last executing test programs: 26m25.122626448s ago: executing program 0 (id=184): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000980)="$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") r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getegid() r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xffffffffffffffa1, 0x2, {0x3, 0x81, 0x3ff}}]}}]}, 0x48}}, 0x44080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 26m23.721589382s ago: executing program 0 (id=185): fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@afid={'afid', 0x3d, 0x2}}]}}) signalfd(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020) r2 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r2, 0x7) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r3, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) 26m21.687952758s ago: executing program 0 (id=188): socket$key(0xf, 0x3, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x6000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x2c, 0xffffffff, 0x2}) 26m20.246309475s ago: executing program 0 (id=189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) r5 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) truncate(0x0, 0xb73d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x47) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="14010000270001000000"], 0x114}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) chdir(0x0) syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X1sVeUdB/BzKQWkQLs4FEMyGUNdls0gZoJOscjAUUHuwA1Jxmhl0iBBu2ZuaRdd49hwcS6Vl20sQV0iI6uNdnSDzBHFhCjE8TI0xoxXGaMZccjrwpjGpffe53LvubS9Mmd9+XxIe85zf+d57nNPzh/3e+lzbgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRFCWntzYv/t1Vm9849c7TDVe93LfvoxP+Vv+TW1cOHfu5R/5atvJP+1+aN7Jm+MTLWvcl5jbsHbskihKpfolM/7k3fWXG/Jlzpw0IA1Z/Nb2tqOjqKdNd96cb/fIe7OyX/1MTRVFpbICSzHZSWXrbJ2+A7G594YDdGjfozcWDj1a1rKkuq1368NRjhS+dTgN6ewK9JXNdHTx7LVWmfveJHZFt51x6ibxLNN0/fsG9Ly8CAHhXRidTm+zb0cxb3Gy7KV6PtStj7eZYO7xDaM5tnI/0uP26mueIeL2X5lmZjgr9u5xnrJ45/9l2Mt4/1o5FjXcxz/xDM5FmQFfzrIvVe2ueAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8kD2zd9K+bpz13eOJNT0y5bu9rs58/Oelrzy/63rED/x5+8eoD/1mz/6V5I2uGT7ysdV9ibsPesUuiqCLVL5Hunpg5cPLFX/hV1fd/39Ewdd2g5pdLMuOGbd+cg6PXws615VF0R07lYBj2H0OiKJlfSDWjlYWFBamdKaEAAADAR8klqd99su10HCzNaydSaTKR+hekw+K4QW8uHny0qmVNdVnt0oenHjv/8ZJdjFd5zvGy7YqzP4mcYBzib3y8s/VwaH3BON2LjxjP8yUdVy5Pbl/7jR2Pnn7x6r23bxtec881F97VUrv2kxdUHd/x99kF+b+i+/wfzpz8DwAAwP9C/o+P072e8v9FB8p2Ljrz6obrv/zHZ75527a7T/3mx1u+fVfHoSNNY35Qu2TzloL8PyLvKQvyf5hxyP99ovPL/wAAAPBB9v/O/5UF43Svp/xfOfrtZffcW7d26c6tZ8b/4fLWJ9reuHz1tTNGrWiN5j/bfuitgvw/urj83zd32uHBP4cJLyyPotHFn1QAAAAgT/h/97MfLYS8nv7kIJ7X77hlQvnu45d+d9Km2+7fM6zhwJ2n7xxXs3bh5gWfGX3ftMcqDxbk/8ri8n/p+/NyAQAAgCKMWrWj5q1ZV+4e88qe++qf2t06YPX0f75y/faWK5pOHF60ZeftBfk/WVz+7987LwcAAAA4h58+c82Pbm5c/K05VZvGnznx+uAH395zYX3rrgk/W7Fv2zvPrthVkP+ri8v/AzPbzMqHdKcXwl8hLCuPogGdO3XpwotR843ZAgAAAPAeCTl96aixHSvmD/3srP5TaluWr3ro0hGHP5VofnDonMbxpXs2Hrm3IP/XdX///3Cng7D+P+/+fwXr/3MK6bv+fcmNAQAAAPg4KlzPH26Pn/7mgq6+f7/Y9f+rrtv6622JG1+f3nTJvF+OWDRu8uQj+zY2nnyg+vObXh24ft0jBfm/qbj8X5K7fS+//w8AAADOw4ft+/9mF4zTvZ7u/998dePTj+2/+7kXntx8y6kLDp25of2KJ9vX33p/++HhJ6PG7acL8n9zcfk/bMtyX97GcH5+WB5Fwzp3MncT/G2Y7sJYoa00p5A+8bEeM0OPTKGtf04hpS7WY0x5FH26c6cpVvhEKDTHCkeHZAqPxwrbQyFzPWQLT8UKG8OV9vMhmenGC+tDIbPAoi2soCjLLomI9TjRVY/Owjl77Mo+OQAAwMdKCM+ZLFua34ziUbYt0dMBA3s6oE9PB5T0dEDf2AHxA7t6PKrOL4TH23+xoGb+X5bdMHRD+YxZO0u+fnDahC8uX1f9nQ1zJh8feVF5R0H+f7y4/B9ORb/0pqv1/1FY/5/5XsPs+v/qUKiIFdpCIRm/Y0AyPEc67D4UnqMimelxdFi2AAAAAB9p4XOBkl6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyXvTsPk6q6EwZ8uumFbpruNvoIar6EYNh8pGkg4hITUQwkaLSJe4wKQqNIiyiQCEE/XOJuPk38RmNmDIyJWxBxGbfRiKJohESigyOKS6IO7ga3jMsj83RXnaLqVpddCCjtvO8fXafqd9ZbS9e599a5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/w4HvTB63pQZZ6y67JUVr4ehd14+6uKSX2w3fOnSPtf98urrf/XSA88tHd973HYj+sx/tuSomc/sfHYITW3lSlLFSw6oHtlj4OWjf3rL6pn73lpz0WMV6XrT8dCt9U9p+s6ZsdUXuodwW0kIZcnAwJpUoDx9vybW9+WaELYI6wKZEs3VqRLJhsMDVSHMDesCmaruqAqhJitw4KP33XNha+KSqhD6hBAqk208XZlqoyoZ6FuRClQnAyeUpQL/WJuSCdxemgrABotvhsyLfmFTbob69ssVeP2Vb7SOfb6Sw+sSE/WF872+5ybuVJaK5ANNG/S05VXHJpH39ljk3dYJ3m152/kiT1v2F6n0N5S160KVoXRC88RxM1qmx0dKQ0NDl0I1baLneeWa2ePXJ91pXoexA/Ub5XVY3nfYQX16jj7yyhXLFz1Ut3iD/xk8kbVJs9ObWmVIv+Y6zfMYDfd50gnefnlvjF6+dIUQDt1y5ajdRx700qDD6v+1zwU7X9/wq5t/WPrKlFW7HLzbguU/O7Iqb/5f/8nz/8zHUvq2NCd3bPXD2tTcPD5SExNv1qbm5gAAANBpdIa9pv94f8sF7yy5t/n6c4a+d8OcGwYuvq9uSfWYAbcePGzfO9b0bVqRN//vVdzx/3jIvyZ7tItCGN6WOKMuhJ5tj6cC18buHF0XwtfaUk25gT0TgUUhbNOWGJCpKlGiayzRKxFYXZsODE8ElsRAUyLwuxi4KBE4MwYWJgLjY2BRIrBXDIRJuePYoTY9jqIDVTEwNrURF8azEN6uja0lttVTmaoAAAA2kvTssDz3bta5DhuaIU4vF1Z1lCGegV0wQ2WihuQMNjOtKlhDWUc1lHZUQ2bccz55+Hk1l3RUc95pGCW5GUZc++C8Pz92Vp/59b9d/fX/6vnfO15+yHHTzxy65Yw5r75z6MrVPfLm/42fPP+vbKcjJXnH/0MY0/Y35i5NR1oy8bFNORkAAACADTB7h0sefuX42of7TVn0+nn//uP/X/H7W2cdsetri3/x5DM/Kq1ZdXDe/H94cef/x30iXbIyh2VxN8TkuhAacwOpar+ZH0gd9e6WDgAAAEBnkDkenzkWPil9mzpFOzmfzs/ftJ7544H/4e3mP7Bl0ZcOm95/7KPbXvKP+7f//d3zljXsf832V+yy8poRS7b69qiP8+b/TcWd/1+de5vqxJLYi1/WhdA1K/Bg7GVroE2vGHhuj9xAevxL4gY4P1aVPjEhU9X5scTYGGhMBOYWKrE8U6JnbiD9ZGUaPyMzjknpElkBAAAA+MzF3QHxuHw8//+qv/W/eeceF2+9d/3ybd6d/MJPbnj+vv5rSpde+vZ7x5z75Qtv/Hne/H/s+p3/3zYPzju9v6VbCIPKQuiS/GHAsurUwoAxUFOSTtxdnaqrS7Kq06pD2L11YMmq/ppe/78sucbgo1WpqmKgZ+9r1vRtTVxZFcKg7MDjh8/bqTUxPRHINH5QVQhfbR1tsvF/65pqvDzZ+KVdQ/hKViBT1dFdQ2htrCJZ1X2V6esYJKu6oTKELbMCmaqGVYYwMwDQScV/pROyH5w2c9bkcS0tzSdtwkTch18VJk5qaW4Yf0LLhMoCfZqQ6HPOMkan5Y+p2CvfPJVeouij7/SuLyad+Z1gY3Zb6f34eScOpu/H70LlbeMcUp5zd2hyyP23z28iZH2TKjTk0k085OrsStY9iXn1x/wVoVvoOmNa80kNJ4+bPv2kwam/xWYfkvobDzOlttXg5Laqbq9vRbw8Cq6WlfBpt1W/7EoGTT9+6qBpM2cNnHT8uGOaj2meMnhIY+OuuwwdOqRxUOuo0n87GGq/9qpODHXtvCLHtRGHum1ZViWfxaeGhIREZ0t87YRjH5l65VtX7Fe3y1m3DPv+DTce98bBP2nceu3ZNYfvM/m1xbPy5v9TP3n+Hz914id/en2GQsf/6+Nh/tTj6w7zj42BucUe/68vdDQ/c2JAr0RgTgzMcZgfAACAL4a4OzLuzYx7pbc85Nu3r9rjr8+8stuu/+cPdx9a++FVXQ4b9f+m7fjkFo+U//Hwl/bJm//PKe73/xtp/f/M0vWjCy3zPyCWaCy0/n9ymf/M+v9zCq3/n1zmP7P+/9zPYf3/GZlAYpO8bf1/AADgi+CzW/+/w+X9kxcIyMvQ4fL+yQsE5GXocBn/Yi8QsN7r/zesOnrkhT1//dWXv3nIvj+Y8uKUBf2P/NYe1/zwvHvDNXd/Y0W/OXnz/4uKm/9buB8AAAA2HxOe/N3qwcfv+sEjD91eutdPl7/4lTeeOKbp7gfWXvzqHe9cMWKbiXnz/7nFzf8/+/X/QqHz/3sVCjQVWhjQ+n8AAAB0UoXW/3vxT996cGTlTxpPffS3f7hqp8sP3+PUh6+6d6+JV9fuc9MOo3913q558/+Fxc3/42kXpTm5Y28+rE2taReSa9q9WZv5yQAAAAB0DqWhoaG8yLw5K6Pu+enbXJleCvST0tlmXP7uqgmX7D1w3N9eHXDgf9w4+83vn/jEHac/PfvpWUsve3Pvd5blzf8XFTf/z/ldRnnfYQf16Tn6yA+vXLF80UN1iyvWHf8HAAAANp1i90sAAAAAAAAAAAAAAACfvzvXvPfro7a+b9jP77z1xj1Hvdpnu4/3ffGt58/Z7XsPz/7z1Y99sDTv9/9hTFu5Qr//j9f9i78v2Cond2y14/X/0vcP3GfBzLYlC5fVhrB9dmDy6ZO3COlr8/fLDtxzxIAerYnTkyXuemavF1sTRyUD3x34pfdaE7snAmPjIonbJAPxqorvdU8E4vKKjyUDcXssTAYq0oFzu6fGUZLcVi/XpLZVSXJbPVkTQl1WILOtbqtJtVGSHOAliUBmgCcmA3GA+6UDpcleLeiW6lUM1MSiv+mW6hUAAJut+C2wPEyc1NLcGL/Cx9tty3Jvo5wly07Lr7akyOafSi9N9tF3etcXk+6S/C667lrj5aGydQiD876uZmcpaRvlxqmlg023VYEhd7TaW2mBcknru+kqCo+oKjWihvEntEwo73DgQzvOMqSswyyD8yY72VlK2zZpEbUU0ZciRlTktimiy/F+aWho6JLItVsM1occHb0iiv29fvY6f4VeBdl56vcetcfWpTsNOXjns08cM2TJN7ZY/MrbO52y7OQXVvzTbd8be2rPvPl/fXHz/8rscb2XvhjAnHhlvW/WhTC2yBEBAADAF9/1/3f+TYeesOTliYvK/vMvf5lcuv+h5Wtn3zJ71s+evPv8756749UbGr/goVNaRk4sq7jx5t/ude3yc07ft+nQ5mGr7yx9ftmfLm3u/0b++v+9ipv/xz1Y6UPBqb0di+L1/8+oC6Ht0vr1qcC1cbhH14XwtbZUUyyRuqD+6FiiMRW4Nu4wGRBLjG3KraprDCxMBFbXpgOLEoElMZDeS3FNSO/Kubg2hJ3aUmNyS0yNJeoTgf1joFci0BADjYlA9xgYngi81j0daEoElsZAmJS7rW7unt5WAAAA6yM9zyrPvRuS87yFZR1lKOkoQ3VHGUo7ylDZUYZCo4j3b4oZyhMnr5RkZSpP1lqVqCUvQ7wY/nr3Ky9DWJ6bM1kwr+l4/kHmfIOS3AyndLvgrMe/HYYteG23h2e+Nbphu7/vd/9T90+/dPm5Kz8896DlL+TN/xuLm/9X596mWl8S5//rrv+XCjwYu/fLeOp4rxh4bo/cQHrHwJI42T0/U1VTukR60n5+LDE8BnolAlNjYHgiMHZMOjC3R24gPdPONH5GpvFJ6RJZAQAAAPjMxR0EcTdNnP8fu1/vRy+/+bqWxecMuP3da689r9eIZ2+cc9ezFxz2VGh6feWEN/Pm/8OLm//H9rplN3Zm7M0L3UO4rWRdbzKBgTWpQNyPURN/Hv/lmhC2yNrBkSnRXJ0qUZFoODxQlfqFekWyqjuqUmsMxPsHPnrfPRe2Ji6pCqFP1t6XTBtPV6baqEoG+lakAtXJwAllqUDc85MJ3F6aCsAGy+wVjC+o9KkuGfXtlyvw+vuiXBM0Oby8faDt5GvvN1ebSmXygfQ+1Yz1e9ryqmOTyHt7LPJu64zvtnrvtuwvUulvKGvXhSpD6YTmieNmtEyPj2T/kjXPJnqes3+lWkx6I7wO53z63nasMtmBxsTHR2P75dp/HZZkFtrqO+ygPj1HH3nliuWLHqpbXFF0NwqIPxQ+o+7i+ieyNu+mVhnSr7lO93nS5POkM/4b6OVpCyF0feK4poV7f/z02V23fmCbmz96aOdDV1z19rfuOXr3J7cYNeKKhT/Mm/83FTf/L0vctnk/bsxpdSH0z9q4y+LmH1GX+hzMCqQ+JbfMD6QOuT9fW/CTEwAAADa2zO6OzP6CSenb1AnhyXlyfv6m9cwf91cMbzd/sf1++eNVP3p+4bwPTq2bcdabp87d9/2xj1837u8Nu9xXd/Ir/zLvgGPz5v9jP3n+3zXRTcf/Hf9nE3H8v12b+67orskH5mzQrui86tgkHP9v1+b+bnP8v12O/zv+3x7H/zvg+H+7NvenLe9b0lRfukII83+0w13LLxt/y0tNLVefPWvk19/9ftPiU+4aPuXXD7y6ZOaf7+yXN/+fWtz83/p/7S/al1n/b2yh9f+mFlr/b471/wAAgE2qwEJzyXle3up9eRmSq/flZehwgcAOlxi0/t96r/939KpH99/jlt1/80TpvBuv2/+DytuOGLLVDdvPn3j4+688tWb+vb/Pm//PKW7+H18O3bJb7yzr//UaU6Cqi2JgqoUBAQAA2BwV2kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA56ux/48fm73ghSUf/vjIvd4+f/FFlx6wY8/5Y+5/640eB77z1iEjlz63dHzvcduN6DP/2ZKjZj6z89khTGorV5IqXnJA9cgeAy8f/dNbVs/c99aaix6rTNdbnr7dLid3bPXD2hDmZj1SExNv1rbeWRc4cJ8FM8taE8tqQ9g+OzD59MlbtCZ+VxtCv+zAPUcM6NGaOD1Z4q5n9nqxNXFUMvDdgV96rzWxezpQkuzuP3dPdbck2d0Lu4dQlxXIdPe47rlVZdoYlQ6UJtu4uibVRgzUxKKX1aTaiIGWWGJS1xAGlYXQJVnVHytTVXVJVnVnZaqqLsmqTq0MYfcQQlmyqmcqUlWVJUf+SEWqqhjo2fuaNX1bE3MrQhiUHXj88Hk7tSZOTAQyjf+gIoSvtr5kko3fVJ5qvDzZ+CXlIXwlhFCRLPFOWapERbLEX8tC2DIrkGn82LIQZga+EOKHz4TsB6fNnDV5XEtL80mbMFGRbqsqTJzU0tww/oSWCZWJPhVSkpVee9qnH/tTa2aPb7396Du964tJl6XLlbd1eUh5zt2hm3vvY7+qsytZ93zk1R/zV4RuoeuMac0nNZw8bvr0kwan/habfUjqb5d0NLWtBneWbdUvu5JB04+fOmjazFkDJx0/7pjmY5qnDB7S2LjrLkOHDmkc1Dqq9N+NMdR5n/1Qty3LquSz+ACQkJDobInSnE+3xs39gzzvi/66jpaHyrYP6LxpRXaWkrZRboxB7/kpR/xpvqd0OKLBeROHvCxDOs4yNG8ysS5LVSpL2/e6vMlhdk2lbZs03i8NDQ1dCm2H+ty72Zv39Q3YvCvTm67YNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8DztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOo2cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBLAQAA//8d6cf4") lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xe01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 26m16.597236262s ago: executing program 0 (id=194): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 26m1.445626385s ago: executing program 32 (id=194): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 23m5.298856494s ago: executing program 2 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x800000a3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r5, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 22m56.615144059s ago: executing program 2 (id=430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000180)=""/174, &(0x7f0000000040)=0xae) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) listen(r0, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000070000000b0000002200000000000000", @ANYRES32, @ANYBLOB="00000000000000004822e503a896497f0000006cc3000000001000002b08d3b1c1ae12890c7a954ba78d2eb4de45e13c03904ff1bafda5f6ede1ef134616a0e9bc834aa6a8a725c13597fac0f221041237f9b1edb02804afd330ebf0809606f2b94731b63c10e0d4a5e1f0e62711733985800182374aed3e532fc7a5deeb00100dde946baac32dd42dd5c2614bd39927fb860a16c1448305de51777c4edda38f2510cf395ae64dced7ab04fd40f615d97cc1777427e6461618a344c292c40a7904b9c6dd1e4855152883f1d393f82894409ee052071a060b5463d3f5add944df382962cffdc48d45e71d7975264953177c7f0050bf", @ANYRES32=0x0, @ANYRES32], 0x50) 22m52.423673011s ago: executing program 2 (id=445): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x80000000, 0x103001) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2cc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004"], 0x34}}, 0x84) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x141a02, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 22m50.637145616s ago: executing program 2 (id=437): r0 = syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x4, 0x339, &(0x7f0000000140)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') write$FUSE_INIT(r1, 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x1) accept4(r2, 0x0, 0x0, 0x80000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x50, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$msr(r1, &(0x7f0000000500)=""/80, 0x23) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fchdir(0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='omfs\x00', 0x8004, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff88813ba05000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0xfffffffffffffca1, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0xce, 0x0, 0x0) 22m48.645992688s ago: executing program 2 (id=441): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@data_err_ignore}, {@noinit_itable}, {@sysvgroups}, {@errors_remount}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xd6c, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r6, 0xffffff7f00000004, 0x4) 22m43.671055333s ago: executing program 2 (id=449): bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3666, 0x7, 0x10}, {{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 22m41.728339401s ago: executing program 33 (id=449): bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3666, 0x7, 0x10}, {{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 21m31.115761489s ago: executing program 5 (id=528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000004c0)={{@host, 0x966}, 0x0, 0x0, 0x3}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000c14000328bd7000fcdbdf2508003d0000000000080003000400edff070001000000000008016956ea297e10b975626a9e3393003d00130000000800030000000000fe50cf9c909aebb5ee561524f32b7709db1e40e10c367c8ba879721511acc65c13547070c1f5ca662e38543992"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000089) openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x4) 21m26.248887705s ago: executing program 5 (id=531): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x44}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8010800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0200f80d20"], 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x192}}, 0x20}}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 21m23.393088567s ago: executing program 5 (id=535): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x149102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d", 0x13) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb3", 0x43}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40801) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30000884}, 0x20000000) syz_open_dev$vim2m(0x0, 0x3ff, 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg(r6, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, 0x0) 21m21.139058381s ago: executing program 5 (id=538): r0 = syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x4, 0x339, &(0x7f0000000140)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') write$FUSE_INIT(r1, 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x1) accept4(r2, 0x0, 0x0, 0x80000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x50, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$msr(r1, &(0x7f0000000500)=""/80, 0x23) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fchdir(0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='omfs\x00', 0x8004, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff88813ba05000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0xfffffffffffffca1, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0xce, 0x0, 0x0) 21m19.274194673s ago: executing program 5 (id=541): r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x3415, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) pipe(0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r9, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) mlockall(0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)) sendto$packet(r6, &(0x7f0000000100)="f257a8ea", 0x4, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 21m13.28049931s ago: executing program 5 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x800000a3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) 21m12.145177893s ago: executing program 34 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x800000a3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) 15m22.844960023s ago: executing program 4 (id=937): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000f3ffffffff4f89bde08334ed692a002c08ff1a92d4a964b11e44b0576dba48baf8c1abdabe5d40d0257a7c9d2a4039228f68cc53760cda77df6304000000cb50cc290a32f42ad54a5308345972"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) dup(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 15m17.987196889s ago: executing program 4 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x800000a3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r5, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 15m15.894146999s ago: executing program 4 (id=945): socket$nl_route(0x10, 0x3, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) io_setup(0x6, &(0x7f0000000140)) io_setup(0x46, &(0x7f0000000280)=0x0) io_submit(r1, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x4000005}, 0x1c) sendmsg$AUDIT_SET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x7c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x7c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r7 = syz_open_dev$dri(&(0x7f0000000380), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, r8}) semctl$GETZCNT(0xffffffffffffffff, 0x6, 0xf, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 15m8.410520458s ago: executing program 4 (id=952): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r1 = syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000200)='./file2\x00', 0x200401, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=macinuit,quiet,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB=',dir_umask=00000000000000000000004,codepage=cp862,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6469725f756d61736b3d303030303031302c0000000000000000000000000000000000969a2c4b03c119dcdb04745c3d9bddc94b32dd52f34ae092cebb8b613820ec5c710a11c6eea865a253ea5b5bc7534cbc747c8acc1f5c887049c4ef53f792d7280088aa8287ae5b0611e47ef917be8e0f76d013771dc19936f1f6c1770bc816ebeae7f25052bbc10ab9a33c76c3d0edc7e7011148474196f6035f79ce69afd0b8a1284bf184149cb0cd505bce5476b8352c28d2c4aebaa428462f9ee6bb55a8038b026821a941c0e908ff4a93d06012acd1c29d5ce36cb34fb8"], 0x1, 0x310, &(0x7f0000001380)="$eJzs3c9O1EAcB/DvzHZh+ROsgDHxokFI9GJUNDHGBEL2Zrh7Miq7JMQGI2CiXkDjTeMDePPgK/gQHtR484QnTj4AtzEznXany9BlhW5h+X6S3XSnM9NfbWf7m5qlIKJTa6G+/WV2R78EUEEFwF1AAqgBAYBzOF97sbqxshE1G3kdVUwL/RKIW4o9dZZWm76mup1pYYX6U4BRt4yKoZSa/1N2EFQ6M/o9JDBox6FZX+txXEXZAi6WHUMPuN/BZzIrdrGLlxjrfUhERHSc2Ou/tNf5UVMkICUwYy/7fXX93y07gKN1K9pTpHIbmOv/7+GxZOalhD6+JkUQrfmeSR/0epnMEg8STLXt8wDiMyuTYIpOs0oTixxaXglwbekNGhJvMWc51SbNeyM+dRMdop1K86IDnc7791bF4nC8NyajbJeEtLwSNQf1gif+ie62eDjvdajfxE/xUIT4hEaa/wVK6MNkjlTYdqRkVcd/ff9eR0wrXQs25ZyDkpkqZ81GLtgtWB32suafkbh9JjcIttII8uI02x5H9rZCvHc3OrSa8LUK00+tFcJtNZlpVXFW595KKUayi+KjeCCm8BdfUXfyf6njm4EzMtvHhjushalpz4ylZ1Eje2QdgakZ7hlqreFyKY3AGvyv/Tv1urtb9gFPcAdj669eP61EUXNNLzz2LDwfXRO2pPoO8NYpfqGCnDrYapUobVOpvA5rTokqMvirR9qh/v5IS/Tw8VXWoywtkZ17TgZ1Cce0qIVNu0sFbqL+o0/+xZQCMiWL977bVUf+/UTH0LpIjr4tGCo5IOo1nXeJeP5nMnmb1ZlUVb+FOXl6/iRTJyVBK8dOZ3DZVHDcvA93NYMb8fzvYroq3eLNfeaMZs51+Qow7RQKzO5sz8/uYNPbbWjj7BOijl94xPv/REREREREREREREREREREREREREQnzUF+KiABHOaXBmXvIxERERERERERERERERERERERERERERHRSbdQH+j++b++vxFvnv8b+p7/+/n29P14ic//JTpW/gUAAP//qONvTA==") mount$nfs(0x0, 0x0, 0x0, 0x123b058, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000300), 0x5005) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r5, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x77359400}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000001440)=ANY=[], 0xffffff6a) tee(r3, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) tee(r3, 0xffffffffffffffff, 0x60000000000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000000c0)) 15m3.97252256s ago: executing program 4 (id=964): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000f3ffffffff4f89bde08334ed692a002c08ff1a92d4a964b11e44b0576dba48baf8c1abdabe5d40d0257a7c9d2a4039228f68cc53760cda77df6304000000cb50cc290a32f42ad54a5308345972"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) dup(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 15m0.27996293s ago: executing program 4 (id=961): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000f3ffffffff4f89bde08334ed692a002c08ff1a92d4a964b11e44b0576dba48baf8c1abdabe5d40d0257a7c9d2a4039228f68cc53760cda77df6304000000cb50cc290a32f42ad54a5308345972"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) dup(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 14m45.259681532s ago: executing program 35 (id=961): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000f3ffffffff4f89bde08334ed692a002c08ff1a92d4a964b11e44b0576dba48baf8c1abdabe5d40d0257a7c9d2a4039228f68cc53760cda77df6304000000cb50cc290a32f42ad54a5308345972"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) dup(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 8.249411089s ago: executing program 3 (id=2435): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x10000}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fff, @remote, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 5.771147088s ago: executing program 3 (id=2445): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 4.968941902s ago: executing program 3 (id=2448): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7d7, &(0x7f00000008c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0xc35caa32fea6b786) 4.785231867s ago: executing program 3 (id=2450): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000140)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x400000000000, 0x9, 0x0, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) close_range(r0, 0xffffffffffffffff, 0x0) 4.784690737s ago: executing program 6 (id=2451): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400b881}, 0x3000c81c) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x100000000000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)={0x114, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xf}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 3.775689997s ago: executing program 6 (id=2453): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000140)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x400000000000, 0x9, 0x0, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) close_range(r0, 0xffffffffffffffff, 0x0) 3.320874474s ago: executing program 3 (id=2454): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f0000000340)={[{@acl}, {@heartbeat_none}, {@heartbeat_none}, {@coherency_full}, {@coherency_full}, {@coherency_buffered}, {@err_cont}, {@user_xattr}, {@barrier={'barrier', 0x3d, 0x6603}}, {@data_writeback}, {@intr}, {@journal_async_commit}]}, 0x1, 0x442a, &(0x7f0000008940)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) 2.950605193s ago: executing program 7 (id=2458): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000002100)={[{@keep_last_dots}, {@namecase}, {@umask={'umask', 0x3d, 0x4}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x5}}, {}, {@gid}, {@umask={'umask', 0x3d, 0x3}}, {@namecase}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x400000}}]}, 0x1, 0x152c, &(0x7f0000000b40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2.883794039s ago: executing program 1 (id=2459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) 2.852227432s ago: executing program 7 (id=2460): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109500000000006300000300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x10000}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fff, @remote, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 2.710997353s ago: executing program 1 (id=2461): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400b881}, 0x3000c81c) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x100000000000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)={0x114, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xf}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 2.662503947s ago: executing program 7 (id=2462): connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x141842, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'gre0\x00'}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="6368846e676570726f66696c65203a00c7883db0c195ca7e2571b9981a14ee9548090852c4032159bf5ab8e96e10390c8e7dfcdce99fa1427f3d05095f783eba"], 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x400d2, &(0x7f0000000480)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) socket$rds(0x15, 0x5, 0x0) futex(&(0x7f0000000680), 0x85, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r5, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2.461209473s ago: executing program 6 (id=2463): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109500000000006300000300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x10000}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fff, @remote, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 1.696513024s ago: executing program 1 (id=2464): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='1', 0xfffffffffffffffa) write$6lowpan_enable(r8, &(0x7f0000000080)='1', 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.416078057s ago: executing program 7 (id=2465): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='1', 0xfffffffffffffffa) write$6lowpan_enable(r8, &(0x7f0000000080)='1', 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.196848304s ago: executing program 7 (id=2466): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000f3ffffffff4f89bde08334ed692a002c08ff1a92d4a964b11e44b0576dba48baf8c1abdabe5d40d0257a7c9d2a4039228f68cc53760cda77df6304000000cb50cc290a32f42ad54a5308345972"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) dup(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.188626415s ago: executing program 1 (id=2467): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='./file0\x00', 0x3000046, &(0x7f0000000440)={[{@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_mixed}, {@shortname_mixed}]}, 0x1, 0x370, &(0x7f00000000c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 1.157047737s ago: executing program 6 (id=2468): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 1.013641159s ago: executing program 3 (id=2469): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000300)) 963.124283ms ago: executing program 6 (id=2470): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f00000002c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") quotactl$Q_QUOTAOFF(0xffffffff80000700, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x8cffffff00000000) 870.324901ms ago: executing program 1 (id=2471): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x226, &(0x7f0000000340)="$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") bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file1\x00', 0x0, 0x8}, 0x18) 134.908249ms ago: executing program 1 (id=2472): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400b881}, 0x3000c81c) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x100000000000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)={0x114, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xf}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 77.251864ms ago: executing program 7 (id=2473): connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x141842, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'gre0\x00'}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="6368846e676570726f66696c65203a00c7883db0c195ca7e2571b9981a14ee9548090852c4032159bf5ab8e96e10390c8e7dfcdce99fa1427f3d05095f783eba"], 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x400d2, &(0x7f0000000480)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"eb8c0b395b07f005ee1a06f0f94691901b4deb675ce31ba1b9eee2b2c5830bd838052dc1ca13ee6b09170091ce787500dbcb93bc1705b402abb71420c5329cfa14c9c6827fd16ba4466da7e06a3f244819389538abbc4db03745ab82a0af0f0d882aa4b5dc248e7384e845e26dac48b0e678f5907f7e81d5f1c8c86339952041dde4c18a217f25329e5969f7ba0f66a0a569155dd7dc51b1b9099da41248812aafc278aff58f7458934f3a3eabc7f4ecfd30a6cc270ef04126042ad741014a063b2bce37583d00573d5a769fe4cfdd6174e594ed50af0391733128530a40546a885a4a9fa4ea661897723098c2533a9bf6a4e74342691bb26cbfcdc3f296441259363d2290c04b0b7dfcb93d1130afe4201de6122753f65bce0cfbe91ea226cc85738dea002d869c4c2e4874a7a5ee407f2be05af5e8eb31cdfc30bce27f5833eb1f58c0c4cd826222c104f8419b254ed6dd9dba4ce08db5c50551a59c9d0bf6b2f4f1a01c9c30c770cff278a28fb9857905218fb2ec4d12f7417cd2d544a865417e060d90117e982891994c09767606b8a272fcc12b6b9975920116757985f6bca1dfd6c3a9e5d95022ec74b93a65eacbbaa18f1563181ea446a3cb5e3d5831a848d5d202b36dbd321bb8795ba2415fd351c417f1a9bc85bcbba5dc1184faa4daa3b4683b8803d11fb06889c5fdb152e465505c62dcd9b2fd558d540f78df9a22ba7cc783208f17180394b8f43513efdd387dd09fdf1803cefb4d7dfbccf8e54764678615ca060c6b6dd1f2a5a4fa5b168571bcf49f60deca16298076dbab7589579c5d6248b50bc49a116d73674f74b9c6cdd872bb5034ee38db6f85e86910dbe117f8c23ce57bd0cbf54bec2d2d26449d5b4e83383eeab65282b8fbad67f28aa7c7eca2a1575729f8d34b4b4b448430d43b1d134413294f3cb25e7ea5718acf7f24f1ce2ccfb1071c726b5599c29e2f51da8b9310591d1ffba48d24c847ee14706f7eb3a4d69d07e9291178a7ee3ea99ed8555083895e86fb7ef20f7be41e4495dce69717db5ade26b360ec7825a00def018b448d39bcdbbd557ad1472760155c1545ecd6346c023894381b0465ddcbc886a4d67461b61b43dbd5ba3f3b4f1bab70d50d9f37555d459a314dd92d6ccbdc51b736185c793d93c1dc33f90e83b5602516a65bb8f850fbafebd4b177a21a719adec77dfb22cb925d0303b87aa8aaf6e85d98bec6ce31a776eda035cc8a2ec1f43e4bb898b387ccb513ee13fab39ad1885c7b0ad48a19ffc72a5deaeee71e6b02bcd48dd225535ab5b5cba37e30a38994ffeb95a636eb5335f4faa4f347686c3a70d25be295b659c20f09618f749220f2f627c4d8c9ed1174471cdd4ec1f436ff226a01b6cdde83bbff55200c2fbdb0ab6866cf1bb1f01f47886985819cc1b7919d1102b051eddf3c28da716ee1"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) socket$rds(0x15, 0x5, 0x0) futex(&(0x7f0000000680), 0x85, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r5, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 0s ago: executing program 6 (id=2474): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='1', 0xfffffffffffffffa) write$6lowpan_enable(r8, &(0x7f0000000080)='1', 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) kernel console output (not intermixed with test programs): Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.503095][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.889812][T11597] pim6reg: entered allmulticast mode [ 946.936331][T11597] pim6reg: left allmulticast mode [ 950.198835][T11621] netlink: 'syz.1.996': attribute type 1 has an invalid length. [ 950.271442][T11621] netlink: 224 bytes leftover after parsing attributes in process `syz.1.996'. [ 952.886368][T11642] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 953.698818][T11646] random: crng reseeded on system resumption [ 954.823258][T11654] Unknown options in mask 5 [ 956.371821][T11653] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 956.378463][T11653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 956.386225][T11653] vhci_hcd vhci_hcd.0: Device attached [ 956.744894][ T2174] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 956.752621][ T9134] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 956.981766][T11676] loop6: detected capacity change from 0 to 1024 [ 959.783161][T11676] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 959.796962][T11676] EXT4-fs: failed to create workqueue [ 959.861318][T11676] EXT4-fs (loop6): mount failed [ 960.160217][T11661] vhci_hcd: connection reset by peer [ 960.184593][ T3528] vhci_hcd: stop threads [ 960.225269][ T3528] vhci_hcd: release socket [ 960.235351][ T3528] vhci_hcd: disconnect device [ 961.894913][ T9134] vhci_hcd: vhci_device speed not set [ 964.112781][T11712] Invalid ELF header magic: != ELF [ 964.226759][T10906] Bluetooth: hci2: command tx timeout [ 964.750520][T11729] sp0: Synchronizing with TNC [ 964.791813][T11730] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 966.936552][T11741] loop7: detected capacity change from 0 to 8 [ 968.201481][T11755] Invalid ELF header magic: != ELF [ 972.374070][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 973.915331][T11785] vxlan2: entered promiscuous mode [ 978.987584][T11826] ax25_connect(): syz.3.1045 uses autobind, please contact jreuter@yaina.de [ 979.071858][ T27] audit: type=1326 audit(1753839604.367:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 979.247437][ T27] audit: type=1326 audit(1753839604.367:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 979.419403][ T27] audit: type=1326 audit(1753839604.367:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 979.555785][ T27] audit: type=1326 audit(1753839604.367:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 979.584076][ T27] audit: type=1326 audit(1753839604.367:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 979.607027][ T27] audit: type=1326 audit(1753839604.377:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 979.629838][ T27] audit: type=1326 audit(1753839604.387:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 979.653031][ T27] audit: type=1326 audit(1753839604.387:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 979.885489][ T27] audit: type=1326 audit(1753839604.397:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 979.915303][ T27] audit: type=1326 audit(1753839604.397:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 980.074946][T11845] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 982.850914][T11862] loop7: detected capacity change from 0 to 16 [ 982.882302][T11862] erofs: (device loop7): mounted with root inode @ nid 36. [ 982.942277][T11862] syz.7.1056: attempt to access beyond end of device [ 982.942277][T11862] loop7: rw=0, sector=8, nr_sectors = 16 limit=16 [ 983.408420][T11872] syz.7.1056 (11872): drop_caches: 2 [ 983.426993][T11872] syz.7.1056: attempt to access beyond end of device [ 983.426993][T11872] loop7: rw=0, sector=8, nr_sectors = 16 limit=16 [ 984.785636][T11875] netlink: 'syz.7.1059': attribute type 20 has an invalid length. [ 985.476320][T11880] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1060'. [ 985.491262][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 985.491505][ T27] audit: type=1400 audit(1753839610.857:896): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11878 comm="syz.6.1060" [ 985.539226][T11866] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1058'. [ 987.807572][T11892] loop7: detected capacity change from 0 to 22 [ 987.817099][T11892] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 988.765266][T11892] romfs: bad initial checksum on dev loop7. [ 990.117423][T11857] udevd[11857]: incorrect romfs checksum on /dev/loop7 [ 990.324634][T11902] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 990.715216][T11911] autofs4:pid:11911:autofs_fill_super: called with bogus options [ 990.869443][T11912] loop7: detected capacity change from 0 to 2048 [ 991.414920][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 991.433651][T11912] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 991.443903][T11912] NILFS (loop7): unrecognized mount option "ÿÿÿÿÿÿÿÿZŠ¤†ó)™90¸±ôb~Zõà‹–þqíó LgœÐH¢è©â¤_§Ä ÇegHqf=5÷áêõchNfƒ" [ 991.650145][T11857] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 992.166540][T11923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1071'. [ 992.554504][ T27] audit: type=1400 audit(1753839617.547:897): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11919 comm="syz.1.1071" [ 993.194156][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.205460][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.751364][T11952] loop7: detected capacity change from 0 to 16 [ 996.106036][T11952] erofs: (device loop7): check_layout_compatibility: unidentified incompatible feature d45400, please upgrade kernel [ 996.882688][T11964] hub 1-0:1.0: USB hub found [ 996.890975][T11964] hub 1-0:1.0: 1 port detected [ 999.562890][ T27] audit: type=1400 audit(1753839624.947:898): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11968 comm="syz.6.1082" [ 999.595273][T11970] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1082'. [ 1002.228633][T11974] netlink: 'syz.7.1083': attribute type 20 has an invalid length. [ 1003.328771][T11988] netlink: 'syz.7.1086': attribute type 1 has an invalid length. [ 1003.336770][T11988] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1086'. [ 1005.590598][T12013] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 1007.158135][T12026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1094'. [ 1009.265855][ T27] audit: type=1400 audit(1753839632.537:899): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12024 comm="syz.1.1094" [ 1009.314142][T12008] Process accounting resumed [ 1009.515107][T12031] netlink: 'syz.7.1095': attribute type 20 has an invalid length. [ 1011.593507][T12058] Invalid ELF header magic: != ELF [ 1011.610366][T12058] netlink: 'syz.7.1100': attribute type 1 has an invalid length. [ 1011.618374][T12058] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1100'. [ 1013.684924][ T27] audit: type=1326 audit(1753839639.057:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.3.1103" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3df518e9a9 code=0x0 [ 1014.626831][T12078] hub 1-0:1.0: USB hub found [ 1014.634471][T12078] hub 1-0:1.0: 1 port detected [ 1016.008761][T12087] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1106'. [ 1016.018725][ T27] audit: type=1400 audit(1753839641.387:901): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12079 comm="syz.6.1106" [ 1017.254114][T12092] netlink: 'syz.3.1108': attribute type 20 has an invalid length. [ 1018.898664][T12114] Invalid ELF header magic: != ELF [ 1018.916077][T12114] netlink: 'syz.6.1112': attribute type 1 has an invalid length. [ 1018.924061][T12114] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1112'. [ 1021.878717][T10906] Bluetooth: hci2: command tx timeout [ 1021.954970][ T9136] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1022.565903][ T9136] usb 2-1: device descriptor read/64, error -71 [ 1022.752741][T12142] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1118'. [ 1022.965017][ T27] audit: type=1400 audit(1753839648.107:902): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12139 comm="syz.7.1118" [ 1024.952090][T12144] fuse: Bad value for 'fd' [ 1026.388135][T12160] Invalid ELF header magic: != ELF [ 1026.396319][T12160] netlink: 'syz.7.1121': attribute type 1 has an invalid length. [ 1026.404314][T12160] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1121'. [ 1029.598378][T12186] Invalid ELF header magic: != ELF [ 1031.082717][T12191] loop7: detected capacity change from 0 to 2048 [ 1031.098676][T12191] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1031.128501][T12198] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1031.625610][ T27] audit: type=1400 audit(1753839657.017:903): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12193 comm="syz.1.1129" [ 1031.652214][T12203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1129'. [ 1037.296864][T12218] netlink: 'syz.3.1133': attribute type 20 has an invalid length. [ 1038.087694][T12225] Invalid ELF header magic: != ELF [ 1038.096424][T12225] netlink: 'syz.7.1134': attribute type 1 has an invalid length. [ 1038.104224][T12225] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1134'. [ 1038.453922][T12229] Invalid ELF header magic: != ELF [ 1038.461437][T12229] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 1038.469275][T12229] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1136'. [ 1042.183662][T12254] mkiss: ax0: crc mode is auto. [ 1042.356727][ T27] audit: type=1326 audit(1753839923.741:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.1.1138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89b458e9a9 code=0x0 [ 1042.974817][T12259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1043.387735][T12265] autofs4:pid:12265:autofs_fill_super: called with bogus options [ 1043.889588][ T27] audit: type=1400 audit(1753839925.271:905): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12266 comm="syz.6.1143" [ 1043.914333][T12269] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1143'. [ 1046.003298][ T27] audit: type=1400 audit(1753839927.381:906): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12268 comm="syz.1.1144" [ 1046.038600][T12271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1144'. [ 1046.857623][T12275] netlink: 'syz.3.1145': attribute type 20 has an invalid length. [ 1047.491223][T12280] Invalid ELF header magic: != ELF [ 1047.507549][T12280] netlink: 'syz.7.1146': attribute type 1 has an invalid length. [ 1047.515464][T12280] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1146'. [ 1048.608006][T12290] Invalid ELF header magic: != ELF [ 1048.622750][T12290] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 1048.630885][T12290] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1148'. [ 1049.650898][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1151'. [ 1051.880623][T12311] tipc: Started in network mode [ 1051.886161][T12311] tipc: Node identity 7f000001, cluster identity 4711 [ 1051.896815][T12311] tipc: Enabled bearer , priority 10 [ 1053.600539][ T5900] tipc: Node number set to 2130706433 [ 1054.348548][T12325] netlink: 'syz.1.1157': attribute type 20 has an invalid length. [ 1054.721244][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.728088][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.327807][T12334] Invalid ELF header magic: != ELF [ 1055.343515][T12334] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 1055.351647][T12334] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1158'. [ 1056.720470][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1058.142692][T12362] input: syz1 as /devices/virtual/input/input17 [ 1058.706152][T12363] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1162'. [ 1058.980343][T12363] workqueue: Failed to create a rescuer kthread for wq "nbd63-recv": -EINTR [ 1059.025059][T12350] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1059.040339][T12350] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1059.048508][T12351] vhci_hcd: connection closed [ 1059.048765][T12350] vhci_hcd vhci_hcd.0: Device attached [ 1059.663942][T12352] 9pnet: Could not find request transport: Kdæ)W [ 1059.685093][T12363] block (null): Could not allocate knbd recv work queue. [ 1059.715092][T11680] vhci_hcd: stop threads [ 1059.733186][T12363] nbd: failed to add new device [ 1059.749575][T11680] vhci_hcd: release socket [ 1059.781930][T11680] vhci_hcd: disconnect device [ 1059.855844][ T9141] vhci_hcd: vhci_device speed not set [ 1060.133663][ T27] audit: type=1400 audit(1753839941.511:907): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12367 comm="syz.7.1166" [ 1062.260699][ T1074] net_ratelimit: 5 callbacks suppressed [ 1062.260719][ T1074] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1062.475217][T12372] Invalid ELF header magic: != ELF [ 1062.484061][T12372] netlink: 'syz.6.1165': attribute type 1 has an invalid length. [ 1062.492078][T12372] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1165'. [ 1062.619688][T12378] input: syz0 as /devices/virtual/input/input18 [ 1062.955621][ T8333] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1063.941261][T12387] Invalid ELF header magic: != ELF [ 1064.920824][T12383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1168'. [ 1065.065386][T12394] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1065.167653][T12395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1171'. [ 1065.790158][ T27] audit: type=1400 audit(1753839946.531:908): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12390 comm="syz.1.1171" [ 1067.290274][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1175'. [ 1067.568119][T12416] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1175'. [ 1069.168231][T12415] fuse: Invalid rootmode [ 1069.181487][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 1069.559603][T12423] Invalid ELF header magic: != ELF [ 1069.580453][T12423] netlink: 'syz.3.1177': attribute type 1 has an invalid length. [ 1069.588507][T12423] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1177'. [ 1070.253094][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 1070.841573][T12443] kAFS: unable to lookup cell 'sy[N6/rÆ>ßãmNíÜb’z1' [ 1071.844938][T12440] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1071.844938][T12440] program syz.7.1181 not setting count and/or reply_len properly [ 1072.333611][ T27] audit: type=1400 audit(1753839953.711:909): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12445 comm="syz.1.1182" [ 1072.363353][T12448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1182'. [ 1076.103646][T12468] can0: slcan on ptm0. [ 1076.194739][T12468] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1076.877407][T12453] can0 (unregistered): slcan off ptm0. [ 1077.225613][T12477] Invalid ELF header magic: != ELF [ 1077.242132][T12477] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 1077.250635][T12477] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1189'. [ 1079.414648][T12487] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1191'. [ 1080.060848][T12492] Invalid ELF header magic: != ELF [ 1080.137455][T12493] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 1080.145688][T12493] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1193'. [ 1080.956895][ T27] audit: type=1400 audit(1753839962.331:910): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12494 comm="syz.7.1194" [ 1080.982942][T12498] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1194'. [ 1083.702613][T12506] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1083.718367][T12506] ubi31: attaching mtd0 [ 1083.761740][T12506] ubi31: scanning is finished [ 1085.199089][T12514] Invalid ELF header magic: != ELF [ 1085.217031][T12514] netlink: 'syz.6.1198': attribute type 1 has an invalid length. [ 1085.225070][T12514] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1198'. [ 1085.767584][T12506] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1086.140961][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1199'. [ 1086.150686][T12517] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1199'. [ 1088.039205][T12544] Invalid ELF header magic: != ELF [ 1088.060049][T12544] netlink: 'syz.1.1203': attribute type 1 has an invalid length. [ 1088.068179][T12544] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1203'. [ 1088.885863][T12543] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1204'. [ 1089.679666][ T27] audit: type=1400 audit(1753839971.061:911): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12549 comm="syz.1.1207" [ 1089.712301][T12554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1207'. [ 1089.864580][T12541] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1091.939315][T12568] input: syz0 as /devices/virtual/input/input19 [ 1092.216664][T12574] Invalid ELF header magic: != ELF [ 1092.234979][T12574] netlink: 'syz.1.1210': attribute type 1 has an invalid length. [ 1092.242988][T12574] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1210'. [ 1095.188798][T12586] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1214'. [ 1096.293961][T12591] Invalid ELF header magic: != ELF [ 1096.310069][T12591] netlink: 'syz.3.1215': attribute type 1 has an invalid length. [ 1096.318004][T12591] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1215'. [ 1096.581066][T12594] Invalid ELF header magic: != ELF [ 1096.590183][T12594] netlink: 'syz.7.1216': attribute type 1 has an invalid length. [ 1096.598223][T12594] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1216'. [ 1097.508683][T12604] fuse: Invalid rootmode [ 1097.523039][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1219'. [ 1098.561447][T12605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1218'. [ 1100.042206][ T27] audit: type=1400 audit(1753839979.921:912): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12595 comm="syz.3.1218" [ 1101.794029][T12614] netlink: 'syz.7.1222': attribute type 20 has an invalid length. [ 1102.098059][T12611] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1221'. [ 1104.366693][T12626] input: syz1 as /devices/virtual/input/input20 [ 1104.492968][T12629] netlink: 'syz.7.1225': attribute type 1 has an invalid length. [ 1104.500983][T12629] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1225'. [ 1106.509259][T12647] Invalid ELF header magic: != ELF [ 1106.520038][T12647] netlink: 'syz.7.1235': attribute type 1 has an invalid length. [ 1106.527981][T12647] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1235'. [ 1108.905241][T12667] block device autoloading is deprecated and will be removed. [ 1109.002512][T12666] md: md2 stopped. [ 1111.220616][ T27] audit: type=1400 audit(1753839992.601:913): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12681 comm="syz.7.1245" [ 1111.249947][T12690] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1245'. [ 1111.735580][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 1111.750222][T12698] Invalid ELF header magic: != ELF [ 1111.767744][T12698] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 1111.775822][T12698] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1240'. [ 1112.559992][T12703] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1112.559992][T12703] program syz.3.1242 not setting count and/or reply_len properly [ 1113.630357][T12712] Invalid ELF header magic: != ELF [ 1113.639423][T12712] netlink: 'syz.1.1252': attribute type 1 has an invalid length. [ 1113.647433][T12712] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1252'. [ 1113.877974][T12715] kAFS: unable to lookup cell 'sy[N6/rÆ>ßãmNíÜb’z1' [ 1115.316308][T12726] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1244'. [ 1116.082627][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.090926][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.450182][T12729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1248'. [ 1116.814745][T12730] tipc: Enabling of bearer rejected, already enabled [ 1117.702001][T12737] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1250'. [ 1123.540200][T12764] Invalid ELF header magic: != ELF [ 1123.554984][T12764] netlink: 'syz.7.1257': attribute type 1 has an invalid length. [ 1123.562988][T12764] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1257'. [ 1124.711591][T12768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1258'. [ 1125.681614][T12781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1261'. [ 1128.609077][T12799] autofs4:pid:12799:autofs_fill_super: called with bogus options [ 1129.488230][T12792] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1263'. [ 1132.369288][T12830] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1271'. [ 1133.779094][T12847] autofs4:pid:12847:autofs_fill_super: called with bogus options [ 1136.639325][T12870] block device autoloading is deprecated and will be removed. [ 1136.679061][T12869] md: md2 stopped. [ 1141.389164][T12892] loop7: detected capacity change from 0 to 8 [ 1141.479844][T12891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1284'. [ 1143.192392][T12888] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1143.192392][T12888] program syz.6.1283 not setting count and/or reply_len properly [ 1143.570818][T12900] autofs4:pid:12900:autofs_fill_super: called with bogus options [ 1145.378511][ T27] audit: type=1326 audit(1753840026.761:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1145.418477][T12907] ax25_connect(): syz.7.1287 uses autobind, please contact jreuter@yaina.de [ 1145.455580][ T27] audit: type=1326 audit(1753840026.761:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1145.541279][T12922] Unknown options in mask 5 [ 1145.766584][ T27] audit: type=1326 audit(1753840026.801:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1146.024951][ T27] audit: type=1326 audit(1753840026.801:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1146.932263][T12922] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 1146.938953][T12922] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1146.963393][ T27] audit: type=1326 audit(1753840026.801:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1146.965259][T12922] vhci_hcd vhci_hcd.0: Device attached [ 1147.007561][ T27] audit: type=1326 audit(1753840026.801:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1147.041346][ T27] audit: type=1326 audit(1753840026.821:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1147.072396][T12931] loop7: detected capacity change from 0 to 65 [ 1147.078952][ T27] audit: type=1326 audit(1753840026.821:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1147.124850][T12931] BFS-fs: bfs_fill_super(): NOTE: filesystem loop7 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1147.140846][ T27] audit: type=1326 audit(1753840026.831:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1147.170212][ T27] audit: type=1326 audit(1753840026.831:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1147.234931][ T9141] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 1147.254914][ T9138] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1147.659910][T12937] netlink: 'syz.3.1296': attribute type 1 has an invalid length. [ 1147.667919][T12937] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1296'. [ 1148.358798][ T9138] usb 2-1: no configurations [ 1148.363477][ T9138] usb 2-1: can't read configurations, error -22 [ 1148.479503][T12945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1297'. [ 1148.619438][ T9138] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1148.956948][T12923] vhci_hcd: connection reset by peer [ 1150.744557][ T1121] vhci_hcd: stop threads [ 1150.778148][ T1121] vhci_hcd: release socket [ 1150.802213][ T1121] vhci_hcd: disconnect device [ 1151.088260][T12949] netlink: 'syz.7.1305': attribute type 1 has an invalid length. [ 1151.096589][T12949] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1305'. [ 1152.324099][T12962] netlink: 'syz.6.1299': attribute type 1 has an invalid length. [ 1152.332254][T12962] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1299'. [ 1152.944876][ T9141] vhci_hcd: vhci_device speed not set [ 1155.414925][T10906] Bluetooth: hci2: command 0x0406 tx timeout [ 1157.166854][T12998] ax25_connect(): syz.6.1304 uses autobind, please contact jreuter@yaina.de [ 1157.220882][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1157.220931][ T27] audit: type=1326 audit(1753840038.541:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.6.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1157.591441][ T27] audit: type=1326 audit(1753840038.541:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.6.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1157.614068][ T27] audit: type=1326 audit(1753840038.541:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.6.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1157.636954][ T27] audit: type=1326 audit(1753840038.541:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.6.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1157.659602][ T27] audit: type=1326 audit(1753840038.541:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.6.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1157.682184][ T27] audit: type=1326 audit(1753840038.551:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.6.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1157.705580][ T27] audit: type=1326 audit(1753840038.561:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.6.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1157.734091][ T27] audit: type=1326 audit(1753840038.561:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.6.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1158.985786][T13014] netlink: 'syz.7.1309': attribute type 1 has an invalid length. [ 1158.993852][T13014] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1309'. [ 1159.385033][T13015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1310'. [ 1163.354172][T13067] Invalid ELF header magic: != ELF [ 1163.372825][T13067] netlink: 'syz.6.1321': attribute type 1 has an invalid length. [ 1163.381037][T13067] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1321'. [ 1164.155666][T13070] netlink: 'syz.3.1320': attribute type 20 has an invalid length. [ 1164.403612][T13081] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1164.410206][T13081] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1165.190640][T13081] vhci_hcd vhci_hcd.0: Device attached [ 1165.332108][T13081] team0: Unable to change to the same mode the team is in [ 1165.344767][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1322'. [ 1167.476400][ T9138] usb 45-1: new high-speed USB device number 4 using vhci_hcd [ 1167.663304][T13099] random: crng reseeded on system resumption [ 1168.680722][T13084] vhci_hcd: connection reset by peer [ 1168.705641][ T8329] vhci_hcd: stop threads [ 1168.710037][ T8329] vhci_hcd: release socket [ 1168.714584][ T8329] vhci_hcd: disconnect device [ 1169.589637][T13110] loop7: detected capacity change from 0 to 8 [ 1172.104955][T13090] netlink: 'syz.3.1325': attribute type 20 has an invalid length. [ 1172.112957][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 1172.121996][T13115] bridge_slave_1: left allmulticast mode [ 1172.127741][T13115] bridge_slave_1: left promiscuous mode [ 1172.133569][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.215647][T13115] bridge_slave_0: left allmulticast mode [ 1172.221522][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.523756][T13120] Invalid ELF header magic: != ELF [ 1172.542308][T13120] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 1172.550692][T13120] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1331'. [ 1173.275078][ T9138] vhci_hcd: vhci_device speed not set [ 1173.708860][T13130] Invalid ELF header magic: != ELF [ 1173.730056][T13130] netlink: 'syz.7.1330': attribute type 1 has an invalid length. [ 1173.738170][T13130] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1330'. [ 1175.412823][T13135] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1335'. [ 1175.436992][ T27] audit: type=1400 audit(1753840056.791:945): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13134 comm="syz.7.1335" [ 1177.115501][ T27] audit: type=1400 audit(1753840058.501:946): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13144 comm="syz.6.1345" [ 1177.167526][T13145] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1345'. [ 1177.867629][T13157] loop7: detected capacity change from 0 to 8 [ 1177.892161][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.898832][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.940158][T13158] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1177.946752][T13158] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1178.145994][T13158] vhci_hcd vhci_hcd.0: Device attached [ 1178.242300][T13165] Invalid ELF header magic: != ELF [ 1178.270146][T13165] netlink: 'syz.6.1342': attribute type 1 has an invalid length. [ 1178.278261][T13165] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1342'. [ 1178.844787][ T5839] usb 35-1: new high-speed USB device number 6 using vhci_hcd [ 1181.669242][T13164] bond0: (slave team0): Releasing backup interface [ 1181.858188][T13164] bond0: (slave bond_slave_0): Releasing backup interface [ 1181.894464][T13164] bond0: (slave bond_slave_1): Releasing backup interface [ 1181.976602][T13164] team0: Port device team_slave_0 removed [ 1182.175893][T13164] team0: Port device team_slave_1 removed [ 1182.187693][T13164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1182.214986][T13164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.261095][T13164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.288633][T13164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1182.330561][T13164] bond1: (slave geneve2): Releasing active interface [ 1182.348573][T13164] bond1: (slave geneve2): the permanent HWaddr of slave - 82:46:c6:6e:4e:28 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1182.366539][T13164] bond1: (slave ip6gretap1): making interface the new active one [ 1182.441688][T13164] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1182.461511][T13164] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1182.524598][T13164] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1182.535209][T13164] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1182.561350][T13164] bond1: (slave ip6gretap1): Releasing active interface [ 1182.642482][T13171] team0: Mode changed to "loadbalance" [ 1182.653242][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'. [ 1183.132012][T13161] vhci_hcd: connection reset by peer [ 1183.168259][ T8333] vhci_hcd: stop threads [ 1183.193855][ T8333] vhci_hcd: release socket [ 1183.242142][ T8333] vhci_hcd: disconnect device [ 1183.420929][ T27] audit: type=1400 audit(1753840064.801:947): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13192 comm="syz.1.1350" [ 1183.439916][T13193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1350'. [ 1184.074822][ T5839] vhci_hcd: vhci_device speed not set [ 1185.374951][T13209] input: syz0 as /devices/virtual/input/input21 [ 1187.062666][T13217] loop7: detected capacity change from 0 to 256 [ 1187.840529][T13229] autofs4:pid:13229:autofs_fill_super: called with bogus options [ 1187.934989][ T27] audit: type=1400 audit(1753840069.311:948): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13230 comm="syz.7.1361" [ 1187.965482][T13231] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1361'. [ 1188.894561][T13245] netlink: 'syz.6.1362': attribute type 1 has an invalid length. [ 1188.902682][T13245] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1362'. [ 1189.786404][T13252] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1363'. [ 1191.796027][ T27] audit: type=1326 audit(1753840073.181:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.1.1365" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89b458e9a9 code=0x0 [ 1192.823733][T13265] input: syz0 as /devices/virtual/input/input22 [ 1193.601097][T13293] netlink: 'syz.7.1373': attribute type 1 has an invalid length. [ 1193.609035][T13293] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1373'. [ 1194.439734][ T27] audit: type=1400 audit(1753840075.821:950): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13285 comm="syz.3.1371" [ 1194.632966][T13292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1371'. [ 1194.661222][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1372'. [ 1194.670646][T13294] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1372'. [ 1196.029076][ T27] audit: type=1400 audit(1753840077.411:951): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13309 comm="syz.1.1378" [ 1196.166597][T13312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1378'. [ 1197.370594][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1377'. [ 1200.409412][T13341] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 1200.417413][T13341] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1382'. [ 1201.884227][T13353] netlink: 'syz.1.1391': attribute type 1 has an invalid length. [ 1201.892389][T13353] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1391'. [ 1202.778414][T13355] siw: device registration error -23 [ 1202.845907][T13363] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1384'. [ 1203.015954][ T27] audit: type=1400 audit(1753840084.211:952): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13360 comm="syz.6.1384" [ 1204.130810][T13369] netlink: 'syz.1.1386': attribute type 20 has an invalid length. [ 1204.775431][T10906] Bluetooth: hci2: command 0x0406 tx timeout [ 1204.859647][ T27] audit: type=1400 audit(1753840086.241:953): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13372 comm="syz.7.1388" [ 1204.887429][T13374] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1388'. [ 1207.869265][T13399] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1395'. [ 1208.831217][ T27] audit: type=1400 audit(1753840090.211:954): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13400 comm="syz.7.1396" [ 1208.866042][T13404] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1396'. [ 1209.715898][ T27] audit: type=1400 audit(1753840091.101:955): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13405 comm="syz.1.1398" [ 1209.755164][T13407] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1398'. [ 1210.826955][T13413] netlink: 'syz.7.1400': attribute type 20 has an invalid length. [ 1211.925247][ T9141] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1212.554825][ T9141] usb 2-1: device descriptor read/64, error -71 [ 1212.885043][ T9141] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1214.008872][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1406'. [ 1214.018562][T13432] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1406'. [ 1215.151965][T13440] netlink: 'syz.3.1405': attribute type 1 has an invalid length. [ 1215.160140][T13440] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1405'. [ 1215.852996][T13441] netlink: set zone limit has 8 unknown bytes [ 1216.942044][T13441] could not allocate digest TFM handle rmd256 [ 1217.008823][ T27] audit: type=1400 audit(1753840098.391:956): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13444 comm="syz.7.1409" [ 1217.046893][T13450] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1409'. [ 1219.445575][T13461] netlink: 'syz.7.1411': attribute type 20 has an invalid length. [ 1222.655895][T13487] netlink: 'syz.7.1416': attribute type 1 has an invalid length. [ 1222.663744][T13487] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1416'. [ 1224.366087][ T27] audit: type=1400 audit(1753840105.741:957): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13491 comm="syz.3.1420" [ 1224.388611][T13494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1420'. [ 1228.988586][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 1228.998221][T13512] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1418'. [ 1230.728059][T13527] netlink: 'syz.6.1424': attribute type 20 has an invalid length. [ 1231.174893][ C0] af_packet: tpacket_rcv: packet too big, clamped from 104 to 4294967272. macoff=96 [ 1231.268382][T13529] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1426'. [ 1238.061457][ T787] IPVS: starting estimator thread 0... [ 1238.154820][T13592] IPVS: using max 18 ests per chain, 43200 per kthread [ 1238.942064][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.949258][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.338807][T13622] Invalid ELF header magic: != ELF [ 1241.347956][T13622] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 1241.355833][T13622] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1447'. [ 1241.804027][ T27] audit: type=1800 audit(1753840123.181:958): pid=13621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.1447" name="/newroot/384/bus" dev="tmpfs" ino=2108 res=0 errno=0 [ 1241.826266][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.227735][T13629] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 1242.237628][T13629] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1242.244684][T13629] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 1242.252421][T13629] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 1242.259653][T13629] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1242.268053][T13629] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 1242.275236][T13629] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1242.282468][T13629] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 1242.292226][T13629] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1243.956385][T13638] batman_adv: batadv0: Adding interface: dummy0 [ 1243.962819][T13638] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.990331][T13638] batman_adv: batadv0: Interface activated: dummy0 [ 1244.069683][T13638] batadv0: mtu less than device minimum [ 1244.077729][T13638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1244.091208][T13638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1244.103828][T13638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1244.116624][T13638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1244.129289][T13638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1244.141941][T13638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1244.154562][T13638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1244.167205][T13638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1244.179808][T13638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1245.824799][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 1248.374555][T13678] ptrace attach of "./syz-executor exec"[5792] was attempted by "./syz-executor exec"[13678] [ 1248.596357][T13677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1460'. [ 1254.118112][T13714] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1254.118112][T13714] program syz.1.1467 not setting count and/or reply_len properly [ 1257.349956][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1476'. [ 1257.360146][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1476'. [ 1258.697338][T13752] net_ratelimit: 10 callbacks suppressed [ 1258.697380][T13752] netlink: set zone limit has 8 unknown bytes [ 1259.027441][T13757] netlink: 592 bytes leftover after parsing attributes in process `syz.6.1480'. [ 1259.136871][T13752] could not allocate digest TFM handle rmd256 [ 1259.474998][T13764] netlink: 'syz.1.1483': attribute type 1 has an invalid length. [ 1259.816904][T13771] netlink: 'syz.7.1484': attribute type 20 has an invalid length. [ 1260.225755][T13770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1260.414189][T13764] veth5: entered promiscuous mode [ 1260.446514][T13764] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1260.503600][T13767] bond2: (slave veth5): Releasing backup interface [ 1261.745915][T13792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1261.775906][T13792] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1262.700724][T13804] netlink: 'syz.7.1493': attribute type 20 has an invalid length. [ 1263.297002][ T27] audit: type=1400 audit(1753840144.681:959): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13806 comm="syz.1.1495" [ 1263.365901][T13811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1495'. [ 1266.570825][T13833] Invalid ELF header magic: != ELF [ 1266.580007][T13833] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 1266.588218][T13833] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1503'. [ 1266.688382][T13838] netlink: 'syz.3.1505': attribute type 20 has an invalid length. [ 1267.758473][T13844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1267.787973][T13844] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1268.466505][ T27] audit: type=1400 audit(1753840149.851:960): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13845 comm="syz.3.1508" [ 1268.523914][T13851] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1508'. [ 1273.409922][T13902] Invalid ELF header magic: != ELF [ 1273.418856][T13902] netlink: 'syz.6.1514': attribute type 1 has an invalid length. [ 1273.426705][T13902] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1514'. [ 1273.464131][T13901] netlink: 'syz.1.1516': attribute type 20 has an invalid length. [ 1281.815503][T13956] netlink: 'syz.1.1529': attribute type 20 has an invalid length. [ 1282.222468][T13961] Invalid ELF header magic: != ELF [ 1282.230925][T13961] netlink: 'syz.6.1530': attribute type 1 has an invalid length. [ 1282.238927][T13961] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1530'. [ 1282.605660][T13966] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1283.377592][T13975] Invalid ELF header magic: != ELF [ 1283.392972][T13975] netlink: 'syz.7.1540': attribute type 1 has an invalid length. [ 1283.400943][T13975] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1540'. [ 1284.741990][T13994] Invalid ELF header magic: != ELF [ 1284.745684][T13994] netlink: 'syz.6.1535': attribute type 1 has an invalid length. [ 1284.745752][T13994] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1535'. [ 1284.751612][T13993] Invalid ELF header magic: != ELF [ 1284.755352][T13993] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 1284.755375][T13993] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1537'. [ 1286.285808][T13989] ax25_connect(): syz.3.1536 uses autobind, please contact jreuter@yaina.de [ 1288.923858][T14017] Invalid ELF header magic: != ELF [ 1288.932672][T14017] netlink: 'syz.7.1549': attribute type 1 has an invalid length. [ 1288.940608][T14017] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1549'. [ 1289.940400][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'. [ 1290.407115][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 1292.227275][ T27] audit: type=1400 audit(1753840173.601:961): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14054 comm="syz.7.1548" [ 1292.238193][T14056] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1548'. [ 1294.575993][T14062] Invalid ELF header magic: != ELF [ 1294.584987][T14062] netlink: 'syz.6.1547': attribute type 1 has an invalid length. [ 1294.592774][T14062] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1547'. [ 1295.692282][T14070] Invalid ELF header magic: != ELF [ 1295.696008][T14070] netlink: 'syz.3.1554': attribute type 1 has an invalid length. [ 1295.696024][T14070] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1554'. [ 1297.152963][T14079] Invalid ELF header magic: != ELF [ 1297.161910][T14079] netlink: 'syz.3.1555': attribute type 1 has an invalid length. [ 1297.169806][T14079] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1555'. [ 1300.445161][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.451650][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.787088][T14110] Invalid ELF header magic: != ELF [ 1300.796148][T14110] netlink: 'syz.6.1562': attribute type 1 has an invalid length. [ 1300.804077][T14110] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1562'. [ 1301.183334][T14109] trusted_key: encrypted_key: insufficient parameters specified [ 1307.498169][T14157] Invalid ELF header magic: != ELF [ 1307.508450][T14157] netlink: 'syz.7.1573': attribute type 1 has an invalid length. [ 1307.516579][T14157] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1573'. [ 1311.120019][T14181] Invalid ELF header magic: != ELF [ 1311.128647][T14181] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 1311.136583][T14181] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1580'. [ 1318.326200][T14232] Invalid ELF header magic: != ELF [ 1318.335139][T14232] netlink: 'syz.1.1593': attribute type 1 has an invalid length. [ 1318.343036][T14232] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1593'. [ 1318.727888][T14231] trusted_key: encrypted_key: insufficient parameters specified [ 1322.496624][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 1322.505896][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'. [ 1323.552407][T14254] bond0 (unregistering): Released all slaves [ 1327.729273][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1610'. [ 1329.944485][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1611'. [ 1329.954691][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1611'. [ 1330.953608][T14330] Invalid ELF header magic: != ELF [ 1330.967618][T14330] netlink: 'syz.1.1613': attribute type 1 has an invalid length. [ 1330.975621][T14330] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1613'. [ 1331.255182][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 1334.071933][T14351] 9pnet_fd: Insufficient options for proto=fd [ 1336.562654][T14365] futex_wake_op: syz.3.1622 tries to shift op by -33; fix this program [ 1338.099776][T14378] Invalid ELF header magic: != ELF [ 1338.108667][T14378] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 1338.116524][T14378] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1625'. [ 1338.331505][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 1338.340829][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 1340.362030][T14395] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1342.714706][T14400] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1346.557322][T14414] trusted_key: encrypted_key: insufficient parameters specified [ 1347.020785][ T27] audit: type=1400 audit(1753840228.408:962): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14419 comm="syz.6.1636" [ 1347.048854][T14421] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1636'. [ 1348.620657][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 1349.458737][T14434] Invalid ELF header magic: != ELF [ 1349.701189][T14434] netlink: 'syz.3.1632': attribute type 1 has an invalid length. [ 1349.709466][T14434] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1632'. [ 1350.983358][T14444] netlink: 'syz.7.1640': attribute type 1 has an invalid length. [ 1351.158586][T14444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1351.767114][ T5800] Bluetooth: hci2: Malformed Event: 0x02 [ 1354.087690][T14447] bond1 (unregistering): Released all slaves [ 1355.346419][T14479] binder: 14474:14479 ioctl c018620c 200000000000 returned -1 [ 1362.227470][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.227620][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.362779][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1656'. [ 1363.407483][T14509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1654'. [ 1365.863772][T14534] raw_sendmsg: syz.1.1659 forgot to set AF_INET. Fix it! [ 1367.568835][T14535] tipc: Enabling of bearer rejected, already enabled [ 1370.635594][T14554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1666'. [ 1370.645411][ T27] audit: type=1400 audit(1753840251.998:963): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14552 comm="syz.1.1666" [ 1374.034782][ T9141] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1374.162131][T14568] batadv_slave_0: entered promiscuous mode [ 1374.255381][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1669'. [ 1374.534918][ T9141] usb 7-1: Using ep0 maxpacket: 8 [ 1374.549692][ T9141] usb 7-1: config 2 has an invalid interface number: 226 but max is 0 [ 1374.572659][ T9141] usb 7-1: config 2 has no interface number 0 [ 1374.595060][ T9141] usb 7-1: config 2 interface 226 altsetting 91 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1374.688460][ T9141] usb 7-1: config 2 interface 226 altsetting 91 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1374.704945][ T9141] usb 7-1: config 2 interface 226 altsetting 91 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1374.716892][ T9141] usb 7-1: config 2 interface 226 has no altsetting 0 [ 1374.727499][ T9141] usb 7-1: New USB device found, idVendor=05c8, idProduct=0403, bcdDevice=d4.d4 [ 1374.749605][ T9141] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.758116][ T9141] usb 7-1: Product: syz [ 1374.763117][ T9141] usb 7-1: Manufacturer: syz [ 1374.797465][ T9141] usb 7-1: SerialNumber: syz [ 1376.245159][T10906] Bluetooth: hci2: command 0x0406 tx timeout [ 1377.829802][ T9141] usb 7-1: Found UVC 0.00 device syz (05c8:0403) [ 1377.837247][ T9141] usb 7-1: No valid video chain found. [ 1377.852512][ T9141] usb 7-1: USB disconnect, device number 5 [ 1379.168770][ T27] audit: type=1400 audit(1753840260.548:964): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14603 comm="syz.7.1676" [ 1379.200176][T14608] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1676'. [ 1391.013626][T14674] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1693'. [ 1391.537571][T14683] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1693'. [ 1392.826965][T14690] binder: 14677:14690 ioctl c018620c 200000000000 returned -1 [ 1393.092877][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1696'. [ 1394.234870][ T9134] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1394.527127][ T9134] usb 8-1: Using ep0 maxpacket: 32 [ 1394.565003][ T9134] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1394.629388][ T9134] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.695211][ T9134] usb 8-1: config 0 descriptor?? [ 1394.919592][ T9134] usb 8-1: can't set config #0, error -71 [ 1395.731469][T14713] x_tables: ip6_tables: NOTRACK target: only valid in raw table, not  [ 1397.463032][ T9134] usb 8-1: USB disconnect, device number 2 [ 1397.754965][T14716] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1703'. [ 1400.091462][T14729] hub 8-0:1.0: USB hub found [ 1400.100720][T14729] hub 8-0:1.0: 1 port detected [ 1401.193057][T14736] ubi31: attaching mtd0 [ 1401.245050][T14736] ubi31: scanning is finished [ 1402.925312][T14736] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1402.933006][T14736] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1402.941529][T14736] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1402.948815][T14736] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1402.956424][T14736] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1402.963395][T14736] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1402.972331][T14736] ubi31: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3070092968 [ 1402.982476][T14736] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1402.992657][T14738] ubi31: background thread "ubi_bgt31d" started, PID 14738 [ 1406.519065][T14764] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1715'. [ 1407.692365][T14772] sctp: [Deprecated]: syz.7.1716 (pid 14772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1407.692365][T14772] Use struct sctp_sack_info instead [ 1409.975043][T14780] Invalid ELF header magic: != ELF [ 1409.997315][T14780] netlink: 'syz.6.1719': attribute type 1 has an invalid length. [ 1410.005723][T14780] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1719'. [ 1414.791632][T14814] sctp: [Deprecated]: syz.1.1727 (pid 14814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1414.791632][T14814] Use struct sctp_sack_info instead [ 1416.717086][T14833] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1733'. [ 1418.062440][ T27] audit: type=1326 audit(1753840299.338:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.6.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7fc00000 [ 1418.192369][ T27] audit: type=1326 audit(1753840299.338:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.6.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f25bd38e9a9 code=0x7fc00000 [ 1418.216156][ T27] audit: type=1326 audit(1753840299.338:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.6.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7fc00000 [ 1418.239814][ T27] audit: type=1326 audit(1753840299.338:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.6.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7fc00000 [ 1418.262623][ T27] audit: type=1326 audit(1753840299.338:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.6.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7fc00000 [ 1418.285505][ T27] audit: type=1326 audit(1753840299.348:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.6.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7fc00000 [ 1418.310597][ T27] audit: type=1326 audit(1753840299.348:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.6.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7fc00000 [ 1418.333451][ T27] audit: type=1326 audit(1753840299.348:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.6.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7fc00000 [ 1418.356950][ T27] audit: type=1326 audit(1753840299.348:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.6.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7fc00000 [ 1418.380374][ T27] audit: type=1326 audit(1753840299.348:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.6.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7fc00000 [ 1421.336280][T14867] Bluetooth: hci2: command 0x0406 tx timeout [ 1423.265407][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.271937][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.592244][T14889] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1423.672687][T14897] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1746'. [ 1423.887818][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 1423.887873][ T27] audit: type=1400 audit(1753840305.038:1031): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14891 comm="syz.7.1746" [ 1429.627186][T14926] autofs4:pid:14926:autofs_fill_super: called with bogus options [ 1432.756825][T14933] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1753'. [ 1434.351995][T14950] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1438.574292][ T27] audit: type=1326 audit(1753840319.468:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.3.1764" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3df518e9a9 code=0x0 [ 1439.029602][T14976] hub 2-0:1.0: USB hub found [ 1439.036012][T14976] hub 2-0:1.0: 1 port detected [ 1449.666497][T15056] hub 8-0:1.0: USB hub found [ 1449.672188][T15056] hub 8-0:1.0: 1 port detected [ 1450.302046][T15060] hub 2-0:1.0: USB hub found [ 1450.313124][T15060] hub 2-0:1.0: 1 port detected [ 1455.545805][T15092] netlink: 'syz.7.1790': attribute type 4 has an invalid length. [ 1456.714002][T15096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1793'. [ 1463.706598][T15145] netlink: 'syz.7.1812': attribute type 20 has an invalid length. [ 1464.260934][T15154] xt_bpf: check failed: parse error [ 1465.182016][T15147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1805'. [ 1467.101061][T14867] Bluetooth: hci2: command 0x0406 tx timeout [ 1470.054717][ T9134] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1470.840364][ T9134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.966669][ T9134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.041172][ T9134] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1471.792042][ T9134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.854977][ T9134] usb 4-1: config 0 descriptor?? [ 1472.319182][ T9134] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1472.590062][ T9134] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1473.032808][ T9134] cp2112 0003:10C4:EA90.0004: error requesting version [ 1473.065106][ T9134] cp2112: probe of 0003:10C4:EA90.0004 failed with error -32 [ 1473.546691][T14867] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 1474.599433][ T5900] usb 4-1: USB disconnect, device number 6 [ 1476.813208][ T27] audit: type=1326 audit(1753840358.198:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.6.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1476.874377][T15240] netlink: 'syz.1.1828': attribute type 20 has an invalid length. [ 1477.016395][ T27] audit: type=1326 audit(1753840358.228:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.6.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1477.040358][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.469450][ T27] audit: type=1326 audit(1753840358.228:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.6.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1477.828056][ T27] audit: type=1326 audit(1753840358.228:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.6.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1477.859036][ T27] audit: type=1326 audit(1753840358.228:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.6.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1477.882456][ T27] audit: type=1326 audit(1753840358.228:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.6.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1477.904936][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.966371][ T27] audit: type=1326 audit(1753840358.228:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.6.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1477.989023][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.053626][ T27] audit: type=1326 audit(1753840358.228:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.6.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1478.091691][ T27] audit: type=1326 audit(1753840358.228:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.6.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd38e9a9 code=0x7ffc0000 [ 1478.120363][ T27] audit: type=1326 audit(1753840358.238:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.6.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25bd38d310 code=0x7ffc0000 [ 1479.798078][T15269] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1830'. [ 1484.698522][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.848404][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.505861][T15311] netlink: 'syz.6.1845': attribute type 20 has an invalid length. [ 1489.845158][T15343] IPVS: ovf: TCP 172.20.20.170:0 - no destination available [ 1490.947607][ C1] IPVS: ovf: TCP 172.20.20.170:0 - no destination available [ 1491.215508][T15346] syz.3.1852 (15346): drop_caches: 2 [ 1497.267317][T15380] netlink: 'syz.3.1862': attribute type 20 has an invalid length. [ 1498.729296][T15391] syz.1.1865 (15391) used greatest stack depth: 17768 bytes left [ 1498.821737][T15398] Invalid ELF header magic: != ELF [ 1498.842060][T15398] netlink: 'syz.6.1867': attribute type 1 has an invalid length. [ 1498.850286][T15398] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1867'. [ 1500.304781][ T9138] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1501.034856][ T9138] usb 2-1: Using ep0 maxpacket: 16 [ 1501.084751][ T9138] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1501.764829][ T9138] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.787832][ T9138] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1501.814115][ T9138] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1501.881539][ T9138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.917949][ T9138] usb 2-1: Product: syz [ 1501.984175][ T9138] usb 2-1: Manufacturer: syz [ 1501.993954][ T9138] usb 2-1: SerialNumber: syz [ 1503.280382][T15418] tipc: Enabling of bearer rejected, already enabled [ 1504.324042][T15418] tipc: Enabling of bearer rejected, failed to enable media [ 1504.387628][ T9138] usb 2-1: 0:2 : does not exist [ 1505.205788][T15431] input: syz0 as /devices/virtual/input/input23 [ 1505.922949][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1875'. [ 1506.574989][ T9138] usb 2-1: USB disconnect, device number 11 [ 1506.771845][T15406] udevd[15406]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1507.119812][T15443] Invalid ELF header magic: != ELF [ 1507.139879][T15443] netlink: 'syz.3.1876': attribute type 1 has an invalid length. [ 1507.148474][T15443] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1876'. [ 1513.152258][T15492] netlink: 'syz.6.1884': attribute type 20 has an invalid length. [ 1519.895586][T14867] Bluetooth: hci2: command 0x0406 tx timeout [ 1525.009674][T15586] netlink: 'syz.1.1901': attribute type 20 has an invalid length. [ 1525.027030][T15104] IPVS: starting estimator thread 0... [ 1525.124784][T15585] IPVS: using max 26 ests per chain, 62400 per kthread [ 1528.794180][T15630] hub 8-0:1.0: USB hub found [ 1528.868477][T15633] netlink: 'syz.7.1918': attribute type 20 has an invalid length. [ 1528.877310][T15630] hub 8-0:1.0: 1 port detected [ 1531.642815][T15655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1531.671851][T15655] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1533.876213][ T27] kauditd_printk_skb: 87 callbacks suppressed [ 1533.876225][ T27] audit: type=1400 audit(1753840415.268:1130): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=15672 comm="syz.7.1929" [ 1533.902334][T15676] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1929'. [ 1534.762076][T15684] input: syz1 as /devices/virtual/input/input24 [ 1535.582051][T15688] netlink: 'syz.1.1923': attribute type 20 has an invalid length. [ 1536.822772][T15704] syz.1.1926 (15704): drop_caches: 2 [ 1538.620977][T15701] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1927'. [ 1542.840476][ T27] audit: type=1400 audit(1753840424.228:1131): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=15732 comm="syz.6.1933" [ 1542.995754][T15735] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1933'. [ 1543.124369][T15738] netlink: 'syz.7.1935': attribute type 20 has an invalid length. [ 1544.770927][T15759] dlm: no locking on control device [ 1546.139262][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.146430][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.196636][T15783] netlink: 'syz.7.1944': attribute type 20 has an invalid length. [ 1548.293028][T15789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1945'. [ 1548.303591][ T27] audit: type=1400 audit(1753840429.678:1132): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=15784 comm="syz.1.1945" [ 1551.382661][T15814] hub 8-0:1.0: USB hub found [ 1551.389147][T15814] hub 8-0:1.0: 1 port detected [ 1552.489208][ T27] audit: type=1400 audit(1753840433.868:1133): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=15815 comm="syz.6.1961" [ 1552.493525][T15816] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1961'. [ 1552.739781][ T27] audit: type=1326 audit(1753840434.128:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1552.969638][ T27] audit: type=1326 audit(1753840434.148:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1553.186151][ T27] audit: type=1326 audit(1753840434.158:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1553.368452][ T27] audit: type=1326 audit(1753840434.158:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1553.523813][ T27] audit: type=1326 audit(1753840434.168:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1553.568805][ T27] audit: type=1326 audit(1753840434.168:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1553.592739][ T27] audit: type=1326 audit(1753840434.168:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1553.615557][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.623052][ T27] audit: type=1326 audit(1753840434.168:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1553.647842][ T27] audit: type=1326 audit(1753840434.168:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1553.671336][ T27] audit: type=1326 audit(1753840434.168:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1553.697980][ T27] audit: type=1326 audit(1753840434.168:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1553.864577][ T27] audit: type=1326 audit(1753840434.178:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1554.204957][ T27] audit: type=1326 audit(1753840434.178:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1554.720665][T15823] netlink: 'syz.7.1955': attribute type 20 has an invalid length. [ 1554.904652][ T2174] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1556.146302][ T2174] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.170677][ T2174] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.194529][ T2174] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1556.203650][ T2174] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.237159][ T2174] usb 7-1: config 0 descriptor?? [ 1556.254808][ T2174] usb 7-1: can't set config #0, error -71 [ 1556.320169][T15842] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1962'. [ 1556.347465][ T2174] usb 7-1: USB disconnect, device number 6 [ 1557.364899][T15850] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1965'. [ 1557.597624][T15853] netlink: 'syz.1.1966': attribute type 20 has an invalid length. [ 1558.071407][T15855] netlink: 'syz.3.1967': attribute type 20 has an invalid length. [ 1558.339920][T15857] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1975'. [ 1558.743047][T15863] xt_connbytes: Forcing CT accounting to be enabled [ 1558.750311][T15863] xt_bpf: check failed: parse error [ 1559.540800][T10906] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1560.665539][T15877] syz.6.1970 (15877): drop_caches: 2 [ 1564.393288][T15883] netlink: 'syz.7.1977': attribute type 20 has an invalid length. [ 1565.672464][T15893] netlink: 'syz.1.1978': attribute type 20 has an invalid length. [ 1566.144014][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 1566.144030][ T27] audit: type=1400 audit(1753840447.528:1178): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=15892 comm="syz.7.1979" [ 1566.316226][T15894] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1979'. [ 1566.454793][T14867] Bluetooth: hci2: command 0x0406 tx timeout [ 1566.923320][T15904] hub 8-0:1.0: USB hub found [ 1566.929206][T15904] hub 8-0:1.0: 1 port detected [ 1568.055422][T15913] hub 8-0:1.0: USB hub found [ 1568.061167][T15913] hub 8-0:1.0: 1 port detected [ 1569.412094][T15923] syz.7.1984 (15923): drop_caches: 2 [ 1571.081626][ T27] audit: type=1326 audit(1753840452.468:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b458e9a9 code=0x7ffc0000 [ 1571.313416][ T27] audit: type=1326 audit(1753840452.468:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b458e9a9 code=0x7ffc0000 [ 1571.600408][T15928] netlink: 'syz.7.1987': attribute type 20 has an invalid length. [ 1571.852256][ T27] audit: type=1326 audit(1753840452.508:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f89b458e9a9 code=0x7ffc0000 [ 1571.882226][ T27] audit: type=1326 audit(1753840452.518:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b458e9a9 code=0x7ffc0000 [ 1571.906816][ T27] audit: type=1326 audit(1753840452.528:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b458e9a9 code=0x7ffc0000 [ 1571.929779][ T27] audit: type=1326 audit(1753840452.538:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f89b458e9a9 code=0x7ffc0000 [ 1571.952563][ T27] audit: type=1326 audit(1753840452.538:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b458e9a9 code=0x7ffc0000 [ 1572.047366][ T27] audit: type=1326 audit(1753840452.548:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b458e9a9 code=0x7ffc0000 [ 1572.145429][ T27] audit: type=1326 audit(1753840452.548:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89b458e9a9 code=0x7ffc0000 [ 1572.204814][ T27] audit: type=1326 audit(1753840452.558:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b458e9a9 code=0x7ffc0000 [ 1572.244557][ T27] audit: type=1326 audit(1753840452.558:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b458e9a9 code=0x7ffc0000 [ 1572.479346][T15936] Invalid ELF header magic: != ELF [ 1572.497004][T15936] netlink: 'syz.7.1988': attribute type 1 has an invalid length. [ 1572.505024][T15936] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1988'. [ 1573.124862][T15932] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1990'. [ 1573.302626][T15940] netlink: 'syz.7.1991': attribute type 20 has an invalid length. [ 1574.131508][T15946] hub 8-0:1.0: USB hub found [ 1574.146100][T15946] hub 8-0:1.0: 1 port detected [ 1576.161283][T15958] netlink: 'syz.6.1996': attribute type 20 has an invalid length. [ 1577.206890][T15963] hub 8-0:1.0: USB hub found [ 1577.213377][T15963] hub 8-0:1.0: 1 port detected [ 1578.326150][T15979] Invalid ELF header magic: != ELF [ 1578.335635][T15979] netlink: 'syz.7.1999': attribute type 1 has an invalid length. [ 1578.343575][T15979] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1999'. [ 1578.645187][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 1578.645206][ T27] audit: type=1400 audit(1753840460.038:1221): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=15976 comm="syz.1.2001" [ 1578.672584][T15980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2001'. [ 1579.013890][T15984] netlink: 'syz.6.2002': attribute type 20 has an invalid length. [ 1579.603771][T15992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2004'. [ 1580.662685][T16005] IPVS: ovf: TCP 172.20.20.170:0 - no destination available [ 1580.843474][T16008] syz.3.2007 (16008): drop_caches: 2 [ 1583.604063][ T787] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1583.874928][T16026] hub 8-0:1.0: USB hub found [ 1583.883598][T16026] hub 8-0:1.0: 1 port detected [ 1584.382512][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1584.414518][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1584.426187][ T787] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1584.436391][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.477292][ T787] usb 2-1: config 0 descriptor?? [ 1584.885263][T16035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2013'. [ 1584.908651][ T27] audit: type=1400 audit(1753840466.258:1222): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16032 comm="syz.3.2013" [ 1584.951867][ T787] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1585.805006][ T787] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1585.922411][ T787] cp2112 0003:10C4:EA90.0005: error requesting version [ 1585.968856][T16041] ptrace attach of "./syz-executor exec"[8948] was attempted by "./syz-executor exec"[16041] [ 1585.980601][ T787] cp2112: probe of 0003:10C4:EA90.0005 failed with error -32 [ 1586.848834][T16050] syz.7.2017 (16050): drop_caches: 2 [ 1587.629310][ T5839] usb 2-1: USB disconnect, device number 12 [ 1588.668911][ T27] audit: type=1326 audit(1753840470.058:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1589.020808][ T27] audit: type=1326 audit(1753840470.078:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1589.264990][ T9138] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1589.264994][ T27] audit: type=1326 audit(1753840470.098:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1589.265040][ T27] audit: type=1326 audit(1753840470.098:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1589.327193][ T27] audit: type=1326 audit(1753840470.098:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1589.351849][ T9138] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1589.887730][ T27] audit: type=1326 audit(1753840470.098:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1592.041471][ T27] audit: type=1326 audit(1753840470.098:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1592.065738][ T27] audit: type=1326 audit(1753840470.098:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1592.088954][ T27] audit: type=1326 audit(1753840470.098:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1592.112484][ T27] audit: type=1326 audit(1753840470.108:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1592.185330][ T27] audit: type=1326 audit(1753840470.108:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1592.265599][ T27] audit: type=1326 audit(1753840470.108:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1592.287987][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.294793][ T27] audit: type=1326 audit(1753840470.108:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1592.317228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.337737][ T27] audit: type=1326 audit(1753840470.108:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1592.379750][T16064] fido_id[16064]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1592.411530][ T27] audit: type=1326 audit(1753840470.108:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f070978d310 code=0x7ffc0000 [ 1592.434058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1594.599372][ T27] audit: type=1326 audit(1753840470.108:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070978e9a9 code=0x7ffc0000 [ 1594.746804][T16078] hub 8-0:1.0: USB hub found [ 1594.752649][T16078] hub 8-0:1.0: 1 port detected [ 1599.454243][T16107] hub 8-0:1.0: USB hub found [ 1599.460111][T16107] hub 8-0:1.0: 1 port detected [ 1600.164362][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 1600.291672][ T27] audit: type=1326 audit(1753840481.548:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1600.726549][ T27] audit: type=1326 audit(1753840481.548:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1600.764130][ T27] audit: type=1326 audit(1753840481.548:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1600.806935][ T27] audit: type=1326 audit(1753840481.548:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1600.843654][ T27] audit: type=1326 audit(1753840481.548:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1600.895660][ T27] audit: type=1326 audit(1753840481.548:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1600.932522][ T27] audit: type=1326 audit(1753840481.548:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1601.712714][ T27] audit: type=1326 audit(1753840481.548:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1601.712780][ T27] audit: type=1326 audit(1753840481.548:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1601.712827][ T27] audit: type=1326 audit(1753840481.548:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3df518e9a9 code=0x7ffc0000 [ 1601.850006][T16123] hub 8-0:1.0: USB hub found [ 1601.851331][T16123] hub 8-0:1.0: 1 port detected [ 1606.411313][T16148] hub 8-0:1.0: USB hub found [ 1606.417866][T16148] hub 8-0:1.0: 1 port detected [ 1606.942569][T16154] autofs4:pid:16154:autofs_fill_super: called with bogus options [ 1607.088353][T16157] Invalid ELF header magic: != ELF [ 1607.097542][T16157] netlink: 'syz.3.2036': attribute type 1 has an invalid length. [ 1607.105743][T16157] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2036'. [ 1607.591039][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.759566][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.129417][T16180] random: crng reseeded on system resumption [ 1611.331027][T16182] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1611.338205][T16182] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1611.364376][ C1] vkms_vblank_simulate: vblank timer overrun [ 1611.370888][T16182] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1612.021316][T16192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1612.029167][T16192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1612.223229][T16192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1612.231328][T16192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1612.391276][T16192] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1612.513441][T16181] xt_CT: No such helper "snmp" [ 1613.174919][T10906] Bluetooth: hci2: command 0x0406 tx timeout [ 1613.443001][T16200] hub 8-0:1.0: USB hub found [ 1613.451981][T16200] hub 8-0:1.0: 1 port detected [ 1619.198982][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2061'. [ 1622.182392][T16247] hub 8-0:1.0: USB hub found [ 1622.188374][T16247] hub 8-0:1.0: 1 port detected [ 1622.564277][T16251] Invalid ELF header magic: != ELF [ 1622.582079][T16251] netlink: 'syz.6.2062': attribute type 1 has an invalid length. [ 1622.590164][T16251] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2062'. [ 1623.730207][T16261] vivid-006: kernel_thread() failed [ 1626.825533][T16281] mkiss: ax0: crc mode is auto. [ 1627.793350][T16294] hub 8-0:1.0: USB hub found [ 1627.802100][T16294] hub 8-0:1.0: 1 port detected [ 1629.507307][T16303] hub 8-0:1.0: USB hub found [ 1629.530796][T16303] hub 8-0:1.0: 1 port detected [ 1637.243638][T16335] Invalid ELF header magic: != ELF [ 1637.312047][T16335] netlink: 'syz.1.2081': attribute type 1 has an invalid length. [ 1637.319936][T16335] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2081'. [ 1638.736129][T16347] hub 8-0:1.0: USB hub found [ 1638.741888][T16347] hub 8-0:1.0: 1 port detected [ 1639.681203][T16351] hub 8-0:1.0: USB hub found [ 1639.693248][T16351] hub 8-0:1.0: 1 port detected [ 1640.640235][T16355] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 1641.648363][T16368] hub 8-0:1.0: USB hub found [ 1641.654011][T16368] hub 8-0:1.0: 1 port detected [ 1643.518637][T16375] ubi: mtd0 is already attached to ubi31 [ 1648.788527][T16399] hub 8-0:1.0: USB hub found [ 1648.802597][T16399] hub 8-0:1.0: 1 port detected [ 1650.103622][T16412] Invalid ELF header magic: != ELF [ 1650.125271][T16412] netlink: 'syz.1.2101': attribute type 1 has an invalid length. [ 1650.133283][T16412] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2101'. [ 1653.165301][T16430] hub 8-0:1.0: USB hub found [ 1653.171160][T16430] hub 8-0:1.0: 1 port detected [ 1657.158178][T16443] hub 8-0:1.0: USB hub found [ 1657.165111][T16443] hub 8-0:1.0: 1 port detected [ 1657.825340][T16455] Invalid ELF header magic: != ELF [ 1657.841697][T16455] netlink: 'syz.3.2114': attribute type 1 has an invalid length. [ 1657.849766][T16455] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2114'. [ 1658.175826][T16461] netlink: 'syz.1.2113': attribute type 1 has an invalid length. [ 1658.183772][T16461] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2113'. [ 1658.905871][T16471] hub 8-0:1.0: USB hub found [ 1658.915165][T16471] hub 8-0:1.0: 1 port detected [ 1659.574607][T14867] Bluetooth: hci2: command 0x0406 tx timeout [ 1661.292626][T16484] hub 8-0:1.0: USB hub found [ 1661.298736][T16484] hub 8-0:1.0: 1 port detected [ 1662.146743][T16491] Invalid ELF header magic: != ELF [ 1662.155490][T16491] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 1662.163274][T16491] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2123'. [ 1662.475472][T16498] tipc: Enabling of bearer rejected, already enabled [ 1662.483985][T16498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2122'. [ 1663.579639][T16503] Invalid ELF header magic: != ELF [ 1663.587895][T16503] netlink: 'syz.7.2125': attribute type 1 has an invalid length. [ 1663.595986][T16503] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2125'. [ 1669.652326][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.659217][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.726216][T16546] hub 8-0:1.0: USB hub found [ 1669.743716][T16546] hub 8-0:1.0: 1 port detected [ 1671.221572][T16567] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2141'. [ 1672.283925][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 1672.283942][ T27] audit: type=1400 audit(1753840553.668:1307): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16574 comm="syz.7.2145" [ 1672.324069][T16576] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2145'. [ 1673.591121][T16585] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1675.093052][T16604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2152'. [ 1676.572765][T16612] hub 8-0:1.0: USB hub found [ 1676.583994][T16612] hub 8-0:1.0: 1 port detected [ 1677.066416][T16616] hub 8-0:1.0: USB hub found [ 1677.072047][T16616] hub 8-0:1.0: 1 port detected [ 1677.492784][T16620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2157'. [ 1677.503099][ T27] audit: type=1400 audit(1753840558.868:1308): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16614 comm="syz.3.2157" [ 1679.880692][T16646] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2164'. [ 1681.304833][T16653] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1681.579497][ T27] audit: type=1400 audit(1753840562.968:1309): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16657 comm="syz.3.2170" [ 1681.612018][T16659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2170'. [ 1683.094052][T16677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'. [ 1685.331067][T16691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2180'. [ 1685.344131][ T27] audit: type=1400 audit(1753840566.688:1310): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16688 comm="syz.3.2180" [ 1685.759315][T16690] hub 8-0:1.0: USB hub found [ 1685.765177][T16690] hub 8-0:1.0: 1 port detected [ 1687.309786][T16710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2186'. [ 1687.566901][ T9145] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1687.776020][T16712] hub 8-0:1.0: USB hub found [ 1687.781804][T16712] hub 8-0:1.0: 1 port detected [ 1687.978843][ T9145] usb 2-1: config 54 has an invalid interface number: 154 but max is 0 [ 1688.048366][ T9145] usb 2-1: config 54 has no interface number 0 [ 1688.146838][ T9145] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1688.204715][ T9145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.302894][ T9145] usb 2-1: Product: syz [ 1688.353043][ T9145] usb 2-1: Manufacturer: syz [ 1688.402128][ T9145] usb 2-1: SerialNumber: syz [ 1689.100561][ T9145] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1689.109970][ T59] usb 2-1: Failed to submit usb control message: -71 [ 1689.117740][ T59] usb 2-1: unable to send the bmi data to the device: -71 [ 1689.125081][ T59] usb 2-1: unable to get target info from device [ 1689.133429][ T59] usb 2-1: could not get target info (-71) [ 1689.139825][ T59] usb 2-1: could not probe fw (-71) [ 1689.240568][ T9145] usb 2-1: USB disconnect, device number 13 [ 1690.691239][ T27] audit: type=1400 audit(1753840572.078:1311): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16730 comm="syz.1.2192" [ 1690.723714][T16733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2192'. [ 1693.301053][T16736] hub 8-0:1.0: USB hub found [ 1693.306815][T16736] hub 8-0:1.0: 1 port detected [ 1694.191067][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2197'. [ 1696.321817][ T27] audit: type=1400 audit(1753840577.698:1312): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16761 comm="syz.6.2203" [ 1696.327187][T16768] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2203'. [ 1697.184941][T16774] hub 8-0:1.0: USB hub found [ 1697.190624][T16774] hub 8-0:1.0: 1 port detected [ 1699.562838][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'. [ 1700.528382][T10906] Bluetooth: hci2: command 0x0406 tx timeout [ 1701.565507][T16807] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2215'. [ 1703.743133][ T27] audit: type=1400 audit(1753840582.938:1313): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16805 comm="syz.7.2215" [ 1705.086960][T16825] random: crng reseeded on system resumption [ 1705.305262][T16829] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1705.312208][T16829] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.925024][T16829] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1706.276780][T16831] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1706.567582][T16825] xt_CT: No such helper "snmp" [ 1706.877804][T16841] hub 8-0:1.0: USB hub found [ 1706.894514][T16841] hub 8-0:1.0: 1 port detected [ 1708.650114][ T27] audit: type=1400 audit(1753840590.028:1314): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16852 comm="syz.3.2228" [ 1708.696121][T16857] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2228'. [ 1712.719608][T16883] mkiss: ax0: crc mode is auto. [ 1714.233835][ T27] audit: type=1400 audit(1753840595.618:1315): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16899 comm="syz.1.2239" [ 1714.265478][T16905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2239'. [ 1717.568049][T16924] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1719.736399][ T9141] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1720.707322][ T9141] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1720.783691][ T9141] usb 2-1: not running at top speed; connect to a high speed hub [ 1720.813526][ T9141] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.881057][ T9141] usb 2-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 1720.966425][ T9141] usb 2-1: config 12 interface 0 altsetting 7 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1721.116887][ T9141] usb 2-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1721.402959][ T9141] usb 2-1: config 12 interface 0 has no altsetting 0 [ 1721.634917][ T9141] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1721.759289][ T9141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.845851][ T9141] usb 2-1: Product: syz [ 1721.893943][ T9141] usb 2-1: Manufacturer: syz [ 1721.962636][ T9141] usb 2-1: SerialNumber: syz [ 1722.077917][ T9141] usb 2-1: can't set config #12, error -71 [ 1722.139310][ T9141] usb 2-1: USB disconnect, device number 14 [ 1722.292491][T16958] hub 8-0:1.0: USB hub found [ 1722.299038][T16958] hub 8-0:1.0: 1 port detected [ 1724.669808][T16977] Invalid ELF header magic: != ELF [ 1724.677508][T16977] netlink: 'syz.6.2260': attribute type 1 has an invalid length. [ 1724.685436][T16977] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2260'. [ 1726.963265][T16993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2264'. [ 1728.343268][ T27] audit: type=1400 audit(1753840608.338:1316): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16987 comm="syz.3.2264" [ 1729.577764][T17003] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2270'. [ 1729.609464][ T27] audit: type=1400 audit(1753840610.948:1317): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17001 comm="syz.7.2270" [ 1730.460897][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.467827][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.960284][T17018] Invalid ELF header magic: != ELF [ 1730.969582][T17018] netlink: 'syz.3.2271': attribute type 1 has an invalid length. [ 1730.977921][T17018] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2271'. [ 1731.481968][ T9138] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1732.096773][ T9138] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1732.116883][ T9138] usb 8-1: config 1 has an invalid interface number: 83 but max is 0 [ 1732.138979][ T9138] usb 8-1: config 1 has no interface number 0 [ 1732.159326][ T9138] usb 8-1: config 1 interface 83 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1732.199938][ T9138] usb 8-1: config 1 interface 83 has no altsetting 0 [ 1732.219658][ T27] audit: type=1400 audit(1753840613.608:1318): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17030 comm="syz.6.2279" [ 1732.264156][T17033] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2279'. [ 1732.313368][ T9138] usb 8-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=a2.c5 [ 1732.374707][ T9138] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.430913][ T9138] usb 8-1: Product: syz [ 1732.458984][ T9138] usb 8-1: Manufacturer: syz [ 1732.492004][ T9138] usb 8-1: SerialNumber: syz [ 1733.068348][ T9138] usb 8-1: probing VID:PID(2201:012C) [ 1733.120689][ T9138] usb 8-1: vub300 testing UNKNOWN EndPoint(0) 08 [ 1733.144847][ T9138] usb 8-1: vub300 ignoring EndPoint(0) 08 [ 1733.159060][ T9138] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 1733.216205][ T9138] vub300: probe of 8-1:1.83 failed with error -22 [ 1733.288754][ T27] audit: type=1400 audit(1753840614.678:1319): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17039 comm="syz.6.2281" [ 1733.316589][T17042] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2281'. [ 1735.629043][ T9138] usb 8-1: USB disconnect, device number 3 [ 1736.272014][T17055] Invalid ELF header magic: != ELF [ 1736.281752][T17055] netlink: 'syz.7.2283': attribute type 1 has an invalid length. [ 1736.289819][T17055] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2283'. [ 1738.526300][T17072] netlink: 'syz.6.2288': attribute type 20 has an invalid length. [ 1738.674872][ T5900] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1738.944907][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 1738.964335][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.111911][ T27] audit: type=1400 audit(1753840620.488:1320): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17070 comm="syz.7.2290" [ 1739.143813][T17073] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2290'. [ 1740.969137][ T5900] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1742.518116][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.545612][ T5900] usb 4-1: Product: syz [ 1742.554500][ T5900] usb 4-1: Manufacturer: syz [ 1742.559235][ T5900] usb 4-1: SerialNumber: syz [ 1742.576915][ T5900] usb 4-1: config 0 descriptor?? [ 1742.635120][ T5900] usb 4-1: can't set config #0, error -71 [ 1742.652798][ T5900] usb 4-1: USB disconnect, device number 7 [ 1743.083235][T17092] hub 8-0:1.0: USB hub found [ 1743.094438][T17092] hub 8-0:1.0: 1 port detected [ 1743.835542][T17097] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2304'. [ 1744.969465][T17099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2294'. [ 1745.055994][ T27] audit: type=1400 audit(1753840625.218:1321): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17094 comm="syz.7.2304" [ 1745.758194][ T27] audit: type=1400 audit(1753840626.358:1322): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17089 comm="syz.1.2294" [ 1746.402069][ T27] audit: type=1400 audit(1753840627.788:1323): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17106 comm="syz.7.2299" [ 1746.433021][T17108] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2299'. [ 1746.484702][ T2174] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1746.604853][ T9138] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1747.104503][ T2174] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1747.405522][ T9138] usb 2-1: Using ep0 maxpacket: 16 [ 1748.717912][ T2174] usb 4-1: not running at top speed; connect to a high speed hub [ 1748.863202][T17112] hub 8-0:1.0: USB hub found [ 1748.869381][T17112] hub 8-0:1.0: 1 port detected [ 1749.028417][ T9138] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.041148][ T2174] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.051532][ T9138] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1749.062579][ T2174] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1749.071737][ T9138] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 1749.085342][ T2174] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 47, using maximum allowed: 30 [ 1749.096227][ T2174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1749.106158][ T2174] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 47 [ 1749.121294][ T9138] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1749.130590][ T9138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.138748][ T9138] usb 2-1: Product: syz [ 1749.143837][ T9138] usb 2-1: Manufacturer: syz [ 1749.149244][ T9138] usb 2-1: SerialNumber: syz [ 1749.154619][ T2174] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1749.163700][ T2174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.175515][ T2174] usb 4-1: Product: syz [ 1749.179744][ T2174] usb 4-1: Manufacturer: syz [ 1749.185214][ T2174] usb 4-1: SerialNumber: syz [ 1749.194701][ T9138] usb 2-1: bad CDC descriptors [ 1749.267683][ T2174] usb 4-1: can't set config #1, error -71 [ 1749.314121][ T5900] usb 2-1: USB disconnect, device number 15 [ 1750.481729][ T2174] usb 4-1: USB disconnect, device number 8 [ 1750.833579][ T787] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1750.980089][ T27] audit: type=1400 audit(1753840632.358:1324): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17125 comm="syz.1.2307" [ 1751.004702][T17129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2307'. [ 1751.056014][ T787] usb 8-1: config 54 has an invalid interface number: 154 but max is 0 [ 1752.972218][ T787] usb 8-1: config 54 has no interface number 0 [ 1753.005502][ T787] usb 8-1: string descriptor 0 read error: -71 [ 1753.011980][ T787] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1753.034754][ T787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.056621][ T787] usb 8-1: can't set config #54, error -71 [ 1753.075975][ T787] usb 8-1: USB disconnect, device number 4 [ 1753.116296][ T27] audit: type=1400 audit(1753840634.508:1325): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17138 comm="syz.6.2310" [ 1753.142539][T17140] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2310'. [ 1754.169280][T17148] hub 8-0:1.0: USB hub found [ 1754.175966][T17148] hub 8-0:1.0: 1 port detected [ 1754.811381][T17146] random: crng reseeded on system resumption [ 1755.141587][T10906] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 1755.506601][T17161] hub 8-0:1.0: USB hub found [ 1755.512368][T17161] hub 8-0:1.0: 1 port detected [ 1756.361524][T17164] netlink: 'syz.1.2319': attribute type 20 has an invalid length. [ 1757.169792][T17174] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2322'. [ 1757.334420][T17062] Bluetooth: hci2: command 0x0406 tx timeout [ 1757.684596][ T27] audit: type=1400 audit(1753840638.548:1326): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17168 comm="syz.6.2322" [ 1760.122620][ T9138] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1760.374509][ T9138] usb 7-1: Using ep0 maxpacket: 32 [ 1760.531561][ T9138] usb 7-1: config 8 has an invalid interface number: 203 but max is 0 [ 1760.714181][T17196] hub 8-0:1.0: USB hub found [ 1760.720427][T17196] hub 8-0:1.0: 1 port detected [ 1760.885515][ T9138] usb 7-1: config 8 has no interface number 0 [ 1760.891707][ T9138] usb 7-1: config 8 interface 203 has no altsetting 0 [ 1760.903499][ T9138] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 1760.922830][ T9138] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.931316][ T9138] usb 7-1: Product: syz [ 1760.936815][ T9138] usb 7-1: Manufacturer: syz [ 1760.941481][ T9138] usb 7-1: SerialNumber: syz [ 1761.165720][ T9138] port100 7-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 1761.183747][ T9138] usb 7-1: USB disconnect, device number 7 [ 1761.225282][ T9141] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1761.284678][ T27] audit: type=1400 audit(1753840642.678:1327): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17206 comm="syz.3.2335" [ 1761.317026][T17208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2335'. [ 1762.052735][ T9141] usb 8-1: config 160 has an invalid interface number: 200 but max is 0 [ 1762.066183][ T9141] usb 8-1: config 160 has no interface number 0 [ 1762.084352][ T9141] usb 8-1: config 160 interface 200 has no altsetting 0 [ 1762.094951][ T9141] usb 8-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1762.104745][ T9141] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.117465][ T9141] usb 8-1: Product: syz [ 1762.121815][ T9141] usb 8-1: Manufacturer: syz [ 1762.127067][ T9141] usb 8-1: SerialNumber: syz [ 1762.659205][ T9141] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 1762.673632][ T9141] usb 8-1: MIDIStreaming interface descriptor not found [ 1763.364876][ T9141] usb 8-1: USB disconnect, device number 5 [ 1763.867144][T17228] udevd[17228]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1764.115467][T17232] hub 8-0:1.0: USB hub found [ 1764.152094][T17232] hub 8-0:1.0: 1 port detected [ 1764.630899][T17237] random: crng reseeded on system resumption [ 1765.653785][T17241] batman_adv: batadv0: Adding interface: ip6gretap2 [ 1765.660661][T17241] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1765.686592][T17241] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 1766.006781][T17244] batman_adv: batadv0: Interface deactivated: dummy0 [ 1766.013854][T17244] batman_adv: batadv0: Removing interface: dummy0 [ 1766.319318][T17241] xt_CT: No such helper "snmp" [ 1766.601721][T17244] batman_adv: batadv0: Removing interface: ip6gretap2 [ 1767.121852][ T27] audit: type=1400 audit(1753840648.508:1328): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17251 comm="syz.7.2346" [ 1767.152637][T17257] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2346'. [ 1769.493684][T17262] hub 8-0:1.0: USB hub found [ 1769.499378][T17262] hub 8-0:1.0: 1 port detected [ 1771.356138][T17279] hub 8-0:1.0: USB hub found [ 1771.843332][T17279] hub 8-0:1.0: 1 port detected [ 1772.273935][T17291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2360'. [ 1774.787481][ T27] audit: type=1400 audit(1753840653.638:1329): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17289 comm="syz.1.2360" [ 1775.234594][T17301] hub 8-0:1.0: USB hub found [ 1775.244588][T17301] hub 8-0:1.0: 1 port detected [ 1776.191016][T17309] Invalid ELF header magic: != ELF [ 1776.201146][T17309] netlink: 'syz.3.2363': attribute type 1 has an invalid length. [ 1776.209206][T17309] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2363'. [ 1776.336226][ T27] audit: type=1800 audit(1753840657.728:1330): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2363" name="/newroot/596/bus" dev="tmpfs" ino=3270 res=0 errno=0 [ 1776.807603][T17315] hub 8-0:1.0: USB hub found [ 1776.813290][T17315] hub 8-0:1.0: 1 port detected [ 1779.225148][ T9138] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1779.533397][ T9138] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 1779.590703][ T9138] usb 7-1: config 0 has no interface number 0 [ 1779.606591][ T9138] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1779.666853][ T9138] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1779.688690][T17335] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2372'. [ 1779.700170][ T27] audit: type=1400 audit(1753840661.068:1331): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17333 comm="syz.3.2372" [ 1779.770523][ T9138] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1779.927651][ T9138] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.195318][ T9138] usb 7-1: config 0 descriptor?? [ 1780.459162][ T9138] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input26 [ 1780.775707][ T9138] usb 7-1: USB disconnect, device number 8 [ 1781.328752][T17351] Invalid ELF header magic: != ELF [ 1781.338592][T17351] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 1781.346624][T17351] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2375'. [ 1781.772653][ T27] audit: type=1800 audit(1753840663.158:1332): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2375" name="/newroot/600/bus" dev="tmpfs" ino=3292 res=0 errno=0 [ 1782.215791][T17353] hub 8-0:1.0: USB hub found [ 1782.232475][T17353] hub 8-0:1.0: 1 port detected [ 1782.552119][T17362] hub 8-0:1.0: USB hub found [ 1782.558938][T17362] hub 8-0:1.0: 1 port detected [ 1783.610053][ T27] audit: type=1400 audit(1753840664.998:1333): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17369 comm="syz.6.2383" [ 1783.641379][T17373] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2383'. [ 1786.439358][T17383] Invalid ELF header magic: != ELF [ 1786.448450][T17383] netlink: 'syz.3.2386': attribute type 1 has an invalid length. [ 1786.456367][T17383] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2386'. [ 1787.084100][ T27] audit: type=1800 audit(1753840668.338:1334): pid=17382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2386" name="/newroot/605/bus" dev="tmpfs" ino=3320 res=0 errno=0 [ 1787.250005][T17388] hub 8-0:1.0: USB hub found [ 1787.264531][T17388] hub 8-0:1.0: 1 port detected [ 1788.032901][ T27] audit: type=1400 audit(1753840669.418:1335): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17403 comm="syz.7.2393" [ 1788.065102][T17405] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2393'. [ 1789.156176][T17414] netlink: 'syz.1.2396': attribute type 1 has an invalid length. [ 1789.164197][T17414] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2396'. [ 1790.052573][T17422] hub 8-0:1.0: USB hub found [ 1790.064402][T17422] hub 8-0:1.0: 1 port detected [ 1790.579222][T17427] netlink: 'syz.3.2401': attribute type 20 has an invalid length. [ 1791.442410][T17437] netlink: 'syz.3.2405': attribute type 21 has an invalid length. [ 1791.454745][T17437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2405'. [ 1791.548124][ T27] audit: type=1400 audit(1753840672.938:1336): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17438 comm="syz.7.2407" [ 1791.585242][T17442] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2407'. [ 1791.930541][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.344889][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.780807][T17445] netlink: 'syz.1.2408': attribute type 1 has an invalid length. [ 1792.788918][T17445] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2408'. [ 1793.672144][T17455] netlink: 'syz.3.2414': attribute type 20 has an invalid length. [ 1794.535338][ T5900] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1794.729171][T17465] hub 8-0:1.0: USB hub found [ 1794.735343][T17465] hub 8-0:1.0: 1 port detected [ 1794.844981][ T5900] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.918487][ T5900] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1794.961636][ T5900] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1795.001875][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1795.041639][ T5900] usb 7-1: SerialNumber: syz [ 1795.250340][ T5900] usb 7-1: 0:2 : does not exist [ 1795.969179][T17484] netlink: 'syz.1.2420': attribute type 1 has an invalid length. [ 1795.977792][T17484] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2420'. [ 1798.099259][ T5900] usb 7-1: USB disconnect, device number 9 [ 1799.369613][T17511] hub 8-0:1.0: USB hub found [ 1799.394351][T17511] hub 8-0:1.0: 1 port detected [ 1799.579692][T17062] Bluetooth: hci2: command 0x0406 tx timeout [ 1800.312565][T17520] netlink: 'syz.7.2431': attribute type 1 has an invalid length. [ 1800.320873][T17520] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2431'. [ 1800.952886][T17519] hub 8-0:1.0: USB hub found [ 1800.986031][T17519] hub 8-0:1.0: 1 port detected [ 1801.054562][ T27] audit: type=1400 audit(1753840682.448:1337): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17521 comm="syz.6.2433" [ 1801.093948][T17523] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2433'. [ 1803.487719][T17531] netlink: 'syz.1.2436': attribute type 20 has an invalid length. [ 1804.534748][T17546] hub 8-0:1.0: USB hub found [ 1804.541277][T17546] hub 8-0:1.0: 1 port detected [ 1804.970974][T17552] netlink: 'syz.6.2442': attribute type 1 has an invalid length. [ 1804.979453][T17552] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2442'. [ 1806.119791][T17561] netlink: 'syz.6.2446': attribute type 20 has an invalid length. [ 1807.110580][T17576] netlink: 'syz.6.2451': attribute type 1 has an invalid length. [ 1807.118747][T17576] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2451'. [ 1807.943467][T17578] hub 8-0:1.0: USB hub found [ 1807.950934][T17578] hub 8-0:1.0: 1 port detected [ 1808.153088][T17579] hub 8-0:1.0: USB hub found [ 1808.177889][T17579] hub 8-0:1.0: 1 port detected [ 1808.318642][T17586] hub 8-0:1.0: USB hub found [ 1808.332318][T17586] hub 8-0:1.0: 1 port detected [ 1809.177095][T17604] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 1809.185162][T17604] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2461'. [ 1809.927065][ T27] audit: type=1400 audit(1753840691.308:1338): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17601 comm="syz.7.2462" [ 1809.951480][T17605] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2462'. [ 1811.804789][T17634] netlink: 'syz.1.2472': attribute type 1 has an invalid length. [ 1811.812698][T17634] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2472'. [ 1812.374798][ C1] ================================================================== [ 1812.382936][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x46a/0x4b0 [ 1812.390874][ C1] Read of size 2 at addr ffff88802e0d7c2a by task swapper/1/0 [ 1812.398361][ C1] [ 1812.400711][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.100-syzkaller #0 [ 1812.408462][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1812.418556][ C1] Call Trace: [ 1812.421881][ C1] [ 1812.424748][ C1] dump_stack_lvl+0x16c/0x230 [ 1812.429471][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1812.434534][ C1] ? show_regs_print_info+0x20/0x20 [ 1812.439782][ C1] ? load_image+0x3b0/0x3b0 [ 1812.444329][ C1] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1812.449748][ C1] ? __virt_addr_valid+0x18c/0x540 [ 1812.454905][ C1] ? __virt_addr_valid+0x469/0x540 [ 1812.460061][ C1] print_report+0xac/0x200 [ 1812.464508][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 1812.469653][ C1] kasan_report+0x117/0x150 [ 1812.474198][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 1812.479348][ C1] rose_timer_expiry+0x46a/0x4b0 [ 1812.484327][ C1] call_timer_fn+0x16e/0x530 [ 1812.488949][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1812.494013][ C1] ? call_timer_fn+0xbf/0x530 [ 1812.498727][ C1] ? __run_timers+0x7d0/0x7d0 [ 1812.503447][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1812.508691][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1812.513933][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1812.518995][ C1] __run_timers+0x52d/0x7d0 [ 1812.523540][ C1] ? detach_timer+0x2b0/0x2b0 [ 1812.528251][ C1] ? lock_chain_count+0x20/0x20 [ 1812.533118][ C1] run_timer_softirq+0x67/0xf0 [ 1812.537917][ C1] handle_softirqs+0x280/0x820 [ 1812.542701][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1812.547515][ C1] ? do_softirq+0x180/0x180 [ 1812.552019][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1812.557229][ C1] __irq_exit_rcu+0xc7/0x190 [ 1812.561823][ C1] ? irq_exit_rcu+0x20/0x20 [ 1812.566336][ C1] irq_exit_rcu+0x9/0x20 [ 1812.570579][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1812.576332][ C1] [ 1812.579345][ C1] [ 1812.582286][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1812.588289][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1812.594040][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 16 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1812.613675][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1812.619767][ C1] RAX: 866fc859354d7200 RBX: ffffffff81619a5b RCX: 866fc859354d7200 [ 1812.627852][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6700 [ 1812.635850][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 1812.643830][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a7da8 [ 1812.651805][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100374c780 [ 1812.659793][ C1] ? do_idle+0x1eb/0x510 [ 1812.664066][ C1] default_idle+0x13/0x20 [ 1812.668408][ C1] default_idle_call+0x6c/0xa0 [ 1812.673184][ C1] do_idle+0x1eb/0x510 [ 1812.677263][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1812.682471][ C1] ? do_idle+0xc/0x510 [ 1812.686554][ C1] cpu_startup_entry+0x43/0x60 [ 1812.691326][ C1] start_secondary+0xee/0xf0 [ 1812.695925][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1812.702009][ C1] [ 1812.705044][ C1] [ 1812.707362][ C1] Allocated by task 17304: [ 1812.711780][ C1] kasan_set_track+0x4e/0x70 [ 1812.716372][ C1] __kasan_kmalloc+0x8f/0xa0 [ 1812.720965][ C1] kernfs_fop_open+0x3f5/0xcc0 [ 1812.725740][ C1] do_dentry_open+0x8c6/0x1500 [ 1812.730507][ C1] path_openat+0x274b/0x3190 [ 1812.735141][ C1] do_filp_open+0x1c5/0x3d0 [ 1812.739651][ C1] do_sys_openat2+0x12c/0x1c0 [ 1812.744362][ C1] __x64_sys_openat+0x139/0x160 [ 1812.749240][ C1] do_syscall_64+0x55/0xb0 [ 1812.753752][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1812.759655][ C1] [ 1812.761989][ C1] Freed by task 17304: [ 1812.766063][ C1] kasan_set_track+0x4e/0x70 [ 1812.770672][ C1] kasan_save_free_info+0x2e/0x50 [ 1812.775735][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1812.780875][ C1] slab_free_freelist_hook+0x130/0x1b0 [ 1812.786474][ C1] __kmem_cache_free+0xba/0x1f0 [ 1812.791358][ C1] kernfs_fop_release+0x166/0x190 [ 1812.796393][ C1] __fput+0x234/0x970 [ 1812.800385][ C1] __se_sys_close+0x15f/0x220 [ 1812.805067][ C1] do_syscall_64+0x55/0xb0 [ 1812.809485][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1812.815417][ C1] [ 1812.817740][ C1] Last potentially related work creation: [ 1812.823447][ C1] kasan_save_stack+0x3e/0x60 [ 1812.828231][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 1812.833608][ C1] insert_work+0x3d/0x310 [ 1812.837938][ C1] __queue_work+0xd2c/0x1020 [ 1812.842531][ C1] call_timer_fn+0x16e/0x530 [ 1812.847232][ C1] __run_timers+0x558/0x7d0 [ 1812.851735][ C1] run_timer_softirq+0x67/0xf0 [ 1812.856495][ C1] handle_softirqs+0x280/0x820 [ 1812.861281][ C1] __irq_exit_rcu+0xc7/0x190 [ 1812.865867][ C1] irq_exit_rcu+0x9/0x20 [ 1812.870108][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1812.875752][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1812.881749][ C1] [ 1812.884066][ C1] Second to last potentially related work creation: [ 1812.890640][ C1] kasan_save_stack+0x3e/0x60 [ 1812.895331][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 1812.900718][ C1] insert_work+0x3d/0x310 [ 1812.905050][ C1] __queue_work+0xd2c/0x1020 [ 1812.909640][ C1] call_timer_fn+0x16e/0x530 [ 1812.914263][ C1] __run_timers+0x558/0x7d0 [ 1812.918793][ C1] run_timer_softirq+0x67/0xf0 [ 1812.923599][ C1] handle_softirqs+0x280/0x820 [ 1812.928372][ C1] __irq_exit_rcu+0xc7/0x190 [ 1812.932964][ C1] irq_exit_rcu+0x9/0x20 [ 1812.937209][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1812.942860][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1812.948853][ C1] [ 1812.951262][ C1] The buggy address belongs to the object at ffff88802e0d7c00 [ 1812.951262][ C1] which belongs to the cache kmalloc-512 of size 512 [ 1812.965321][ C1] The buggy address is located 42 bytes inside of [ 1812.965321][ C1] freed 512-byte region [ffff88802e0d7c00, ffff88802e0d7e00) [ 1812.979042][ C1] [ 1812.981379][ C1] The buggy address belongs to the physical page: [ 1812.987793][ C1] page:ffffea0000b83500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e0d4 [ 1812.997947][ C1] head:ffffea0000b83500 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1813.006878][ C1] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1813.015298][ C1] page_type: 0xffffffff() [ 1813.019639][ C1] raw: 00fff00000000840 ffff888017841c80 0000000000000000 dead000000000001 [ 1813.028228][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1813.036807][ C1] page dumped because: kasan: bad access detected [ 1813.043224][ C1] page_owner tracks the page as allocated [ 1813.048934][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5131, tgid 5131 (mount), ts 28368304319, free_ts 27340520319 [ 1813.068907][ C1] post_alloc_hook+0x1cd/0x210 [ 1813.073696][ C1] get_page_from_freelist+0x195c/0x19f0 [ 1813.079271][ C1] __alloc_pages+0x1e3/0x460 [ 1813.083875][ C1] alloc_slab_page+0x5d/0x170 [ 1813.088565][ C1] new_slab+0x87/0x2e0 [ 1813.092644][ C1] ___slab_alloc+0xc6d/0x12f0 [ 1813.097787][ C1] __kmem_cache_alloc_node+0x1a2/0x260 [ 1813.103251][ C1] __kmalloc+0xa4/0x240 [ 1813.107410][ C1] tomoyo_init_log+0x1a52/0x1f10 [ 1813.112349][ C1] tomoyo_supervisor+0x32d/0x1080 [ 1813.117387][ C1] tomoyo_path_permission+0x25a/0x380 [ 1813.122770][ C1] tomoyo_path_perm+0x390/0x4b0 [ 1813.127625][ C1] security_inode_getattr+0xd3/0x120 [ 1813.132964][ C1] vfs_statx+0x15f/0x6d0 [ 1813.137212][ C1] vfs_fstatat+0x12a/0x1b0 [ 1813.141892][ C1] __x64_sys_newfstatat+0x117/0x190 [ 1813.147095][ C1] page last free stack trace: [ 1813.151768][ C1] free_unref_page_prepare+0x7ce/0x8e0 [ 1813.157239][ C1] free_unref_page+0x32/0x2e0 [ 1813.161926][ C1] kasan_depopulate_vmalloc_pte+0x75/0x90 [ 1813.167678][ C1] __apply_to_page_range+0x84c/0xd50 [ 1813.173012][ C1] kasan_release_vmalloc+0x97/0xb0 [ 1813.178242][ C1] __purge_vmap_area_lazy+0x1640/0x1990 [ 1813.183983][ C1] _vm_unmap_aliases+0x715/0x7b0 [ 1813.188942][ C1] change_page_attr_set_clr+0x30f/0x980 [ 1813.194521][ C1] set_memory_nx+0xd7/0x110 [ 1813.199055][ C1] free_initmem+0x92/0xd0 [ 1813.203395][ C1] kernel_init+0x31/0x1c0 [ 1813.207728][ C1] ret_from_fork+0x48/0x80 [ 1813.212149][ C1] ret_from_fork_asm+0x11/0x20 [ 1813.216919][ C1] [ 1813.219239][ C1] Memory state around the buggy address: [ 1813.224868][ C1] ffff88802e0d7b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1813.232929][ C1] ffff88802e0d7b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1813.240996][ C1] >ffff88802e0d7c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1813.249142][ C1] ^ [ 1813.254529][ C1] ffff88802e0d7c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1813.262604][ C1] ffff88802e0d7d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1813.270747][ C1] ================================================================== [ 1813.278852][ C1] vkms_vblank_simulate: vblank timer overrun [ 1813.284908][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1813.292100][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.100-syzkaller #0 [ 1813.299823][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1813.309887][ C1] Call Trace: [ 1813.313168][ C1] [ 1813.316017][ C1] dump_stack_lvl+0x16c/0x230 [ 1813.320712][ C1] ? show_regs_print_info+0x20/0x20 [ 1813.325958][ C1] ? load_image+0x3b0/0x3b0 [ 1813.330474][ C1] panic+0x2c0/0x710 [ 1813.334389][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1813.338925][ C1] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 1813.344830][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1813.350739][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1813.355601][ C1] ? print_memory_metadata+0x314/0x400 [ 1813.361064][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 1813.366178][ C1] check_panic_on_warn+0x84/0xa0 [ 1813.371124][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 1813.376244][ C1] end_report+0x6f/0x140 [ 1813.380500][ C1] kasan_report+0x128/0x150 [ 1813.385008][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 1813.390130][ C1] rose_timer_expiry+0x46a/0x4b0 [ 1813.395080][ C1] call_timer_fn+0x16e/0x530 [ 1813.399678][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1813.404734][ C1] ? call_timer_fn+0xbf/0x530 [ 1813.409414][ C1] ? __run_timers+0x7d0/0x7d0 [ 1813.414094][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1813.419302][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1813.424511][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1813.429544][ C1] __run_timers+0x52d/0x7d0 [ 1813.434055][ C1] ? detach_timer+0x2b0/0x2b0 [ 1813.438740][ C1] ? lock_chain_count+0x20/0x20 [ 1813.443596][ C1] run_timer_softirq+0x67/0xf0 [ 1813.448361][ C1] handle_softirqs+0x280/0x820 [ 1813.453133][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1813.457901][ C1] ? do_softirq+0x180/0x180 [ 1813.462407][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1813.467688][ C1] __irq_exit_rcu+0xc7/0x190 [ 1813.472295][ C1] ? irq_exit_rcu+0x20/0x20 [ 1813.476803][ C1] irq_exit_rcu+0x9/0x20 [ 1813.481047][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1813.486699][ C1] [ 1813.489640][ C1] [ 1813.492582][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1813.498578][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1813.504315][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 16 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1813.523926][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1813.529999][ C1] RAX: 866fc859354d7200 RBX: ffffffff81619a5b RCX: 866fc859354d7200 [ 1813.537974][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6700 [ 1813.545948][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 1813.553922][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a7da8 [ 1813.561900][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100374c780 [ 1813.569927][ C1] ? do_idle+0x1eb/0x510 [ 1813.574184][ C1] default_idle+0x13/0x20 [ 1813.578544][ C1] default_idle_call+0x6c/0xa0 [ 1813.583315][ C1] do_idle+0x1eb/0x510 [ 1813.587419][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1813.592644][ C1] ? do_idle+0xc/0x510 [ 1813.596739][ C1] cpu_startup_entry+0x43/0x60 [ 1813.601513][ C1] start_secondary+0xee/0xf0 [ 1813.606105][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1813.612185][ C1] [ 1813.615686][ C1] Kernel Offset: disabled [ 1813.620018][ C1] Rebooting in 86400 seconds..