b7667 R09: 1ffff92001a56ecc [ 1842.037845][ C1] R10: dffffc0000000000 R11: fffff52001a56ecd R12: 0000000000000002 [ 1842.047403][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000200000b56000 [ 1842.056972][ C1] ____sys_recvmsg+0x2ab/0x460 [ 1842.062676][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1842.069018][ C1] ? import_iovec+0x74/0xa0 [ 1842.074416][ C1] ___sys_recvmsg+0x1b5/0x510 [ 1842.080048][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1842.086287][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1842.092535][ C1] ? __might_fault+0xb0/0x130 [ 1842.098126][ C1] do_recvmmsg+0x307/0x770 [ 1842.103421][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1842.109379][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1842.115727][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1842.122067][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 1842.128075][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1842.134723][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1842.140315][ C1] do_syscall_64+0xfa/0x3b0 [ 1842.145710][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1842.151932][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.159200][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1842.164821][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.171880][ C1] RIP: 0033:0x7fe59db8e929 [ 1842.177209][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1842.200748][ C1] RSP: 002b:00007fe59ea94038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1842.210847][ C1] RAX: ffffffffffffffda RBX: 00007fe59ddb6080 RCX: 00007fe59db8e929 [ 1842.220411][ C1] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1842.229973][ C1] RBP: 00007fe59dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1842.239555][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1842.249118][ C1] R13: 0000000000000001 R14: 00007fe59ddb6080 R15: 00007fffe7de6318 [ 1842.258893][ C1] [ 1842.262515][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1842.271229][ C1] CPU: 1 UID: 0 PID: 25513 Comm: syz.3.5544 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 1842.285078][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1842.297232][ C1] Call Trace: [ 1842.301166][ C1] [ 1842.304568][ C1] dump_stack_lvl+0x99/0x250 [ 1842.310059][ C1] ? __asan_memcpy+0x40/0x70 [ 1842.315545][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1842.321762][ C1] ? __pfx__printk+0x10/0x10 [ 1842.327252][ C1] panic+0x2db/0x790 [ 1842.331909][ C1] ? __pfx_panic+0x10/0x10 [ 1842.337202][ C1] __warn+0x334/0x4c0 [ 1842.341961][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 1842.348804][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 1842.355654][ C1] report_bug+0x2be/0x4f0 [ 1842.360879][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 1842.367720][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 1842.374562][ C1] ? __ieee80211_beacon_get+0x125f/0x1630 [ 1842.381402][ C1] handle_bug+0x84/0x160 [ 1842.386474][ C1] exc_invalid_op+0x1a/0x50 [ 1842.391859][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1842.397665][ C1] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 1842.405243][ C1] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 1842.428750][ C1] RSP: 0018:ffffc90000a089f8 EFLAGS: 00010246 [ 1842.436010][ C1] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff888030ed0000 [ 1842.445554][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1842.455093][ C1] RBP: 0000000000000000 R08: ffff888030ed0000 R09: 0000000000000003 [ 1842.464634][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888077afa500 [ 1842.474175][ C1] R13: dffffc0000000000 R14: ffff888077afa9d0 R15: ffff88806160a424 [ 1842.483733][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 1842.490394][ C1] ? __ieee80211_beacon_get+0x125c/0x1630 [ 1842.497249][ C1] ? __ieee80211_beacon_get+0x125c/0x1630 [ 1842.504089][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 1842.510720][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1842.517253][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1842.524536][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 1842.531199][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1842.539827][ C1] __iterate_interfaces+0x2a8/0x590 [ 1842.546115][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1842.553393][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1842.562012][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1842.569274][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1842.577691][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 1842.583935][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1842.590894][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1842.597135][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1842.603978][ C1] ? read_tsc+0x9/0x20 [ 1842.608856][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1842.615826][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1842.621958][ C1] handle_softirqs+0x283/0x870 [ 1842.627694][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1842.633399][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1842.639729][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1842.645220][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1842.651442][ C1] irq_exit_rcu+0x9/0x30 [ 1842.656510][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1842.663245][ C1] [ 1842.666740][ C1] [ 1842.670235][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1842.677382][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 1842.683805][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 cb b5 c6 f5 cc [ 1842.707320][ C1] RSP: 0018:ffffc9000d2b7228 EFLAGS: 00000282 [ 1842.714593][ C1] RAX: b2cd86cf4ca44d00 RBX: ffffffff822d3f99 RCX: b2cd86cf4ca44d00 [ 1842.724138][ C1] RDX: 0000000000000000 RSI: ffffffff8db79231 RDI: ffffffff8be2ec60 [ 1842.733683][ C1] RBP: 0000000000000cc0 R08: 0000000000000000 R09: ffffffff822d3f99 [ 1842.743227][ C1] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: ffff888046e0e140 [ 1842.752768][ C1] R13: dffffc0000000000 R14: ffff888079b38010 R15: 0000200000b56000 [ 1842.762314][ C1] ? percpu_ref_put+0x19/0x180 [ 1842.768008][ C1] ? percpu_ref_put+0x19/0x180 [ 1842.773703][ C1] percpu_ref_put+0x35/0x180 [ 1842.779186][ C1] ? percpu_ref_put+0x19/0x180 [ 1842.784877][ C1] __mem_cgroup_charge+0x56/0x80 [ 1842.790778][ C1] folio_prealloc+0x51/0x180 [ 1842.796262][ C1] do_wp_page+0x1231/0x5800 [ 1842.801662][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 1842.807459][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1842.813465][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1842.819899][ C1] __handle_mm_fault+0x1144/0x5620 [ 1842.826026][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1842.832585][ C1] ? find_vma+0xe7/0x160 [ 1842.837654][ C1] ? __pfx_find_vma+0x10/0x10 [ 1842.843251][ C1] handle_mm_fault+0x40a/0x8e0 [ 1842.848957][ C1] do_user_addr_fault+0x764/0x1390 [ 1842.855079][ C1] exc_page_fault+0x76/0xf0 [ 1842.860464][ C1] asm_exc_page_fault+0x26/0x30 [ 1842.866262][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1842.873108][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c1 30 03 00 90 90 90 90 90 90 90 90 90 90 [ 1842.896613][ C1] RSP: 0018:ffffc9000d2b78b8 EFLAGS: 00050202 [ 1842.903895][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000b56030 [ 1842.913453][ C1] RDX: ffff888030ed0000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1842.923023][ C1] RBP: ffffc9000d2b7a30 R08: ffffc9000d2b7667 R09: 1ffff92001a56ecc [ 1842.932575][ C1] R10: dffffc0000000000 R11: fffff52001a56ecd R12: 0000000000000002 [ 1842.942144][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000200000b56000 [ 1842.951701][ C1] ____sys_recvmsg+0x2ab/0x460 [ 1842.957406][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1842.963739][ C1] ? import_iovec+0x74/0xa0 [ 1842.969119][ C1] ___sys_recvmsg+0x1b5/0x510 [ 1842.974708][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1842.980925][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1842.987158][ C1] ? __might_fault+0xb0/0x130 [ 1842.992746][ C1] do_recvmmsg+0x307/0x770 [ 1842.998024][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1843.003930][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1843.010248][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1843.016574][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 1843.022582][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1843.029222][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1843.034819][ C1] do_syscall_64+0xfa/0x3b0 [ 1843.040198][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1843.046414][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.053667][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1843.059267][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.066341][ C1] RIP: 0033:0x7fe59db8e929 [ 1843.071629][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1843.095133][ C1] RSP: 002b:00007fe59ea94038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1843.105207][ C1] RAX: ffffffffffffffda RBX: 00007fe59ddb6080 RCX: 00007fe59db8e929 [ 1843.114748][ C1] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1843.124308][ C1] RBP: 00007fe59dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1843.133872][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1843.143424][ C1] R13: 0000000000000001 R14: 00007fe59ddb6080 R15: 00007fffe7de6318 [ 1843.152986][ C1] [ 1843.156869][ C1] Kernel Offset: disabled [ 1843.162045][ C1] Rebooting in 86400 seconds..