last executing test programs: 22m41.744187865s ago: executing program 0 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c66696c655f756d61736b3d30303030303030303030303030303030303030303030312c696f636861727365743d6d6163726f6d616e2c706172743d3078303030303030303030303030613565662c63726561746f723da0a54db32c706172743d3078303030303030303030303030306666662c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=macinuit,dir_umask=0000000000000codepage=cp737,func=POLICY_CHECK,\x00'/87], 0x1, 0x2f2, &(0x7f00000006c0)="$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") syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22m37.111994303s ago: executing program 0 (id=37): openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x40002, 0x1, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 22m32.97796706s ago: executing program 0 (id=44): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x3c}, 0x0, @in6=@private1}]}]}, 0xfc}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 22m32.732052331s ago: executing program 0 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000000000000010000400100000000000000c700000005000000e0000000030000000000000000000000000000000100000000000000c1"]) 22m26.622009247s ago: executing program 0 (id=50): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) r1 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000600)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x0, 0x37, 0x2d, 0x32, 0x36, 0x32, 0x36, 0x2d, 0x37]}}, {@nodatacow}]}, 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000580)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f00000005c0), 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) write$P9_RLERRORu(r2, &(0x7f0000000200)=ANY=[], 0xd) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x0, {0x2b, 0x0, 0x56, 0x1, 0x40}}) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000380)='\\', 0x1, 0x3000}]) 22m22.307981027s ago: executing program 0 (id=60): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB], 0x10) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) 22m4.857016284s ago: executing program 32 (id=60): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB], 0x10) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) 18m45.762721797s ago: executing program 3 (id=337): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) 18m43.656748543s ago: executing program 3 (id=341): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") 18m37.850790841s ago: executing program 3 (id=345): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54c, &(0x7f0000000fc0)="$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") lseek(0xffffffffffffffff, 0x7fff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x100000008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 18m34.457673117s ago: executing program 3 (id=349): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r5, 0x0, 0x2a) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="08000000010000", 0x7) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 18m29.71008446s ago: executing program 3 (id=352): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x6ddc, &(0x7f0000000380)={0x0, 0x9b93, 0x400, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) io_uring_enter(r1, 0xd0, 0x3ffc, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5", 0x4d, 0xfffffffffffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200"], 0x5c}}, 0x0) 18m28.679333714s ago: executing program 3 (id=356): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 18m12.804967969s ago: executing program 33 (id=356): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 16m46.835919032s ago: executing program 4 (id=476): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 16m46.441721069s ago: executing program 4 (id=478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000780)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x4c015) 16m45.251011832s ago: executing program 4 (id=480): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00', @remote, @remote, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) write(r0, &(0x7f0000000000)="240000001a005f1114f9f407000901000000000000000001000000000800040001000000", 0x24) 16m43.395536078s ago: executing program 4 (id=481): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) 16m40.628269741s ago: executing program 4 (id=488): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 16m31.471103566s ago: executing program 4 (id=494): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always,size=0']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8979) writev(r0, &(0x7f0000002940)=[{0x0}], 0x1) 16m25.746684246s ago: executing program 34 (id=494): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always,size=0']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8979) writev(r0, &(0x7f0000002940)=[{0x0}], 0x1) 9m35.816217886s ago: executing program 5 (id=1146): socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 9m34.497089881s ago: executing program 5 (id=1151): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x8000000, 0x200, 0x4}) 9m33.200140902s ago: executing program 5 (id=1154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m31.97946071s ago: executing program 5 (id=1159): io_uring_setup(0x2a3d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x8900, 0x0) io_setup(0x1e91, &(0x7f0000000200)) eventfd(0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = memfd_create(&(0x7f00000002c0)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86%0\x05\x9d4\xfa\x92H\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY', 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r4, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0xfffffffe}) ioctl(0xffffffffffffffff, 0x8b25, &(0x7f0000000040)) 9m30.253082229s ago: executing program 5 (id=1163): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 9m30.060403194s ago: executing program 5 (id=1165): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_create(&(0x7f0000000dc0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe5\xb9\xaf\xe21\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xb1\x9e\xc9P\xd5\xda\xf4r\xd5\x95\x13\x1c\xe4\x90\x9a\xc4\a\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x11\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaaj\xb7\xe7u\a\x802\xd7\x1f$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\v\x00\x00\x00#t>r\xae\xe8\xc9):K\x9c\x81Xb&dd\xa2f$s\"\xa7\x1f\xc9\x03\x86\xa9\x95\xf4\x92?A\x80\xe5\x8a\x1e\x8b\x97\x04y\xd7\x15\x97\x83Z\xa5\x1d\xafF\xc9\x94S\xf7\xad\xa9\x91\xa7\xe0\xe7 \xd2\x99\x19\xb0\x8fg\xf5\xec{1\xf0i\xac\x9a{\x12\x88A\xc1\xe9~\\\xad\xbcI\xb3?\x7f&u\xfc\xad\x96\xf7\x99\x8f\xcb\x95\xa8\x13\xe9?d\x18e/\x17\xde\x131(\xfe@\xbcu\xa9\xd4^)e[\xce\xb3r\a\xc7%Ai+a\xb4\x98\x03\xf0\x85\xd1\xa6\x19)\xe1L.\x97\x92i\xacTS\xc22\x8da\xd1\f\xdfY\x85Q\xda\xb6`\xcfz\xea \xaf\xdb\xa7\xe2|\f\xca\vY\x9cr\xdc\x9b\x84\xfb\xcc\v\x0f\xa7\x0et;\xbaq\x85\a5\x84\x12\xce,\x88|\xee8\xcdmn\xd7K\x0f\xc2-r\xf8HM8X\xdd\xc4\xb6\xb6\xcb\x8d\xd3D\x11#\x8f5\xf6\xf8\x05r82', 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) 9m14.499135835s ago: executing program 35 (id=1165): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_create(&(0x7f0000000dc0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe5\xb9\xaf\xe21\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xb1\x9e\xc9P\xd5\xda\xf4r\xd5\x95\x13\x1c\xe4\x90\x9a\xc4\a\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x11\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaaj\xb7\xe7u\a\x802\xd7\x1f$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\v\x00\x00\x00#t>r\xae\xe8\xc9):K\x9c\x81Xb&dd\xa2f$s\"\xa7\x1f\xc9\x03\x86\xa9\x95\xf4\x92?A\x80\xe5\x8a\x1e\x8b\x97\x04y\xd7\x15\x97\x83Z\xa5\x1d\xafF\xc9\x94S\xf7\xad\xa9\x91\xa7\xe0\xe7 \xd2\x99\x19\xb0\x8fg\xf5\xec{1\xf0i\xac\x9a{\x12\x88A\xc1\xe9~\\\xad\xbcI\xb3?\x7f&u\xfc\xad\x96\xf7\x99\x8f\xcb\x95\xa8\x13\xe9?d\x18e/\x17\xde\x131(\xfe@\xbcu\xa9\xd4^)e[\xce\xb3r\a\xc7%Ai+a\xb4\x98\x03\xf0\x85\xd1\xa6\x19)\xe1L.\x97\x92i\xacTS\xc22\x8da\xd1\f\xdfY\x85Q\xda\xb6`\xcfz\xea \xaf\xdb\xa7\xe2|\f\xca\vY\x9cr\xdc\x9b\x84\xfb\xcc\v\x0f\xa7\x0et;\xbaq\x85\a5\x84\x12\xce,\x88|\xee8\xcdmn\xd7K\x0f\xc2-r\xf8HM8X\xdd\xc4\xb6\xb6\xcb\x8d\xd3D\x11#\x8f5\xf6\xf8\x05r82', 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) 6m40.249380815s ago: executing program 6 (id=1602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc000) 6m39.639591765s ago: executing program 6 (id=1606): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f00000002c0), 0x4, 0x76b, &(0x7f0000001400)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 6m38.202030274s ago: executing program 6 (id=1613): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 6m33.128329164s ago: executing program 6 (id=1639): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) finit_module(0xffffffffffffffff, 0x0, 0x0) 6m32.949793765s ago: executing program 6 (id=1641): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) 6m32.199240077s ago: executing program 6 (id=1644): socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 6m16.937650269s ago: executing program 36 (id=1644): socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 13.150423446s ago: executing program 1 (id=2798): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 12.314834102s ago: executing program 1 (id=2801): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 11.648117795s ago: executing program 1 (id=2802): r0 = syz_open_procfs(0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000800)={'\x00', 0x211, 0x8, 0x0, 0x2000003, 0x43a11306}) fchdir(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="0000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.014478583s ago: executing program 8 (id=2809): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x1, {}, [{0x48}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x20004054) 8.476011084s ago: executing program 9 (id=2811): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 8.179987594s ago: executing program 1 (id=2812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x26, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x8000000]}, 0x8) 7.531813613s ago: executing program 8 (id=2815): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$key(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020202be73697c694a5756ef6c888ee0b91e67025000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) listen(0xffffffffffffffff, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x9, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2000, 0xe1cf}}}, 0x78) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="11460e502ced3507", 0x8}, {&(0x7f0000000500)="44db2eac0b39bddb5124886dce5bef350a3c9554d0390899fc63285355ff7504b7df8f6c740523bfcb85e5b35d31adbf9877d7a373ecbb2c77fff2caec83355317fff5df95598cc07c6851ed369ad5fbf5b2ce2a69405e501f012cd6539e64a438e4f6409cd6d59eec", 0x69}], 0x2) socket$inet(0x2, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.020380356s ago: executing program 9 (id=2816): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.887892675s ago: executing program 1 (id=2817): syz_io_uring_setup(0x10c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x2}]}]}, 0x3c}}, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) fchdir(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc0800054700000800"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.07850893s ago: executing program 7 (id=2819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r0, &(0x7f0000000440)="264f7e9708dc53a46de6ff26cef5f7c3513271c78056e3a1ce3f3bc10c11b16f7297745e430514c803c049f55c1a1c240831c6935d644e9f8dd749bac387a959257958eb1f8cd0b2e92dce05d508c5851fcdd2a8ed9e2da074e9fb24fb229234c13efbd14d4aee6977171f21e2583726", 0x70, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000180)=""/4, 0x4}], 0x2}, 0x20) 4.934413303s ago: executing program 8 (id=2820): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000018000904000000000000008b7d002000000000005812943ba19e6f31ed19a0bfcecf4bfbe767a55fa33af48b91338d5f98e4013bdf8f010700d9edbeeb2bbd5dfe2985a5e2050c11d5d4f920153b6785e5d2b7b120d82bb8b4e6cb5778af7ae018a306b06f4ac0bd6b598f1794573ade3900000000"], 0x24}}, 0x28000) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0xc, 0x40, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x7, 0x2738}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) 4.604069304s ago: executing program 1 (id=2821): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002205000000a3"], 0x0}, 0x0) 4.531939186s ago: executing program 2 (id=2822): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000040c0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfffffff8, @local, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000f80)=[@tclass={{0x30, 0x29, 0x43, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x30}}], 0x1, 0xc8800) 4.510981095s ago: executing program 7 (id=2823): io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) 4.239133731s ago: executing program 8 (id=2824): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffe, 0x1033c2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) socket$netlink(0x10, 0x3, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0xf0) acct(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x50, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) acct(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.945840534s ago: executing program 2 (id=2825): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x4000010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) inotify_init1(0x0) 3.823704777s ago: executing program 7 (id=2826): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x36, &(0x7f0000000fc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2e2caa", 0x0, 0x0, 0x0, @remote, @mcast2}}}}, 0x0) 3.218502775s ago: executing program 8 (id=2827): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x2, 0xa, 0x5) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.201080488s ago: executing program 2 (id=2828): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a0002", @ANYRES32=r3, @ANYBLOB="00000000000000000800cfffecc507006c"], 0x94}}, 0x8850) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8f8, 0x0) 2.600544539s ago: executing program 9 (id=2829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "d858e6172c856d49"}, 0x3}}]}, 0x2c}}, 0x0) 2.470544156s ago: executing program 7 (id=2830): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) unshare(0x40600) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffffffffffffffff}, 0x14}}, 0x0) 2.036975199s ago: executing program 9 (id=2831): syz_io_uring_setup(0x10c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x2}]}]}, 0x3c}}, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) fchdir(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc0800054700000800"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.988340672s ago: executing program 7 (id=2832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1b100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) 1.677816776s ago: executing program 9 (id=2833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r0, &(0x7f0000000440)="264f7e9708dc53a46de6ff26cef5f7c3513271c78056e3a1ce3f3bc10c11b16f7297745e430514c803c049f55c1a1c240831c6935d644e9f8dd749bac387a959257958eb1f8cd0b2e92dce05d508c5851fcdd2a8ed9e2da074e9fb24fb229234c13efbd14d4aee6977171f21e25837263b20", 0x72, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000180)=""/4, 0x4}], 0x2}, 0x20) 1.603461619s ago: executing program 2 (id=2834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2c, r1, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x40) 1.520176555s ago: executing program 8 (id=2835): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x6c00, 0x0, 0x3) 981.270633ms ago: executing program 7 (id=2836): io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) 853.501656ms ago: executing program 9 (id=2837): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffe, 0x1033c2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) socket$netlink(0x10, 0x3, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0xf0) acct(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x50, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) acct(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 833.575777ms ago: executing program 2 (id=2838): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16], 0x86, 0x2a9, &(0x7f0000000c00)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fallocate(r0, 0x0, 0x0, 0x3) 0s ago: executing program 2 (id=2839): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c", 0x52}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805e", 0x94}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6b", 0x2a}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34", 0x71}, {&(0x7f0000000a40)="57f43d3d654f1df092b799441d169633d1d1894111b5a3c8478fae6b707eae36cb8b36766a8655eea82f", 0x2a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f44b", 0xac}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004adc6b16981ea546c", 0x64}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c3", 0x63}], 0x3}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1255.689552][ T5810] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1255.698973][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1256.668153][T12616] lo speed is unknown, defaulting to 1000 [ 1257.047714][T12616] lo speed is unknown, defaulting to 1000 [ 1257.133127][T12612] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1257.146237][T12612] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.382025][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1715'. [ 1257.744158][T12628] usb usb9: usbfs: process 12628 (syz.2.1714) did not claim interface 0 before use [ 1257.755019][T12628] usb usb9: selecting invalid altsetting 21783 [ 1257.927542][T12632] syzkaller0: entered promiscuous mode [ 1257.933282][T12632] syzkaller0: entered allmulticast mode [ 1258.009388][T11182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.056389][ T5810] Bluetooth: hci5: command tx timeout [ 1258.160462][ T9649] IPVS: starting estimator thread 0... [ 1258.306880][T12638] IPVS: using max 240 ests per chain, 12000 per kthread [ 1258.585549][T12616] chnl_net:caif_netlink_parms(): no params data found [ 1258.629291][T12645] loop8: detected capacity change from 0 to 1024 [ 1258.928578][T12645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1259.459921][T11182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.934368][T12616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.942353][T12616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.950502][T12616] bridge_slave_0: entered allmulticast mode [ 1259.959726][T12616] bridge_slave_0: entered promiscuous mode [ 1260.051582][ T5810] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 1260.055220][T12616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.067408][T12616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.075330][T12616] bridge_slave_1: entered allmulticast mode [ 1260.084767][T12616] bridge_slave_1: entered promiscuous mode [ 1260.139710][ T5810] Bluetooth: hci5: command tx timeout [ 1260.320148][T12616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.371457][T12616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.730007][T12616] team0: Port device team_slave_0 added [ 1260.785040][T12616] team0: Port device team_slave_1 added [ 1261.096876][ T5854] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1261.109728][T12668] loop8: detected capacity change from 0 to 2048 [ 1261.247844][T12668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1261.260693][T12668] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1261.297396][T12616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.304579][T12616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.339238][T12616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.395440][T12616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.402815][T12616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.438082][T12616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.537746][ T5854] usb 2-1: Using ep0 maxpacket: 16 [ 1261.989465][ T5854] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.000783][ T5854] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1262.023560][ T5854] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1262.028955][T11182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.039841][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.055083][ T5854] usb 2-1: Product: syz [ 1262.059742][ T5854] usb 2-1: Manufacturer: syz [ 1262.064580][ T5854] usb 2-1: SerialNumber: syz [ 1262.174094][T12616] hsr_slave_0: entered promiscuous mode [ 1262.189474][T12616] hsr_slave_1: entered promiscuous mode [ 1262.205387][T12616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1262.213366][T12616] Cannot create hsr debugfs directory [ 1262.242657][ T5810] Bluetooth: hci5: command tx timeout [ 1262.536253][T12681] loop8: detected capacity change from 0 to 512 [ 1262.664455][T12681] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1262.678138][T12681] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1262.794096][ T5854] usb 2-1: 0:2 : does not exist [ 1262.982978][T11182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1263.173201][ T5810] Bluetooth: hci3: unexpected subevent 0x05 length: 244 > 12 [ 1263.554113][ T5854] usb 2-1: USB disconnect, device number 13 [ 1263.612100][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1263.619685][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1263.993837][T12616] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1264.003213][ T5810] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 1264.047613][T12616] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1264.056856][ T5810] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1264.065423][ T5810] Bluetooth: hci3: Injecting HCI hardware error event [ 1264.073109][ T5810] Bluetooth: hci3: hardware error 0x00 [ 1264.105006][T12616] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1264.176568][T12616] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1264.216959][T10247] udevd[10247]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1264.387062][ T51] Bluetooth: hci5: command tx timeout [ 1264.941077][T12616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.983669][T12616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.085430][ T1874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.093457][ T1874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.123129][ T1874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.131131][ T1874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.353317][T12703] hub 1-0:1.0: USB hub found [ 1265.371557][T12703] hub 1-0:1.0: 1 port detected [ 1265.918262][ T9986] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1266.158842][ T9986] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.159567][ T5810] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1266.169461][ T9986] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1266.169650][ T9986] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1266.197564][ T9986] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1266.211524][ T9986] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1266.224207][ T9986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.589608][ T9986] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1266.600409][ T9986] usb 3-1: invalid MIDI out EP 0 [ 1267.197778][ T9986] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1267.233332][ T9986] usb 3-1: USB disconnect, device number 8 [ 1267.400366][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1267.410261][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1267.418108][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1267.476578][T10112] udevd[10112]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1267.678623][T12616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.021918][T12730] infiniband syz1: set active [ 1268.027452][T12730] infiniband syz1: added vcan0 [ 1268.034046][ T9986] vcan0 speed is unknown, defaulting to 1000 [ 1268.084767][ T5810] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1268.093636][ T5810] Bluetooth: hci4: Injecting HCI hardware error event [ 1268.101764][ T5810] Bluetooth: hci4: hardware error 0x00 [ 1268.413815][T12739] loop7: detected capacity change from 0 to 47 [ 1268.472814][T12730] RDS/IB: syz1: added [ 1268.477553][T12730] smc: adding ib device syz1 with port count 1 [ 1268.486585][T12730] smc: ib device syz1 port 1 has pnetid [ 1268.494473][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1268.521468][ T9986] vcan0 speed is unknown, defaulting to 1000 [ 1268.741181][ T51] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 1269.427642][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1269.831916][T12754] loop7: detected capacity change from 0 to 16 [ 1270.005896][T12616] veth0_vlan: entered promiscuous mode [ 1270.039885][T12616] veth1_vlan: entered promiscuous mode [ 1270.134557][T12616] veth0_macvtap: entered promiscuous mode [ 1270.157836][T12616] veth1_macvtap: entered promiscuous mode [ 1270.209113][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.219956][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.232615][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.243894][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.254033][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.264771][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.276201][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.287022][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.297210][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.308170][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.318275][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.320086][ T5810] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1270.331792][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.337034][T12616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.353126][T12754] erofs (device loop7): mounted with root inode @ nid 36. [ 1270.375712][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.392586][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.402724][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.413799][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.423846][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.436965][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.447918][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.462337][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.473314][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.484168][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.494308][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.505110][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.526603][T12616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.548748][T12616] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.557937][T12616] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.567070][T12616] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.576178][T12616] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.632038][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1270.868437][T12754] syz.7.1756: attempt to access beyond end of device [ 1270.868437][T12754] loop7: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1270.882068][T12754] erofs (device loop7): read error -5 @ 8200 of nid 36 [ 1271.506207][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1272.045552][T12770] overlayfs: missing 'lowerdir' [ 1272.496085][ T9649] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1272.659533][T12773] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1764'. [ 1272.726815][ T9649] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.737499][ T9649] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1272.748996][ T9649] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1272.759319][ T9649] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1272.767214][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1272.772606][ T9649] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1272.795449][ T9649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.907583][T12776] loop7: detected capacity change from 0 to 47 [ 1273.296259][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1273.469723][T12777] ALSA: mixer_oss: invalid OSS volume '' [ 1273.657418][T12781] loop2: detected capacity change from 0 to 64 [ 1273.678659][ T9649] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1273.687257][ T9649] usb 2-1: invalid MIDI out EP 0 [ 1274.212260][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1274.767894][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1275.331322][T12730] vcan0 speed is unknown, defaulting to 1000 [ 1275.979610][ T9649] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1276.073910][ T9649] usb 2-1: USB disconnect, device number 14 [ 1276.094323][T12797] netlink: 'syz.7.1774': attribute type 4 has an invalid length. [ 1278.094853][T11487] udevd[11487]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1278.807284][ T9986] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1278.896688][ T5853] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1279.354091][ T5853] usb 8-1: Using ep0 maxpacket: 32 [ 1279.499005][ T9986] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.510011][ T9986] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1279.522470][ T9986] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1279.533062][ T9986] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1279.548732][ T9986] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1279.558812][ T9986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.581926][ T5853] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.649592][ T9986] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1279.659082][ T9986] usb 3-1: invalid MIDI out EP 0 [ 1279.671571][ T5853] usb 8-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1279.681042][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.689412][ T5853] usb 8-1: Product: syz [ 1279.693802][ T5853] usb 8-1: Manufacturer: syz [ 1279.698726][ T5853] usb 8-1: SerialNumber: syz [ 1279.758586][ T5853] usb 8-1: config 0 descriptor?? [ 1279.769722][T12831] netlink: 'syz.8.1784': attribute type 4 has an invalid length. [ 1279.861625][ T5853] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1280.129722][ T9986] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1280.219729][ T9986] usb 3-1: USB disconnect, device number 9 [ 1280.524198][ T4470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.532573][ T4470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.757280][ T8039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.765356][ T8039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.993038][T12839] loop9: detected capacity change from 0 to 2048 [ 1282.467463][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.475551][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.502123][T10140] udevd[10140]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.589804][T12839] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1282.603789][T12839] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1282.917977][ T5853] gspca_sunplus: reg_r err -110 [ 1283.267706][T12616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.278436][T12850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.322371][T12850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.986801][ T5853] sunplus 8-1:0.0: probe with driver sunplus failed with error -110 [ 1284.097456][ T5853] usb 8-1: USB disconnect, device number 2 [ 1285.911514][T12879] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1799'. [ 1286.982156][T12891] 9pnet_fd: Insufficient options for proto=fd [ 1287.147832][T12893] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1809'. [ 1292.884981][T12916] loop9: detected capacity change from 0 to 64 [ 1293.341121][T12921] 9pnet_fd: Insufficient options for proto=fd [ 1293.451649][T12924] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1820'. [ 1295.450112][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 1295.529677][ T5810] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 1297.409718][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.421358][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.437301][T12946] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1830'. [ 1297.962049][T12954] loop7: detected capacity change from 0 to 64 [ 1298.326258][T12958] 9pnet_fd: Insufficient options for proto=fd [ 1299.670985][ T5810] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1299.679856][ T5810] Bluetooth: hci2: Injecting HCI hardware error event [ 1299.689620][ T5810] Bluetooth: hci2: hardware error 0x00 [ 1299.918282][ T51] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 1301.835408][ T5810] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1303.979327][T12999] netlink: 'syz.2.1847': attribute type 4 has an invalid length. [ 1304.126723][T12999] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1847'. [ 1304.136567][T12999] netlink: 'syz.2.1847': attribute type 1 has an invalid length. [ 1306.242218][T13014] loop2: detected capacity change from 0 to 64 [ 1306.790824][T13024] bond_slave_0: entered promiscuous mode [ 1306.796928][T13024] bond_slave_1: entered promiscuous mode [ 1306.803057][T13024] macsec1: entered promiscuous mode [ 1306.808735][T13024] bond0: entered promiscuous mode [ 1306.816735][T13024] macsec1: entered allmulticast mode [ 1306.822350][T13024] bond0: entered allmulticast mode [ 1306.827896][T13024] bond_slave_0: entered allmulticast mode [ 1306.833858][T13024] bond_slave_1: entered allmulticast mode [ 1307.001358][T13024] bond0: left allmulticast mode [ 1307.007362][T13024] bond_slave_0: left allmulticast mode [ 1307.013331][T13024] bond_slave_1: left allmulticast mode [ 1307.019327][T13024] bond0: left promiscuous mode [ 1307.027082][T13024] bond_slave_0: left promiscuous mode [ 1307.032734][T13024] bond_slave_1: left promiscuous mode [ 1309.018541][T13031] netlink: 'syz.9.1860': attribute type 4 has an invalid length. [ 1309.367728][T13032] netlink: 188 bytes leftover after parsing attributes in process `syz.9.1860'. [ 1309.377573][T13032] netlink: 'syz.9.1860': attribute type 1 has an invalid length. [ 1310.040316][T13045] loop1: detected capacity change from 0 to 47 [ 1310.304091][ C1] Unknown status report in ack skb [ 1312.069775][T13068] netlink: 'syz.8.1873': attribute type 4 has an invalid length. [ 1312.556020][T13077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1875'. [ 1312.659408][T13068] netlink: 188 bytes leftover after parsing attributes in process `syz.8.1873'. [ 1312.669399][T13068] netlink: 'syz.8.1873': attribute type 1 has an invalid length. [ 1316.687173][T13108] netlink: 'syz.2.1888': attribute type 4 has an invalid length. [ 1316.891010][T13108] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1888'. [ 1316.900581][T13108] netlink: 'syz.2.1888': attribute type 1 has an invalid length. [ 1318.815614][T13142] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1899'. [ 1319.907098][T13154] netlink: 'syz.9.1902': attribute type 4 has an invalid length. [ 1320.036503][T13154] netlink: 188 bytes leftover after parsing attributes in process `syz.9.1902'. [ 1320.045700][T13154] netlink: 'syz.9.1902': attribute type 1 has an invalid length. [ 1320.626608][T13168] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1907'. [ 1321.166443][T13168] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1321.217997][T13174] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1322.196589][ T9986] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1322.356158][ T9986] usb 10-1: device descriptor read/64, error -71 [ 1322.899376][T13188] netlink: 'syz.2.1917': attribute type 4 has an invalid length. [ 1323.014545][ T9986] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1323.075422][T13188] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1917'. [ 1323.085002][T13188] netlink: 'syz.2.1917': attribute type 1 has an invalid length. [ 1323.177313][ T5810] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 1323.226465][ T9986] usb 10-1: device descriptor read/64, error -71 [ 1323.352914][ T9986] usb usb10-port1: attempt power cycle [ 1323.700011][ T5810] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1323.759720][T13200] 9pnet_fd: Insufficient options for proto=fd [ 1325.069225][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1325.076200][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1325.207216][ T9986] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1325.290338][T13207] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1924'. [ 1326.067337][ T9986] usb 10-1: device descriptor read/8, error -71 [ 1326.596066][ T5853] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1327.021419][ T5853] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1327.033537][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1327.045009][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1327.091307][ T5853] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1327.102513][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.111127][ T5853] usb 8-1: Product: syz [ 1327.115425][ T5853] usb 8-1: Manufacturer: syz [ 1327.120238][ T5853] usb 8-1: SerialNumber: syz [ 1327.134530][ T5853] usb 8-1: config 0 descriptor?? [ 1327.196851][T13224] netlink: 188 bytes leftover after parsing attributes in process `syz.8.1931'. [ 1327.206525][T13224] netlink: 'syz.8.1931': attribute type 1 has an invalid length. [ 1327.214952][T12713] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1327.256499][ T5810] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1327.273699][ T5810] Bluetooth: hci0: Injecting HCI hardware error event [ 1327.286255][ T5810] Bluetooth: hci0: hardware error 0x00 [ 1327.739188][T12713] usb 2-1: Using ep0 maxpacket: 16 [ 1327.777317][T12713] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1327.791170][T12713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1328.566776][T12713] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1328.577351][T12713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.585643][T12713] usb 2-1: Product: syz [ 1328.592018][T12713] usb 2-1: Manufacturer: syz [ 1328.602007][T12713] usb 2-1: SerialNumber: syz [ 1328.754073][T12713] usb 2-1: config 0 descriptor?? [ 1329.544443][ T5810] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1329.652836][T12713] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1329.663490][T12713] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1330.428578][T12713] em28xx 2-1:0.0: unknown em28xx chip ID (209) [ 1330.646739][T12713] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1330.679849][T12713] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1330.688271][T12713] em28xx 2-1:0.0: No AC97 audio processor [ 1330.769567][T12713] usb 2-1: USB disconnect, device number 15 [ 1330.785597][T12713] em28xx 2-1:0.0: Disconnecting em28xx [ 1330.815693][T12713] em28xx 2-1:0.0: Freeing device [ 1331.416606][ T5810] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1331.427044][ T5810] Bluetooth: hci5: Injecting HCI hardware error event [ 1331.435118][ T5810] Bluetooth: hci5: hardware error 0x00 [ 1333.533363][ T5810] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1336.817358][T12713] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1337.036476][T12713] usb 3-1: device descriptor read/64, error -71 [ 1337.306547][T12713] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1337.466772][T12713] usb 3-1: device descriptor read/64, error -71 [ 1337.581532][T12713] usb usb3-port1: attempt power cycle [ 1338.017102][T12713] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1338.091910][T12713] usb 3-1: device descriptor read/8, error -71 [ 1338.366652][T12713] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1338.500284][T12713] usb 3-1: device descriptor read/8, error -71 [ 1338.619443][T12713] usb usb3-port1: unable to enumerate USB device [ 1340.977319][T13313] netlink: 'syz.9.1969': attribute type 33 has an invalid length. [ 1341.946921][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1972'. [ 1344.339059][ T9649] IPVS: starting estimator thread 0... [ 1344.446806][T13333] IPVS: using max 240 ests per chain, 12000 per kthread [ 1348.478174][ T5853] iguanair 8-1:0.0: failed to get version [ 1348.486925][ T5853] iguanair 8-1:0.0: probe with driver iguanair failed with error -110 [ 1349.248475][ T5853] usb 8-1: USB disconnect, device number 3 [ 1349.898053][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1987'. [ 1349.980615][T13358] fuse: Bad value for 'fd' [ 1350.779302][T13369] netlink: 'syz.9.1990': attribute type 8 has an invalid length. [ 1350.791065][T13369] netlink: 'syz.9.1990': attribute type 1 has an invalid length. [ 1350.799638][T13369] netlink: 'syz.9.1990': attribute type 1 has an invalid length. [ 1350.807910][T13369] netlink: 'syz.9.1990': attribute type 1 has an invalid length. [ 1350.820323][T13369] netlink: 199184 bytes leftover after parsing attributes in process `syz.9.1990'. [ 1353.601648][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1999'. [ 1354.975441][T13403] bond0: (slave netdevsim3): Releasing backup interface [ 1355.047576][T13403] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.277193][T13403] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.578779][T13403] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.923851][T13403] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.148056][T13417] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2009'. [ 1356.171173][T13417] Êü: entered promiscuous mode [ 1356.273859][T13403] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.300071][T13403] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.327409][T13403] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.369234][T13403] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.357298][T13444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2020'. [ 1360.405561][T13446] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2021'. [ 1360.429461][T13446] Êü: entered promiscuous mode [ 1363.384723][T13469] netlink: 'syz.7.2032': attribute type 10 has an invalid length. [ 1363.396401][T13469] bridge0: port 3(team0) entered blocking state [ 1363.403423][T13469] bridge0: port 3(team0) entered disabled state [ 1363.416960][T13469] team0: entered allmulticast mode [ 1363.424751][T13469] team_slave_0: entered allmulticast mode [ 1363.431034][T13469] team_slave_1: entered allmulticast mode [ 1363.560010][T13469] team0: entered promiscuous mode [ 1363.565323][T13469] team_slave_0: entered promiscuous mode [ 1363.572333][T13469] team_slave_1: entered promiscuous mode [ 1363.581725][T13469] bridge0: port 3(team0) entered blocking state [ 1363.588840][T13469] bridge0: port 3(team0) entered forwarding state [ 1365.227928][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2033'. [ 1365.924382][T13478] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2035'. [ 1366.263274][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2035'. [ 1366.273057][T13479] team0: left allmulticast mode [ 1366.288567][T13479] team_slave_0: left allmulticast mode [ 1366.296717][T13479] team_slave_1: left allmulticast mode [ 1366.304639][T13479] team0: left promiscuous mode [ 1366.309932][T13479] team_slave_0: left promiscuous mode [ 1366.316717][T13479] team_slave_1: left promiscuous mode [ 1366.324156][T13479] bridge0: port 3(team0) entered disabled state [ 1366.553231][T13479] bridge_slave_1: left allmulticast mode [ 1366.559522][T13479] bridge_slave_1: left promiscuous mode [ 1366.566458][T13479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.040217][T13479] bridge_slave_0: left allmulticast mode [ 1367.046466][T13479] bridge_slave_0: left promiscuous mode [ 1367.053219][T13479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.722747][T13487] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2039'. [ 1368.266165][T13492] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2040'. [ 1368.275599][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2040'. [ 1369.220437][T13509] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2048'. [ 1369.231843][T13509] openvswitch: Êü: Dropping previously announced user features [ 1370.017235][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2053'. [ 1373.809779][T13549] netlink: 'syz.7.2064': attribute type 1 has an invalid length. [ 1373.818025][T13549] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2064'. [ 1374.632366][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2068'. [ 1375.313299][T13564] veth0_vlan: left promiscuous mode [ 1375.319127][T13564] vlan0: entered promiscuous mode [ 1378.051066][T13589] netlink: 'syz.2.2082': attribute type 22 has an invalid length. [ 1378.068699][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 1378.616456][T13593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2083'. [ 1378.812275][T13596] tipc: Enabling of bearer rejected, failed to enable media [ 1379.835615][T13611] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2091'. [ 1379.845486][T13611] openvswitch: netlink: Message has 3074 unknown bytes. [ 1380.009643][T13614] loop8: detected capacity change from 0 to 512 [ 1380.607950][T13614] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1380.628931][T13614] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 1380.641773][T13614] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2093: Corrupt directory, running e2fsck is recommended [ 1380.729843][T13626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2098'. [ 1380.888304][T13614] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 1380.897657][T13614] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.2093: corrupted in-inode xattr: invalid ea_ino [ 1381.070949][T13614] EXT4-fs (loop8): Remounting filesystem read-only [ 1381.080012][T13614] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1382.428258][T11182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.169864][T13644] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.2105'. [ 1383.184225][T13644] openvswitch: netlink: Message has 3074 unknown bytes. [ 1383.616337][T13648] raw_sendmsg: syz.1.2107 forgot to set AF_INET. Fix it! [ 1384.884365][T13661] loop9: detected capacity change from 0 to 512 [ 1385.399556][T13661] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1385.411568][T13661] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 1385.422218][T13661] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.2113: Corrupt directory, running e2fsck is recommended [ 1385.548291][T13661] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1385.557400][T13661] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.2113: corrupted in-inode xattr: invalid ea_ino [ 1386.395782][T13675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.509163][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1386.516009][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1386.566127][T13661] EXT4-fs (loop9): Remounting filesystem read-only [ 1386.574706][T13661] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1386.626545][T13676] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.2118'. [ 1386.636535][T13676] openvswitch: netlink: Message has 3074 unknown bytes. [ 1387.951470][T12616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.816454][ C1] Unknown status report in ack skb [ 1389.495360][T13707] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.2132'. [ 1389.508759][T13707] openvswitch: netlink: Message has 3074 unknown bytes. [ 1391.752146][T13726] loop8: detected capacity change from 0 to 64 [ 1393.643164][T13746] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.2145'. [ 1393.653338][T13746] openvswitch: netlink: Message has 3074 unknown bytes. [ 1396.328991][T13782] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.2158'. [ 1396.338873][T13782] openvswitch: netlink: Message has 3074 unknown bytes. [ 1398.237675][ C0] Unknown status report in ack skb [ 1402.215431][T13847] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2184'. [ 1402.983704][T13856] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1403.657317][T13854] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1404.898608][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'. [ 1405.150028][T13885] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1405.481727][T13893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2199'. [ 1406.132559][T13901] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2205'. [ 1407.395210][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2215'. [ 1407.704948][T13921] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1408.689379][T13926] lo speed is unknown, defaulting to 1000 [ 1409.574845][T13926] lo speed is unknown, defaulting to 1000 [ 1410.555654][T13926] vcan0 speed is unknown, defaulting to 1000 [ 1411.543404][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2227'. [ 1411.702572][T13965] syz1: rxe_newlink: already configured on vcan0 [ 1414.182628][T13972] loop1: detected capacity change from 0 to 4096 [ 1414.219248][T13972] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1414.530983][T13972] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1414.580087][T13972] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 1415.703511][T13997] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1416.237037][T14002] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2244'. [ 1416.996931][ T29] audit: type=1326 audit(1732306632.815:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1417.020015][ T29] audit: type=1326 audit(1732306632.815:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1417.256521][ T29] audit: type=1326 audit(1732306632.895:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1417.282318][ T29] audit: type=1326 audit(1732306632.905:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1417.306379][ T29] audit: type=1326 audit(1732306632.905:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1417.329458][ T29] audit: type=1326 audit(1732306632.915:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1417.354069][ T29] audit: type=1326 audit(1732306632.925:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1417.379845][ T29] audit: type=1326 audit(1732306632.925:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1417.405132][ T29] audit: type=1326 audit(1732306632.945:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1417.428103][ T29] audit: type=1326 audit(1732306632.945:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1417.898562][T14021] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1420.018577][T14038] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2260'. [ 1421.658991][T14056] syz1: rxe_newlink: already configured on vcan0 [ 1422.423486][T14066] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2273'. [ 1422.613372][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2274'. [ 1423.400260][T14080] syz.8.2278[14080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1423.489221][T14080] syz.8.2278[14080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1423.647149][T14080] syz.8.2278[14080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1423.711407][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1423.711466][ T29] audit: type=1326 audit(1732306639.545:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14079 comm="syz.8.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc97e819 code=0x7ffc0000 [ 1424.087033][ T29] audit: type=1326 audit(1732306639.765:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14079 comm="syz.8.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f33dc97e819 code=0x7ffc0000 [ 1424.109963][ T29] audit: type=1326 audit(1732306639.765:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14079 comm="syz.8.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc97e819 code=0x7ffc0000 [ 1425.241888][T14095] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1426.003989][T14101] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2287'. [ 1426.363948][T14103] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2288'. [ 1429.851431][T14134] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1429.925629][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2296'. [ 1430.752348][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2304'. [ 1430.887547][T14149] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2303'. [ 1431.768919][T14158] loop8: detected capacity change from 0 to 256 [ 1433.426794][ T5853] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1433.646358][ T5853] usb 3-1: device descriptor read/64, error -71 [ 1433.912551][ T5853] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1434.171917][ T5853] usb 3-1: device descriptor read/64, error -71 [ 1434.308937][ T5853] usb usb3-port1: attempt power cycle [ 1434.743690][ T5853] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1434.842238][ T5853] usb 3-1: device descriptor read/8, error -71 [ 1435.116681][ T5853] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1435.253621][ T5853] usb 3-1: device descriptor read/8, error -71 [ 1435.373631][ T5853] usb usb3-port1: unable to enumerate USB device [ 1435.967666][T14182] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2318'. [ 1435.968148][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2319'. [ 1435.992534][T14182] Êü: entered promiscuous mode [ 1436.974672][T14194] overlayfs: failed to resolve './file0': -2 [ 1437.861297][T14204] syz.7.2324[14204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1437.862200][T14204] syz.7.2324[14204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1437.876910][T14204] syz.7.2324[14204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1441.736956][T12696] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1442.166342][T12696] usb 3-1: Using ep0 maxpacket: 16 [ 1442.211499][T12696] usb 3-1: config 0 has no interfaces? [ 1442.233853][T12696] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1442.244031][T12696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.252402][T12696] usb 3-1: Product: syz [ 1442.264187][T12696] usb 3-1: Manufacturer: syz [ 1442.271022][T12696] usb 3-1: SerialNumber: syz [ 1442.357547][T14226] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2333'. [ 1442.372597][T14226] openvswitch: Êü: Dropping previously announced user features [ 1442.721075][T14231] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2336'. [ 1443.009391][T12696] usb 3-1: config 0 descriptor?? [ 1443.239356][T14237] overlayfs: failed to resolve './file0': -2 [ 1444.708888][T12713] usb 3-1: USB disconnect, device number 18 [ 1445.260431][ T29] audit: type=1326 audit(1732306661.095:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1445.358726][ T29] audit: type=1326 audit(1732306661.115:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f679397e819 code=0x7ffc0000 [ 1445.474946][T14265] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2348'. [ 1445.498875][T14265] Êü: entered promiscuous mode [ 1446.531981][T14275] overlayfs: failed to resolve './file0': -2 [ 1447.078133][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2353'. [ 1447.516298][T12713] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1447.676471][T12713] usb 8-1: Using ep0 maxpacket: 16 [ 1447.748242][T12713] usb 8-1: config 0 has no interfaces? [ 1447.780846][T12713] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1447.794513][T12713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.804050][T12713] usb 8-1: Product: syz [ 1447.808734][T12713] usb 8-1: Manufacturer: syz [ 1447.813599][T12713] usb 8-1: SerialNumber: syz [ 1447.935639][T12713] usb 8-1: config 0 descriptor?? [ 1447.936304][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1447.947582][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1448.321442][T14287] tipc: Started in network mode [ 1448.324937][T14290] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2359'. [ 1448.326627][T14287] tipc: Node identity 1, cluster identity 4711 [ 1448.326711][T14287] tipc: Node number set to 1 [ 1448.327431][T14287] tipc: Cannot configure node identity twice [ 1448.394615][T14290] Êü: entered promiscuous mode [ 1449.214767][T14299] binder: 14298:14299 ioctl c0306201 200003c0 returned -14 [ 1450.317916][T14311] Process accounting resumed [ 1450.968995][T12713] usb 8-1: USB disconnect, device number 4 [ 1452.554952][T14332] loop7: detected capacity change from 0 to 1024 [ 1452.728960][T14332] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1453.103416][T14342] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2379'. [ 1453.389839][T10212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.570448][T14345] Process accounting resumed [ 1457.735672][T14386] netlink: 512 bytes leftover after parsing attributes in process `syz.7.2397'. [ 1457.889829][T14382] Process accounting resumed [ 1460.041864][T14412] netlink: 512 bytes leftover after parsing attributes in process `syz.9.2408'. [ 1460.868758][T14423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2413'. [ 1461.393955][T14421] Process accounting resumed [ 1462.120292][T14437] infiniband sz1: set active [ 1462.204591][T14437] infiniband syz2: set active [ 1462.439486][T12696] lo speed is unknown, defaulting to 1000 [ 1466.202597][T14456] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.2427'. [ 1466.908136][T14460] Process accounting resumed [ 1467.419959][T14467] fuse: Unknown parameter 'user_id00000000000000000000' [ 1469.910409][T12713] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1470.140186][T12713] usb 8-1: Using ep0 maxpacket: 16 [ 1470.169811][T12713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.181530][T12713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.192086][T12713] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1470.205454][T12713] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1470.218001][T12713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.704624][T12713] usb 8-1: config 0 descriptor?? [ 1471.100841][ T29] audit: type=1326 audit(1732306686.935:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433917e819 code=0x7ffc0000 [ 1471.125699][ T29] audit: type=1326 audit(1732306686.935:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f433917e819 code=0x7ffc0000 [ 1471.151748][ T29] audit: type=1326 audit(1732306686.935:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433917e819 code=0x7ffc0000 [ 1471.175794][ T29] audit: type=1326 audit(1732306686.935:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f433917e819 code=0x7ffc0000 [ 1471.201868][ T29] audit: type=1326 audit(1732306686.935:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433917e819 code=0x7ffc0000 [ 1471.225060][ T29] audit: type=1326 audit(1732306686.965:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f433917e819 code=0x7ffc0000 [ 1471.518504][T12713] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0002/input/input11 [ 1471.607546][ T29] audit: type=1326 audit(1732306687.405:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433917e819 code=0x7ffc0000 [ 1471.632220][T12713] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1471.774727][T12713] usb 8-1: USB disconnect, device number 5 [ 1472.561015][T14503] fuse: Unknown parameter 'user_id00000000000000000000' [ 1473.436566][T12713] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1473.616310][T12713] usb 10-1: Using ep0 maxpacket: 16 [ 1474.115196][T12713] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.126120][T12713] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1474.181479][T12713] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1474.191314][T12713] usb 10-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 1474.200328][T12713] usb 10-1: Product: syz [ 1474.204834][T12713] usb 10-1: Manufacturer: syz [ 1474.339026][T12713] usb 10-1: config 0 descriptor?? [ 1474.599376][ T29] audit: type=1326 audit(1732306690.415:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14511 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21df7e819 code=0x7ffc0000 [ 1474.629680][ T29] audit: type=1326 audit(1732306690.415:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14511 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc21df7e819 code=0x7ffc0000 [ 1474.654579][ T29] audit: type=1326 audit(1732306690.415:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14511 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21df7e819 code=0x7ffc0000 [ 1474.859328][T14527] fuse: Bad value for 'fd' [ 1475.009632][T13410] usb 10-1: USB disconnect, device number 6 [ 1475.966202][T13410] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1476.164858][T13410] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1476.177163][T13410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1476.188595][T13410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1476.276629][T13410] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1476.286269][T13410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.294552][T13410] usb 3-1: Product: syz [ 1476.299288][T13410] usb 3-1: Manufacturer: syz [ 1476.304138][T13410] usb 3-1: SerialNumber: syz [ 1476.323162][T13410] usb 3-1: config 0 descriptor?? [ 1476.350357][T13410] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 1476.768587][T12713] usb 3-1: USB disconnect, device number 19 [ 1477.806932][T14556] fuse: Bad value for 'fd' [ 1481.908172][T13410] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1482.167887][T14589] fuse: Bad value for 'fd' [ 1482.511156][T14591] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2483'. [ 1482.782827][T13410] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1482.796504][T13410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1482.815655][T13410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1483.168422][T13410] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1483.177926][T13410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.188015][T13410] usb 2-1: Product: syz [ 1483.192451][T13410] usb 2-1: Manufacturer: syz [ 1483.197412][T13410] usb 2-1: SerialNumber: syz [ 1483.294536][T13410] usb 2-1: config 0 descriptor?? [ 1483.615626][T13410] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 1486.416181][T13410] usb 2-1: USB disconnect, device number 16 [ 1486.987183][T14617] program syz.9.2489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1487.574686][T14621] fuse: Unknown parameter '0x0000000000000005' [ 1488.285547][T14631] loop8: detected capacity change from 0 to 256 [ 1488.683066][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1488.683147][ T29] audit: type=1326 audit(1732306704.515:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.1.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433917e819 code=0x7ffc0000 [ 1489.091935][ T29] audit: type=1326 audit(1732306704.825:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.1.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f433917e819 code=0x7ffc0000 [ 1489.115561][ T29] audit: type=1326 audit(1732306704.825:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.1.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433917e819 code=0x7ffc0000 [ 1491.657689][ T9736] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1491.687358][ T9736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1491.697283][ T9736] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1491.710602][ T9736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1491.726396][ T9736] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1491.735641][ T9736] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1493.211630][T14644] lo speed is unknown, defaulting to 1000 [ 1493.605533][T14644] lo speed is unknown, defaulting to 1000 [ 1493.999749][T14644] vcan0 speed is unknown, defaulting to 1000 [ 1494.227551][ T9736] Bluetooth: hci6: command tx timeout [ 1494.785433][T14655] program syz.9.2506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1495.423711][ T29] audit: type=1326 audit(1732306711.255:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21df7e819 code=0x7ffc0000 [ 1495.528018][ T29] audit: type=1326 audit(1732306711.315:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fc21df7e819 code=0x7ffc0000 [ 1495.551268][ T29] audit: type=1326 audit(1732306711.315:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21df7e819 code=0x7ffc0000 [ 1495.574314][ T29] audit: type=1326 audit(1732306711.315:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21df7e819 code=0x7ffc0000 [ 1495.600186][ T29] audit: type=1326 audit(1732306711.315:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fc21df7e819 code=0x7ffc0000 [ 1495.817671][T14644] chnl_net:caif_netlink_parms(): no params data found [ 1495.956410][ T29] audit: type=1326 audit(1732306711.785:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21df7e819 code=0x7ffc0000 [ 1495.980021][ T29] audit: type=1326 audit(1732306711.785:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21df7e819 code=0x7ffc0000 [ 1496.296231][ T9736] Bluetooth: hci6: command tx timeout [ 1496.546154][T14673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1497.604751][T14644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.612784][T14644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.621015][T14644] bridge_slave_0: entered allmulticast mode [ 1497.630821][T14644] bridge_slave_0: entered promiscuous mode [ 1497.735557][T14644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.743955][T14644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.752614][T14644] bridge_slave_1: entered allmulticast mode [ 1497.774089][T14644] bridge_slave_1: entered promiscuous mode [ 1498.702924][ T9736] Bluetooth: hci6: command tx timeout [ 1499.188847][T14644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.312572][T14644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.687455][T12713] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1499.743882][T14644] team0: Port device team_slave_0 added [ 1499.779042][T14644] team0: Port device team_slave_1 added [ 1499.879794][T12713] usb 10-1: Using ep0 maxpacket: 16 [ 1499.902721][T12713] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.917388][T12713] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.928869][T12713] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1499.938606][T12713] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.073162][T14696] program syz.2.2518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1500.162403][T12713] usb 10-1: config 0 descriptor?? [ 1500.200667][T14644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.208996][T14644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1500.244028][T14644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.371415][T14644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.378787][T14644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1500.405258][T14644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.485762][T14698] loop2: detected capacity change from 0 to 128 [ 1500.609209][T14698] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1500.689715][T12713] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 1500.697286][T12713] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 1500.704605][T12713] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 1500.712569][T12713] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 1500.720050][T12713] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 1500.749428][T14698] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1500.789965][T12713] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1500.812039][ T5810] Bluetooth: hci6: command tx timeout [ 1500.924457][T14701] binder: 14700:14701 ioctl c018620c 20000000 returned -22 [ 1500.980405][T14698] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.2519: Directory block failed checksum [ 1501.009758][T14644] hsr_slave_0: entered promiscuous mode [ 1501.046234][T14644] hsr_slave_1: entered promiscuous mode [ 1501.056967][T12713] cp2112 0003:10C4:EA90.0003: error requesting version [ 1501.076658][T14644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1501.084590][T14644] Cannot create hsr debugfs directory [ 1501.101724][T12713] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -5 [ 1501.298541][ T5801] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1501.989276][T14644] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.085117][T14644] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.216281][T14644] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.324892][T14644] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.363816][T14711] loop7: detected capacity change from 0 to 2048 [ 1502.476986][T14711] EXT4-fs: Ignoring removed mblk_io_submit option [ 1502.538668][T14711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1502.810440][T14644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1502.813704][T14711] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2523: bg 0: block 234: padding at end of block bitmap is not set [ 1502.907217][T14644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1502.920353][T14711] EXT4-fs (loop7): Remounting filesystem read-only [ 1502.973661][T14644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1503.076228][T13679] usb 10-1: USB disconnect, device number 7 [ 1503.096910][T14644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1503.506927][T14723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1503.556609][T10212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.670242][T14725] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2526'. [ 1504.175786][T14644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.235218][T14644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.326618][ T1874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.334424][ T1874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.560164][T14728] program syz.2.2528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1505.158935][T14644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1505.170341][T14644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1505.204997][ T1874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.212787][ T1874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.942907][T14758] program syz.2.2538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1507.977720][T14761] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2537'. [ 1508.274941][T14763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.381163][T14644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.589169][T14644] veth0_vlan: entered promiscuous mode [ 1508.629325][T14644] veth1_vlan: entered promiscuous mode [ 1508.832341][T14644] veth0_macvtap: entered promiscuous mode [ 1508.869634][T14644] veth1_macvtap: entered promiscuous mode [ 1508.926504][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1508.937407][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.947604][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1508.958399][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.968609][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1508.979487][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.990902][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1509.001772][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.005167][T14768] loop7: detected capacity change from 0 to 256 [ 1509.014139][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1509.036328][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.048324][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1509.059151][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.069483][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1509.080541][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.095667][T14644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.110469][T14768] exfat: Invalid uid '0x00000000ffffffff' [ 1509.195452][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1509.206719][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.217118][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1509.232105][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.243446][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1509.254365][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.266739][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1509.278127][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.288401][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1509.299244][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.309566][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1509.320543][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.372347][T14644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.470185][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1509.477133][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1509.618056][T14644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.627287][T14644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.646879][T14644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.658571][T14644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.784344][T14772] binder: 14771:14772 ioctl c0306201 0 returned -14 [ 1511.391409][T13679] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1511.401724][ T5854] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1511.577874][ T5854] usb 8-1: Using ep0 maxpacket: 16 [ 1511.840826][T13679] usb 3-1: Using ep0 maxpacket: 8 [ 1511.960898][T13679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.972604][T13679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.982976][T13679] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1511.999864][T13679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.117793][ T5854] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1512.127708][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.136474][ T5854] usb 8-1: Product: syz [ 1512.140910][ T5854] usb 8-1: Manufacturer: syz [ 1512.145780][ T5854] usb 8-1: SerialNumber: syz [ 1512.424246][T13679] usb 3-1: config 0 descriptor?? [ 1512.703488][ T5854] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1512.720356][ T5854] r8152-cfgselector 8-1: config 0 descriptor?? [ 1513.097451][T14782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.108243][T14782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1513.820945][T14798] program syz.8.2550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1514.021078][T13679] usbhid 3-1:0.0: can't add hid device: -71 [ 1514.027841][T13679] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1514.058031][ T5854] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1514.123388][T13679] usb 3-1: USB disconnect, device number 20 [ 1514.257160][ T5854] usb 10-1: Using ep0 maxpacket: 16 [ 1514.282960][ T5854] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.293856][ T5854] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1514.320093][ T5854] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1514.329846][ T5854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.338458][ T5854] usb 10-1: Product: syz [ 1514.342966][ T5854] usb 10-1: Manufacturer: syz [ 1514.355378][ T5854] usb 10-1: SerialNumber: syz [ 1514.492861][T13679] r8152-cfgselector 8-1: USB disconnect, device number 6 [ 1514.642942][T14803] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2551'. [ 1514.875085][T14805] process 'syz.8.2553' launched './file1' with NULL argv: empty string added [ 1515.213366][ T5854] usb 10-1: cannot find UAC_HEADER [ 1515.348718][ T5854] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1515.467638][ T5854] usb 10-1: USB disconnect, device number 8 [ 1516.008786][T10247] udevd[10247]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1516.300495][T14805] loop8: detected capacity change from 0 to 8192 [ 1516.538398][T14805] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1517.566698][T12696] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1517.668789][T14833] netlink: 1624 bytes leftover after parsing attributes in process `syz.9.2562'. [ 1518.056625][T12696] usb 3-1: Using ep0 maxpacket: 16 [ 1518.131101][T12696] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1518.149317][T12696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.160070][T12696] usb 3-1: Product: syz [ 1518.164527][T12696] usb 3-1: Manufacturer: syz [ 1518.169586][T12696] usb 3-1: SerialNumber: syz [ 1518.227414][T12696] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1518.233977][T12696] r8152-cfgselector 3-1: config 0 descriptor?? [ 1519.151375][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.162146][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.543571][T14793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.551792][T14793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.574071][T14858] loop9: detected capacity change from 0 to 512 [ 1520.734104][T14858] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1520.743542][T14858] EXT4-fs (loop9): blocks per group (71) and clusters per group (20800) inconsistent [ 1521.128058][T12696] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1521.183760][T13679] r8152-cfgselector 3-1: USB disconnect, device number 21 [ 1521.447623][T12696] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.459294][T12696] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1521.469537][T12696] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1521.479109][T12696] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.984148][T12696] usb 8-1: config 0 descriptor?? [ 1522.885083][T12696] hid-led 0003:0FC5:B080.0004: probe with driver hid-led failed with error -71 [ 1523.209527][T12696] usb 8-1: USB disconnect, device number 7 [ 1524.158658][ T9736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1524.188744][ T9736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1524.202210][ T9736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1524.222975][ T9736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1524.234303][ T9736] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1524.244589][ T9736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1525.367277][T14883] cgroup: Invalid name [ 1526.486763][ T9736] Bluetooth: hci2: command tx timeout [ 1526.579175][T14871] lo speed is unknown, defaulting to 1000 [ 1526.589739][T14897] xt_bpf: check failed: parse error [ 1527.238713][T14871] lo speed is unknown, defaulting to 1000 [ 1527.417687][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2586'. [ 1527.637703][T14871] vcan0 speed is unknown, defaulting to 1000 [ 1528.541250][ T9736] Bluetooth: hci2: command tx timeout [ 1530.620699][ T9736] Bluetooth: hci2: command tx timeout [ 1531.859668][ T5853] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1532.126230][ T5853] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1532.140052][ T5853] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1532.152175][ T5853] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1532.168589][ T5853] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1532.178948][ T5853] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.478572][T14871] chnl_net:caif_netlink_parms(): no params data found [ 1532.618227][ T5853] usb 10-1: config 0 descriptor?? [ 1532.626810][T14934] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1532.703910][ T9736] Bluetooth: hci2: command tx timeout [ 1533.224122][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.233296][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.241620][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.249619][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.257927][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.265766][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.274023][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.282047][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.295099][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.305002][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.313038][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.321637][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.330177][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.338437][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.346748][ T5853] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1533.666691][T14938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.339249][ T5853] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1534.460948][ T5853] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1536.324117][T14871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.338415][T14871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.346845][T14871] bridge_slave_0: entered allmulticast mode [ 1536.356438][T14871] bridge_slave_0: entered promiscuous mode [ 1536.577216][ T5853] usb 10-1: USB disconnect, device number 9 [ 1536.658662][T14871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.667622][T14871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.687483][T14871] bridge_slave_1: entered allmulticast mode [ 1536.697159][T14871] bridge_slave_1: entered promiscuous mode [ 1537.364998][T14871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.509398][T14871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.865784][T14871] team0: Port device team_slave_0 added [ 1537.886990][T14871] team0: Port device team_slave_1 added [ 1538.452600][T14871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.460649][T14871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1538.487628][T14871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.683960][T14966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1538.692786][T14871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.702055][T14871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1538.738108][T14871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1538.859895][T14972] kvm: kvm [14971]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xba66ee67b00021ba [ 1539.098249][T14871] hsr_slave_0: entered promiscuous mode [ 1539.162649][T14871] hsr_slave_1: entered promiscuous mode [ 1539.292884][T14871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1539.301101][T14871] Cannot create hsr debugfs directory [ 1540.482380][T14871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.969599][T14871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.100910][T14871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.196286][ T5853] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1541.298800][T14871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.396552][ T5853] usb 10-1: Using ep0 maxpacket: 16 [ 1541.423852][ T5853] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1541.437124][ T5853] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1541.555275][ T5853] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1541.566053][ T5853] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.574443][ T5853] usb 10-1: Product: syz [ 1541.579251][ T5853] usb 10-1: Manufacturer: syz [ 1541.586927][ T5853] usb 10-1: SerialNumber: syz [ 1541.645199][T14871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1541.662462][ T5853] usb 10-1: config 0 descriptor?? [ 1541.700367][ T5853] em28xx 10-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1541.755707][T14871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1541.895466][T14871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1541.953850][T14871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1542.475819][T14871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.552601][T14871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.607262][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.615231][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.641168][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.648914][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.209134][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2623'. [ 1544.164006][T12696] usb 10-1: USB disconnect, device number 10 [ 1544.900821][T14871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.052850][T15016] Process accounting resumed [ 1545.303425][T14871] veth0_vlan: entered promiscuous mode [ 1545.464938][T14871] veth1_vlan: entered promiscuous mode [ 1545.843717][T14871] veth0_macvtap: entered promiscuous mode [ 1545.890946][T14871] veth1_macvtap: entered promiscuous mode [ 1546.072706][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.083665][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.096858][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.108404][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.119020][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.129926][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.140234][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.151501][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.161760][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.172603][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.182855][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.196381][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.207278][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.218169][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.228474][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.239862][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.254411][T14871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.375630][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.380854][ T29] audit: type=1326 audit(1732306762.215:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.7.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1546.388861][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.411794][ T29] audit: type=1326 audit(1732306762.215:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.7.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1546.412030][ T29] audit: type=1326 audit(1732306762.215:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.7.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1546.477054][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.489289][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.510225][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.523223][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.533386][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.544236][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.554393][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.565146][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.575332][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.586200][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.596338][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.616627][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.633652][T14871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1546.664688][ T29] audit: type=1326 audit(1732306762.255:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.7.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1546.688358][ T29] audit: type=1326 audit(1732306762.255:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.7.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1546.719567][ T29] audit: type=1326 audit(1732306762.265:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.7.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1546.729398][T14871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.744342][ T29] audit: type=1326 audit(1732306762.265:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.7.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1546.751662][T14871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.774095][ T29] audit: type=1326 audit(1732306762.265:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.7.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1546.783151][T14871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.805622][ T29] audit: type=1326 audit(1732306762.265:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.7.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1546.817226][T14871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.857095][ T29] audit: type=1326 audit(1732306762.285:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.7.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1547.584528][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2635'. [ 1547.937009][T12713] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1548.098242][T12713] usb 10-1: Using ep0 maxpacket: 16 [ 1548.154920][T12713] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1548.167835][T12713] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1548.264856][T12713] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1548.275635][T12713] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.284387][T12713] usb 10-1: Product: syz [ 1548.289022][T12713] usb 10-1: Manufacturer: syz [ 1548.293965][T12713] usb 10-1: SerialNumber: syz [ 1548.429059][T12713] usb 10-1: config 0 descriptor?? [ 1548.483024][T12713] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1548.493209][T12713] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1548.727776][T15047] Process accounting resumed [ 1549.114904][T12713] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1549.122687][T12713] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1549.164659][T12713] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1549.172395][T12713] em28xx 10-1:0.0: No AC97 audio processor [ 1549.273716][T12713] usb 10-1: USB disconnect, device number 11 [ 1549.282115][T12713] em28xx 10-1:0.0: Disconnecting em28xx [ 1549.312601][T12713] em28xx 10-1:0.0: Freeing device [ 1551.446760][T12713] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1551.626736][T12713] usb 10-1: Using ep0 maxpacket: 16 [ 1551.667156][T12713] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.680238][T12713] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1551.692324][T12713] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1551.707177][T12713] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1551.717149][T12713] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.897687][T12713] usb 10-1: config 0 descriptor?? [ 1552.405040][T12713] usbhid 10-1:0.0: can't add hid device: -71 [ 1552.412275][T12713] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1552.497799][T12713] usb 10-1: USB disconnect, device number 12 [ 1552.727777][T15088] loop7: detected capacity change from 0 to 1024 [ 1552.808861][T15088] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1552.928175][T15088] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2652: Invalid block bitmap block 0 in block_group 0 [ 1552.958373][ T5853] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1552.969881][T15088] __quota_error: 22 callbacks suppressed [ 1552.970020][T15088] Quota error (device loop7): write_blk: dquota write failed [ 1552.984705][T15088] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1552.995386][T15088] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.2652: Failed to acquire dquot type 0 [ 1553.009071][T15088] EXT4-fs error (device loop7): ext4_free_blocks:6589: comm syz.7.2652: Freeing blocks not in datazone - block = 0, count = 4096 [ 1553.025655][T15088] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2652: Invalid inode bitmap blk 0 in block_group 0 [ 1553.039540][ T59] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 1553.049455][ T59] EXT4-fs error (device loop7): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 0 [ 1553.100681][T15088] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1553.121494][T15088] EXT4-fs (loop7): 1 orphan inode deleted [ 1553.129333][T15088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1553.159132][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 1553.175236][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.270335][ T5853] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1553.280078][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.288716][ T5853] usb 2-1: Product: syz [ 1553.293157][ T5853] usb 2-1: Manufacturer: syz [ 1553.298467][ T5853] usb 2-1: SerialNumber: syz [ 1553.363257][ T5853] usb 2-1: config 0 descriptor?? [ 1553.391693][ T5853] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1553.491524][T14793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.504167][T14793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.650593][ T5853] gspca_sunplus: reg_r err -32 [ 1553.732768][ T3418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.741284][ T3418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.803884][T10212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1553.814831][T12696] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1554.025506][T12696] usb 10-1: Using ep0 maxpacket: 16 [ 1554.097428][T12696] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1554.109780][T12696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1554.234212][T12696] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1554.244155][T12696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.252761][T12696] usb 10-1: Product: syz [ 1554.257348][T12696] usb 10-1: Manufacturer: syz [ 1554.262275][T12696] usb 10-1: SerialNumber: syz [ 1554.358070][T12696] usb 10-1: config 0 descriptor?? [ 1554.383994][T12696] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1554.409999][T12696] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1554.636436][ T5853] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 1555.042409][T12696] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1555.075736][T12696] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1555.114430][T12696] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1555.122442][T12696] em28xx 10-1:0.0: No AC97 audio processor [ 1555.352040][T12696] usb 10-1: USB disconnect, device number 13 [ 1555.358383][T15114] loop7: detected capacity change from 0 to 1024 [ 1555.362561][T15114] EXT4-fs: Ignoring removed orlov option [ 1555.366275][T12696] em28xx 10-1:0.0: Disconnecting em28xx [ 1555.402624][T12696] em28xx 10-1:0.0: Freeing device [ 1555.510342][T15114] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1555.556590][T15114] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1555.759968][T15114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1555.966963][T12696] usb 2-1: USB disconnect, device number 17 [ 1556.162894][T15123] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2662'. [ 1556.496470][ T5853] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1556.716248][ T5853] usb 10-1: Using ep0 maxpacket: 16 [ 1556.808669][ T5853] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.821038][ T5853] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.831573][ T5853] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1556.847531][ T5853] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1556.857862][ T5853] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.373192][ T5853] usb 10-1: config 0 descriptor?? [ 1557.814796][ T5853] usbhid 10-1:0.0: can't add hid device: -71 [ 1557.822284][ T5853] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1557.901514][ T5853] usb 10-1: USB disconnect, device number 14 [ 1557.982884][T15114] fscrypt (loop7): Error allocating 'xts(aes)' transform: -4 [ 1558.733883][T15143] batadv_slave_1: entered promiscuous mode [ 1558.917205][T15137] batadv_slave_1: left promiscuous mode [ 1561.370800][T10212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.766956][ T29] audit: type=1326 audit(1732306777.895:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15151 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1562.792586][ T29] audit: type=1326 audit(1732306777.915:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15151 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1562.817874][ T29] audit: type=1326 audit(1732306777.915:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15151 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1562.841971][ T29] audit: type=1326 audit(1732306777.915:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15151 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1562.866251][ T29] audit: type=1326 audit(1732306777.915:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15151 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1567.146497][T12696] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1567.727279][T12713] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1567.980975][T15176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2676'. [ 1568.028843][T12696] usb 2-1: Using ep0 maxpacket: 16 [ 1568.063021][T12696] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1568.075253][T12696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1568.456667][T12696] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1568.466630][T12696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.474902][T12696] usb 2-1: Product: syz [ 1568.479544][T12696] usb 2-1: Manufacturer: syz [ 1568.484380][T12696] usb 2-1: SerialNumber: syz [ 1568.732990][T12696] usb 2-1: config 0 descriptor?? [ 1568.854010][T12696] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1568.865773][T12696] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1568.866150][T12713] usb 8-1: Using ep0 maxpacket: 16 [ 1568.880523][T12713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.891910][T12713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.902421][T12713] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1568.915785][T12713] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1568.928047][T12713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.494957][T12696] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1569.584971][T12696] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1569.683691][T12696] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1569.691671][T12696] em28xx 2-1:0.0: No AC97 audio processor [ 1569.890090][T12713] usb 8-1: config 0 descriptor?? [ 1569.988169][T12696] usb 2-1: USB disconnect, device number 18 [ 1569.996132][T12696] em28xx 2-1:0.0: Disconnecting em28xx [ 1570.188949][T12696] em28xx 2-1:0.0: Freeing device [ 1570.814733][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1570.821780][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1571.356534][T12713] usbhid 8-1:0.0: can't add hid device: -71 [ 1571.363160][T12713] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1571.427465][T12713] usb 8-1: USB disconnect, device number 8 [ 1572.893927][T15197] Process accounting resumed [ 1573.185036][T15206] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1573.194473][T15206] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1573.253067][T15204] loop7: detected capacity change from 0 to 1024 [ 1573.311660][T15204] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1573.520696][T15204] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1574.516911][ T29] audit: type=1804 audit(1732306789.945:161): pid=15214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2691" name="/newroot/383/file0/bus" dev="loop7" ino=18 res=1 errno=0 [ 1575.059661][T12696] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1575.236732][T12696] usb 2-1: Using ep0 maxpacket: 16 [ 1575.307857][T12696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.319807][T12696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.330169][T12696] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1575.343492][T12696] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1575.352957][T12696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.722690][T12696] usb 2-1: config 0 descriptor?? [ 1576.104850][T10212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.470951][T15227] loop2: detected capacity change from 0 to 512 [ 1576.756677][T12696] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1576.764208][T12696] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1576.843048][T12696] koneplus 0003:1E7D:2E22.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 1576.867252][T15227] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1576.902332][T12696] koneplus 0003:1E7D:2E22.0006: couldn't init struct koneplus_device [ 1576.911129][T12696] koneplus 0003:1E7D:2E22.0006: couldn't install mouse [ 1576.941280][T12696] koneplus 0003:1E7D:2E22.0006: probe with driver koneplus failed with error -71 [ 1576.962705][T15227] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1576.972695][T15227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1576.988002][T12696] usb 2-1: USB disconnect, device number 19 [ 1577.059375][T15227] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.2700: Directory hole found for htree index block 0 [ 1577.091723][T15227] EXT4-fs (loop2): Remounting filesystem read-only [ 1577.223995][T14871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.996671][T15240] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1578.006164][T15240] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1578.302794][T15244] cgroup: noprefix used incorrectly [ 1580.184224][ T29] audit: type=1326 audit(1732306796.015:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1580.438475][ T29] audit: type=1326 audit(1732306796.165:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1580.461648][ T29] audit: type=1326 audit(1732306796.245:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1580.484843][ T29] audit: type=1326 audit(1732306796.245:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1580.993538][ T29] audit: type=1326 audit(1732306796.375:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1581.025024][ T29] audit: type=1326 audit(1732306796.375:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1581.051233][ T29] audit: type=1326 audit(1732306796.385:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1581.074551][ T29] audit: type=1326 audit(1732306796.385:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1582.706688][T12713] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1582.776849][T15276] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1582.786674][T15276] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1582.896753][T12713] usb 10-1: Using ep0 maxpacket: 16 [ 1583.187723][T12713] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1583.201052][T12713] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1583.211568][T12713] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1583.225098][T12713] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1583.234878][T12713] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.319829][T12713] usb 10-1: config 0 descriptor?? [ 1583.842826][T12713] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 1583.850617][T12713] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 1583.927806][T12713] koneplus 0003:1E7D:2E22.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.9-1/input0 [ 1584.127682][T12713] koneplus 0003:1E7D:2E22.0007: couldn't init struct koneplus_device [ 1584.139443][T12713] koneplus 0003:1E7D:2E22.0007: couldn't install mouse [ 1584.201801][T12713] koneplus 0003:1E7D:2E22.0007: probe with driver koneplus failed with error -71 [ 1584.242516][T12713] usb 10-1: USB disconnect, device number 15 [ 1584.839846][T15297] loop2: detected capacity change from 0 to 512 [ 1585.057510][T15297] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.2725: casefold flag without casefold feature [ 1585.147957][T15297] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2725: couldn't read orphan inode 15 (err -117) [ 1585.212353][T15297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1587.617971][T15310] loop9: detected capacity change from 0 to 16 [ 1587.779212][T15310] erofs (device loop9): mounted with root inode @ nid 36. [ 1587.957999][T15305] syz.9.2727: attempt to access beyond end of device [ 1587.957999][T15305] loop9: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1587.983986][T15305] erofs (device loop9): read error -5 @ 123 of nid 36 [ 1588.823367][T14871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.208262][T15327] overlayfs: missing 'lowerdir' [ 1590.345470][T15329] loop1: detected capacity change from 0 to 256 [ 1590.543167][T12696] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1590.697782][T12696] usb 8-1: Using ep0 maxpacket: 16 [ 1590.814619][T15334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2740'. [ 1591.123627][T12696] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.135421][T12696] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.145660][T12696] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1591.170575][T12696] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1591.180141][T12696] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.198366][T12696] usb 8-1: config 0 descriptor?? [ 1591.372624][T15329] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1591.689291][T12696] koneplus 0003:1E7D:2E22.0008: unknown main item tag 0x0 [ 1591.696930][T12696] koneplus 0003:1E7D:2E22.0008: unknown main item tag 0x0 [ 1591.796361][T12696] koneplus 0003:1E7D:2E22.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.7-1/input0 [ 1591.919759][T12696] koneplus 0003:1E7D:2E22.0008: couldn't init struct koneplus_device [ 1591.928452][T12696] koneplus 0003:1E7D:2E22.0008: couldn't install mouse [ 1592.010816][T12696] koneplus 0003:1E7D:2E22.0008: probe with driver koneplus failed with error -71 [ 1592.160117][T12696] usb 8-1: USB disconnect, device number 9 [ 1593.223224][T15352] loop1: detected capacity change from 0 to 2048 [ 1593.371509][T15357] overlayfs: missing 'lowerdir' [ 1593.833609][T15355] lo speed is unknown, defaulting to 1000 [ 1594.198144][T15355] lo speed is unknown, defaulting to 1000 [ 1594.557314][T15355] vcan0 speed is unknown, defaulting to 1000 [ 1595.568796][T15352] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 1596.344447][T15370] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2751'. [ 1596.528404][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2753'. [ 1597.066564][ T29] audit: type=1326 audit(1732306812.885:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.8.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc97e819 code=0x7ffc0000 [ 1597.593765][ T29] audit: type=1326 audit(1732306812.965:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.8.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc97e819 code=0x7ffc0000 [ 1597.625308][ T29] audit: type=1326 audit(1732306813.055:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.8.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33dc97e819 code=0x7ffc0000 [ 1597.651132][ T29] audit: type=1326 audit(1732306813.055:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.8.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc97e819 code=0x7ffc0000 [ 1597.674662][ T29] audit: type=1326 audit(1732306813.055:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.8.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc97e819 code=0x7ffc0000 [ 1597.698112][ T29] audit: type=1326 audit(1732306813.085:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.8.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f33dc97e819 code=0x7ffc0000 [ 1597.729154][ T29] audit: type=1326 audit(1732306813.085:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.8.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc97e819 code=0x7ffc0000 [ 1597.754283][ T29] audit: type=1326 audit(1732306813.085:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.8.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc97e819 code=0x7ffc0000 [ 1598.217287][T12713] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1598.580271][T15388] vlan1: entered promiscuous mode [ 1598.593804][T15388] vlan1: left promiscuous mode [ 1598.851811][T12696] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1598.853517][T12713] usb 2-1: Using ep0 maxpacket: 16 [ 1599.497537][T12713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.508971][T12713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.520256][T12713] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1599.533602][T12713] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1599.547767][T12713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.668948][T12713] usb 2-1: config 0 descriptor?? [ 1599.910156][T12696] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1599.922592][T12696] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1599.934318][T12696] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1599.947722][T12696] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1599.966625][T12696] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.032443][T12696] usb 8-1: config 0 descriptor?? [ 1600.148907][T15382] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1600.406003][T12713] koneplus 0003:1E7D:2E22.0009: unknown main item tag 0x0 [ 1600.413529][T12713] koneplus 0003:1E7D:2E22.0009: unknown main item tag 0x0 [ 1600.501554][T12713] koneplus 0003:1E7D:2E22.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 1600.518372][T15392] overlayfs: missing 'lowerdir' [ 1600.562914][T12713] koneplus 0003:1E7D:2E22.0009: couldn't init struct koneplus_device [ 1600.575432][T12713] koneplus 0003:1E7D:2E22.0009: couldn't install mouse [ 1600.615531][T12713] koneplus 0003:1E7D:2E22.0009: probe with driver koneplus failed with error -71 [ 1600.825640][T12713] usb 2-1: USB disconnect, device number 20 [ 1601.002526][T15397] loop9: detected capacity change from 0 to 512 [ 1601.126560][T15397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1601.135564][T15397] EXT4-fs (loop9): blocks per group (71) and clusters per group (20800) inconsistent [ 1601.463292][T15382] input: syz1 as /devices/virtual/input/input21 [ 1601.558316][T12696] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 1601.618751][T12696] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 1602.289163][T15399] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2763'. [ 1602.959489][T12696] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1603.629701][T12696] usb 8-1: USB disconnect, device number 10 [ 1603.725139][T15410] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2765'. [ 1606.939734][T15441] Process accounting resumed [ 1607.827732][ T29] audit: type=1326 audit(1732306823.665:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.7.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1607.860185][T15450] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2775'. [ 1608.038889][ T29] audit: type=1326 audit(1732306823.685:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.7.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1608.065062][ T29] audit: type=1326 audit(1732306823.695:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.7.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1608.088650][ T29] audit: type=1326 audit(1732306823.725:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.7.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1608.111521][ T29] audit: type=1326 audit(1732306823.725:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.7.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1608.134462][ T29] audit: type=1326 audit(1732306823.735:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.7.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1608.160238][ T29] audit: type=1326 audit(1732306823.735:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.7.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d7e819 code=0x7ffc0000 [ 1608.619462][ T9736] Bluetooth: hci1: command 0x0406 tx timeout [ 1608.630406][T12713] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1608.636945][T12713] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1610.657027][T15475] loop2: detected capacity change from 0 to 512 [ 1610.787413][T15475] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1611.215585][T15484] Process accounting resumed [ 1611.309368][T12713] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1611.315715][T12713] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 1611.466230][ T9736] Bluetooth: hci6: command 0x0c1a tx timeout [ 1611.527984][T15475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 1611.838361][T15475] System zones: 1-12 [ 1612.193054][T15496] netlink: 248 bytes leftover after parsing attributes in process `syz.8.2788'. [ 1612.277511][T15475] EXT4-fs (loop2): 1 truncate cleaned up [ 1612.285017][T15475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1613.107035][T15500] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2789'. [ 1613.584862][T14871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1615.846043][ T9736] Bluetooth: hci2: command 0x0c1a tx timeout [ 1616.440874][ T7763] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1616.449485][T12713] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1616.456197][T12713] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1617.663895][ T7763] usb 10-1: Using ep0 maxpacket: 16 [ 1617.712295][ T7763] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.724515][ T7763] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1617.731726][ T7763] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1617.744516][ T7763] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.908689][ T7763] usb 10-1: config 0 descriptor?? [ 1618.656963][ T7763] usbhid 10-1:0.0: can't add hid device: -71 [ 1618.664092][ T7763] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1618.852139][T15526] Process accounting resumed [ 1619.224446][ T7763] usb 10-1: USB disconnect, device number 16 [ 1620.238852][T15545] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2803'. [ 1620.475368][ T7763] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1620.732234][ T7763] usb 2-1: Using ep0 maxpacket: 16 [ 1620.932298][ T7763] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1620.944635][ T7763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.953648][ T7763] usb 2-1: Product: syz [ 1620.958175][ T7763] usb 2-1: Manufacturer: syz [ 1620.963017][ T7763] usb 2-1: SerialNumber: syz [ 1621.930803][ T7763] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1621.937518][ T7763] r8152-cfgselector 2-1: config 0 descriptor?? [ 1623.095795][ T7763] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1623.102886][ T7763] r8152-cfgselector 2-1: bad CDC descriptors [ 1623.125681][ T7763] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 1623.154165][T15562] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2809'. [ 1624.166222][ T29] audit: type=1326 audit(1732306839.975:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1624.189493][ T29] audit: type=1326 audit(1732306839.975:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1624.212705][ T29] audit: type=1326 audit(1732306839.975:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828177e819 code=0x7ffc0000 [ 1624.418337][T15575] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2813'. [ 1626.529562][T15587] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2817'. [ 1627.551173][T12696] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1628.148126][ T29] audit: type=1326 audit(1732306843.855:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0476d7e819 code=0x7ffc0000 [ 1628.172276][ T29] audit: type=1326 audit(1732306843.865:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0476d7e819 code=0x7ffc0000 [ 1628.199766][ T29] audit: type=1326 audit(1732306843.865:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0476d7e819 code=0x7ffc0000 [ 1628.223398][ T29] audit: type=1326 audit(1732306843.865:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0476d7e819 code=0x7ffc0000 [ 1628.246823][ T29] audit: type=1326 audit(1732306843.865:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0476d7e819 code=0x7ffc0000 [ 1628.270826][ T29] audit: type=1326 audit(1732306843.895:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0476d7e819 code=0x7ffc0000 [ 1628.294462][ T29] audit: type=1326 audit(1732306843.895:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0476d7e819 code=0x7ffc0000 [ 1628.551594][T15614] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2828'. [ 1628.956868][T12696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.969197][T12696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.980433][T12696] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1628.990424][T12696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.040342][T12696] usb 2-1: config 0 descriptor?? [ 1629.666224][T15624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.728162][T15624] batadv_slave_0: entered promiscuous mode [ 1629.749098][T15626] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2831'. [ 1630.113703][T15628] loop8: detected capacity change from 0 to 1024 [ 1630.124478][T15628] EXT4-fs: Ignoring removed orlov option [ 1630.176879][T15628] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1630.190155][T15628] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1630.330349][T12696] saitek 0003:06A3:0621.000B: unbalanced collection at end of report description [ 1630.348903][T12696] saitek 0003:06A3:0621.000B: parse failed [ 1630.355474][T12696] saitek 0003:06A3:0621.000B: probe with driver saitek failed with error -22 [ 1630.447706][ T7763] usb 2-1: USB disconnect, device number 22 [ 1630.490823][T15628] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1630.847487][T15642] loop2: detected capacity change from 0 to 256 [ 1630.957262][T15628] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))" [ 1631.026078][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1631.026159][ T29] audit: type=1800 audit(1732306846.805:197): pid=15628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2835" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 1631.674637][T15646] ===================================================== [ 1631.681998][T15646] BUG: KMSAN: uninit-value in aes_encrypt+0x15cc/0x1db0 [ 1631.689125][T15646] aes_encrypt+0x15cc/0x1db0 [ 1631.693891][T15646] aesti_encrypt+0x7d/0xf0 [ 1631.698505][T15646] crypto_ecb_encrypt2+0x18a/0x300 [ 1631.703847][T15646] crypto_lskcipher_crypt_sg+0x36b/0x7f0 [ 1631.709703][T15646] crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 1631.716088][T15646] crypto_skcipher_encrypt+0x119/0x1e0 [ 1631.721730][T15646] xts_encrypt+0x3c4/0x550 [ 1631.726315][T15646] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 1631.731955][T15646] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 1631.737589][T15646] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 1631.744019][T15646] ext4_bio_write_folio+0x1377/0x2e50 [ 1631.749588][T15646] mpage_submit_folio+0x360/0x490 [ 1631.754836][T15646] mpage_process_page_bufs+0xb92/0xe30 [ 1631.760510][T15646] mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 1631.766743][T15646] ext4_do_writepages+0x1117/0x62c0 [ 1631.772135][T15646] ext4_writepages+0x312/0x830 [ 1631.777107][T15646] do_writepages+0x427/0xc30 [ 1631.781906][T15646] file_write_and_wait_range+0x6f2/0x7b0 [ 1631.787730][T15646] generic_buffers_fsync_noflush+0x7e/0x3c0 [ 1631.793822][T15646] ext4_sync_file+0x5ae/0x1390 [ 1631.798787][T15646] vfs_fsync_range+0x1f9/0x260 [ 1631.803749][T15646] ext4_buffered_write_iter+0x9a7/0xaa0 [ 1631.809512][T15646] ext4_file_write_iter+0x266/0x3820 [ 1631.814996][T15646] do_iter_readv_writev+0x88a/0xa30 [ 1631.820388][T15646] vfs_writev+0x56a/0x14f0 [ 1631.825010][T15646] __se_sys_pwritev2+0x262/0x460 [ 1631.830229][T15646] __x64_sys_pwritev2+0x11f/0x1a0 [ 1631.835452][T15646] x64_sys_call+0x368c/0x3c30 [ 1631.840339][T15646] do_syscall_64+0xcd/0x1e0 [ 1631.845058][T15646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.851148][T15646] [ 1631.853569][T15646] Uninit was stored to memory at: [ 1631.858820][T15646] xts_xor_tweak+0x4ae/0xbf0 [ 1631.863578][T15646] xts_encrypt+0x296/0x550 [ 1631.868165][T15646] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 1631.873798][T15646] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 1631.879429][T15646] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 1631.885854][T15646] ext4_bio_write_folio+0x1377/0x2e50 [ 1631.891421][T15646] mpage_submit_folio+0x360/0x490 [ 1631.896664][T15646] mpage_process_page_bufs+0xb92/0xe30 [ 1631.902337][T15646] mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 1631.908545][T15646] ext4_do_writepages+0x1117/0x62c0 [ 1631.913942][T15646] ext4_writepages+0x312/0x830 [ 1631.918915][T15646] do_writepages+0x427/0xc30 [ 1631.923708][T15646] file_write_and_wait_range+0x6f2/0x7b0 [ 1631.929524][T15646] generic_buffers_fsync_noflush+0x7e/0x3c0 [ 1631.935632][T15646] ext4_sync_file+0x5ae/0x1390 [ 1631.940609][T15646] vfs_fsync_range+0x1f9/0x260 [ 1631.945565][T15646] ext4_buffered_write_iter+0x9a7/0xaa0 [ 1631.951328][T15646] ext4_file_write_iter+0x266/0x3820 [ 1631.956805][T15646] do_iter_readv_writev+0x88a/0xa30 [ 1631.962195][T15646] vfs_writev+0x56a/0x14f0 [ 1631.966818][T15646] __se_sys_pwritev2+0x262/0x460 [ 1631.971949][T15646] __x64_sys_pwritev2+0x11f/0x1a0 [ 1631.977167][T15646] x64_sys_call+0x368c/0x3c30 [ 1631.982048][T15646] do_syscall_64+0xcd/0x1e0 [ 1631.986757][T15646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.992849][T15646] [ 1631.995264][T15646] Uninit was created at: [ 1631.999741][T15646] __alloc_pages_noprof+0x9a7/0xe00 [ 1632.005112][T15646] alloc_pages_mpol_noprof+0x299/0x990 [ 1632.010798][T15646] folio_alloc_noprof+0x1db/0x310 [ 1632.016041][T15646] filemap_alloc_folio_noprof+0xa6/0x440 [ 1632.021862][T15646] __filemap_get_folio+0xac4/0x1550 [ 1632.027272][T15646] ext4_write_begin+0x3e5/0x23d0 [ 1632.032465][T15646] generic_perform_write+0x4d8/0x1080 [ 1632.038065][T15646] ext4_buffered_write_iter+0x561/0xaa0 [ 1632.043824][T15646] ext4_file_write_iter+0x266/0x3820 [ 1632.049321][T15646] do_iter_readv_writev+0x88a/0xa30 [ 1632.054712][T15646] vfs_writev+0x56a/0x14f0 [ 1632.059333][T15646] __se_sys_pwritev2+0x262/0x460 [ 1632.064469][T15646] __x64_sys_pwritev2+0x11f/0x1a0 [ 1632.069698][T15646] x64_sys_call+0x368c/0x3c30 [ 1632.074588][T15646] do_syscall_64+0xcd/0x1e0 [ 1632.079309][T15646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.085465][T15646] [ 1632.087959][T15646] CPU: 0 UID: 0 PID: 15646 Comm: syz.8.2835 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 1632.098590][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1632.108801][T15646] ===================================================== [ 1632.115845][T15646] Disabling lock debugging due to kernel taint [ 1632.122128][T15646] Kernel panic - not syncing: kmsan.panic set ... [ 1632.128689][T15646] CPU: 0 UID: 0 PID: 15646 Comm: syz.8.2835 Tainted: G B 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 1632.140814][T15646] Tainted: [B]=BAD_PAGE [ 1632.145079][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1632.155295][T15646] Call Trace: [ 1632.158694][T15646] [ 1632.161744][T15646] dump_stack_lvl+0x216/0x2d0 [ 1632.166649][T15646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1632.172698][T15646] dump_stack+0x1e/0x30 [ 1632.177082][T15646] panic+0x4e2/0xcf0 [ 1632.181204][T15646] ? kmsan_get_metadata+0x101/0x1c0 [ 1632.186669][T15646] kmsan_report+0x2c7/0x2d0 [ 1632.191401][T15646] ? is_module_text_address+0x1b3/0x250 [ 1632.197186][T15646] ? __msan_warning+0x95/0x120 [ 1632.202177][T15646] ? aes_encrypt+0x15cc/0x1db0 [ 1632.207133][T15646] ? aesti_encrypt+0x7d/0xf0 [ 1632.211931][T15646] ? crypto_ecb_encrypt2+0x18a/0x300 [ 1632.217445][T15646] ? crypto_lskcipher_crypt_sg+0x36b/0x7f0 [ 1632.223516][T15646] ? crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 1632.229618][T15646] ? crypto_skcipher_encrypt+0x119/0x1e0 [ 1632.235451][T15646] ? xts_encrypt+0x3c4/0x550 [ 1632.240235][T15646] ? crypto_skcipher_encrypt+0x1a0/0x1e0 [ 1632.246066][T15646] ? fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 1632.251890][T15646] ? fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 1632.258497][T15646] ? ext4_bio_write_folio+0x1377/0x2e50 [ 1632.264245][T15646] ? mpage_submit_folio+0x360/0x490 [ 1632.269659][T15646] ? mpage_process_page_bufs+0xb92/0xe30 [ 1632.275545][T15646] ? mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 1632.281968][T15646] ? ext4_do_writepages+0x1117/0x62c0 [ 1632.287559][T15646] ? ext4_writepages+0x312/0x830 [ 1632.292719][T15646] ? do_writepages+0x427/0xc30 [ 1632.297701][T15646] ? file_write_and_wait_range+0x6f2/0x7b0 [ 1632.303700][T15646] ? generic_buffers_fsync_noflush+0x7e/0x3c0 [ 1632.309978][T15646] ? ext4_sync_file+0x5ae/0x1390 [ 1632.315122][T15646] ? vfs_fsync_range+0x1f9/0x260 [ 1632.320273][T15646] ? ext4_buffered_write_iter+0x9a7/0xaa0 [ 1632.326212][T15646] ? ext4_file_write_iter+0x266/0x3820 [ 1632.331883][T15646] ? do_iter_readv_writev+0x88a/0xa30 [ 1632.337458][T15646] ? vfs_writev+0x56a/0x14f0 [ 1632.342280][T15646] ? __se_sys_pwritev2+0x262/0x460 [ 1632.347595][T15646] ? __x64_sys_pwritev2+0x11f/0x1a0 [ 1632.352992][T15646] ? x64_sys_call+0x368c/0x3c30 [ 1632.358056][T15646] ? do_syscall_64+0xcd/0x1e0 [ 1632.362960][T15646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.369251][T15646] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1632.375271][T15646] ? stack_depot_save_flags+0x66d/0x6e0 [ 1632.381022][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.386479][T15646] ? stack_depot_save+0x12/0x20 [ 1632.391521][T15646] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 1632.397536][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.402947][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.408361][T15646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1632.414401][T15646] __msan_warning+0x95/0x120 [ 1632.419192][T15646] aes_encrypt+0x15cc/0x1db0 [ 1632.423978][T15646] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1632.429992][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.435416][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.440835][T15646] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1632.447403][T15646] aesti_encrypt+0x7d/0xf0 [ 1632.452039][T15646] crypto_ecb_encrypt2+0x18a/0x300 [ 1632.457391][T15646] ? __pfx_aesti_encrypt+0x10/0x10 [ 1632.462729][T15646] crypto_lskcipher_crypt_sg+0x36b/0x7f0 [ 1632.468607][T15646] ? xts_xor_tweak+0x658/0xbf0 [ 1632.473556][T15646] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 1632.479441][T15646] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 1632.485316][T15646] crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 1632.491187][T15646] crypto_skcipher_encrypt+0x119/0x1e0 [ 1632.496847][T15646] xts_encrypt+0x3c4/0x550 [ 1632.501444][T15646] ? __pfx_xts_encrypt+0x10/0x10 [ 1632.506564][T15646] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 1632.512216][T15646] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 1632.517896][T15646] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 1632.524360][T15646] ext4_bio_write_folio+0x1377/0x2e50 [ 1632.529969][T15646] mpage_submit_folio+0x360/0x490 [ 1632.535229][T15646] mpage_process_page_bufs+0xb92/0xe30 [ 1632.540923][T15646] ? kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 1632.546974][T15646] mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 1632.553184][T15646] ? event_sched_in+0xa41/0x1210 [ 1632.558355][T15646] ? kmem_cache_alloc_noprof+0x67/0xb20 [ 1632.564108][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.569533][T15646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1632.575578][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.580993][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.586419][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.591837][T15646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1632.597902][T15646] ext4_do_writepages+0x1117/0x62c0 [ 1632.603315][T15646] ? __es_insert_extent+0x235d/0x2da0 [ 1632.608897][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.614309][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.619721][T15646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1632.625752][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.631181][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.636604][T15646] ? kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 1632.642667][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.648083][T15646] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1632.654633][T15646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1632.660667][T15646] ext4_writepages+0x312/0x830 [ 1632.665661][T15646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1632.671692][T15646] ? __pfx_ext4_writepages+0x10/0x10 [ 1632.677196][T15646] do_writepages+0x427/0xc30 [ 1632.682006][T15646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1632.688106][T15646] ? _raw_spin_unlock+0x30/0x50 [ 1632.693184][T15646] file_write_and_wait_range+0x6f2/0x7b0 [ 1632.699079][T15646] generic_buffers_fsync_noflush+0x7e/0x3c0 [ 1632.705192][T15646] ext4_sync_file+0x5ae/0x1390 [ 1632.710180][T15646] ? __pfx_ext4_sync_file+0x10/0x10 [ 1632.715590][T15646] ? __pfx_ext4_sync_file+0x10/0x10 [ 1632.720994][T15646] vfs_fsync_range+0x1f9/0x260 [ 1632.725962][T15646] ext4_buffered_write_iter+0x9a7/0xaa0 [ 1632.731725][T15646] ext4_file_write_iter+0x266/0x3820 [ 1632.737212][T15646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1632.743260][T15646] ? filter_irq_stacks+0x164/0x1a0 [ 1632.748609][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.754033][T15646] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1632.759954][T15646] do_iter_readv_writev+0x88a/0xa30 [ 1632.765367][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.770784][T15646] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1632.776707][T15646] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1632.782627][T15646] vfs_writev+0x56a/0x14f0 [ 1632.787258][T15646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1632.793306][T15646] ? __rcu_read_unlock+0x7b/0xe0 [ 1632.798475][T15646] ? kmsan_get_metadata+0x13e/0x1c0 [ 1632.803887][T15646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1632.809924][T15646] __se_sys_pwritev2+0x262/0x460 [ 1632.815072][T15646] __x64_sys_pwritev2+0x11f/0x1a0 [ 1632.820320][T15646] x64_sys_call+0x368c/0x3c30 [ 1632.825210][T15646] do_syscall_64+0xcd/0x1e0 [ 1632.829932][T15646] ? clear_bhb_loop+0x25/0x80 [ 1632.834809][T15646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.840917][T15646] RIP: 0033:0x7f33dc97e819 [ 1632.845487][T15646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1632.865304][T15646] RSP: 002b:00007f33dd7f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1632.873921][T15646] RAX: ffffffffffffffda RBX: 00007f33dcb36160 RCX: 00007f33dc97e819 [ 1632.882065][T15646] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 1632.890189][T15646] RBP: 00007f33dc9f175e R08: 0000000000000000 R09: 0000000000000003 [ 1632.898333][T15646] R10: 0000000000006c00 R11: 0000000000000246 R12: 0000000000000000 [ 1632.906453][T15646] R13: 0000000000000000 R14: 00007f33dcb36160 R15: 00007ffce3eb2de8 [ 1632.914603][T15646] [ 1632.918029][T15646] Kernel Offset: disabled [ 1632.922418][T15646] Rebooting in 86400 seconds..