last executing test programs: 22m49.356678459s ago: executing program 32 (id=38): syz_emit_ethernet(0x86, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x17, 0x4, 0x0, 0x3, 0x1fe, 0x66, 0x2, 0x1, 0x33, 0x401, @local, @multicast2, {[@cipso={0x86, 0x43, 0x1, [{0x7, 0x2}, {0x7, 0x5, "771a53"}, {0x6, 0xa, "54ae73f08a6dd74c"}, {0x0, 0x12, "83602eb9c5dae56c535f3f20b7d4a9b3"}, {0x0, 0xf, "7cff6657b8ccb4d0b183fe4311"}, {0x5, 0x9, "fd07098aeb9f83"}, {0x2, 0x2}]}, @rr={0x7, 0x3, 0x80}]}}}}}}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x800448d5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0xc, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @multicast2}, {0x0, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_LABELS_MASK={0x1c, 0x17, [0x4, 0xfff, 0x2a, 0x6, 0x6, 0x7]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x68}}, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x3fffffffc00, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r6}}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}, @in={0x2, 0x4e22, @multicast2}], 0x2c) listen(r8, 0x3ff) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0xc000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 17m59.41542764s ago: executing program 33 (id=504): syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], @ndisc_rs}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r1, 0x1, 0x30}, &(0x7f00000002c0)=0x11) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x4000000020001) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000c3000000040000000200000030400000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0100000002000000000000000c00"/27], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m12.581105237s ago: executing program 34 (id=594): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], '\t'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "e10418"}]}, {0x0, [0x0, 0x0, 0x2e, 0x61, 0x61, 0x30, 0x61]}}, &(0x7f0000000900)=""/179, 0x4d, 0xb3, 0x1}, 0x28) 13m36.404882564s ago: executing program 35 (id=1697): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES64=r0], 0xc4}}, 0x4050890) 11m57.557447085s ago: executing program 36 (id=2369): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 11m24.589336001s ago: executing program 37 (id=2542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x103501, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 10m35.029794574s ago: executing program 38 (id=2779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x2, 0x9, 0x81, 0x5, 0x0, 0x9, 0x6, 0x8, 0x0, 0x4, 0x9, 0x48, 0x5, 0xd, 0x2, 0x9}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x6, 0xe4, 0x62, 0x4, 0x78, 0x7, 0x0, 0x1, 0x2, 0xfe, 0x64, 0x2, 0xb6, 0x6, 0x0, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m4.106287903s ago: executing program 1 (id=2935): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 10m3.736454982s ago: executing program 1 (id=2937): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x1a, 0x1, 0x22}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1a}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 10m3.381732127s ago: executing program 1 (id=2940): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x8, {0x2, 0x0, 0x2, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="5237af9d", 0x4}], 0x1, 0x0, 0x0, 0x40000}, 0x4040881) ioctl(r2, 0x2275, &(0x7f0000000000)) 10m3.178001757s ago: executing program 1 (id=2942): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@acl}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r0, &(0x7f0000000340)="be", 0x1) 10m2.663154282s ago: executing program 1 (id=2943): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x80, 0x8) 9m59.514736665s ago: executing program 1 (id=2955): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m58.908736561s ago: executing program 39 (id=2955): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m33.900971564s ago: executing program 6 (id=3101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x5, 0x8, 0x40}, 0x637, 0x1, 0x10, 0x7, 0x101, 0x8, 0x3, 0x14, 0x1, 0x10, {0x8, 0xfff, 0xad6e, 0x3, 0x0, 0x8f36}}}}]}, 0x78}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0xe}, {0xe, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 9m33.655752069s ago: executing program 6 (id=3102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x6, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 9m32.656717708s ago: executing program 6 (id=3105): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) r2 = epoll_create1(0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x2005}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002140)=0x1) 9m32.301981909s ago: executing program 6 (id=3110): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22) creat(&(0x7f00000001c0)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 9m29.352703644s ago: executing program 6 (id=3122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 9m27.408051929s ago: executing program 6 (id=3131): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m26.915277493s ago: executing program 40 (id=3131): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m26.616850735s ago: executing program 5 (id=3883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 6m24.71399799s ago: executing program 5 (id=3888): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x8, 0x80, 0x80}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x4, 0x661, &(0x7f0000000dc0)="$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") r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17d3, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}}, 0x0) 6m23.727646774s ago: executing program 5 (id=3892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ff9000/0x4000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r4, 0xc048aec8, &(0x7f00000000c0)={[{0x6, 0x9, 0x7, 0x2, 0xad, 0x9, 0x6, 0x7, 0x4, 0x1, 0xd, 0x36}, {0x9fe8, 0x9, 0x2, 0xeb, 0xf7, 0xa, 0x10, 0x80, 0x1, 0xb1, 0x5, 0x2, 0xf}, {0xbd, 0xb, 0x2, 0x3, 0x81, 0x4, 0x7, 0x0, 0x3, 0x6, 0x4, 0x90}], 0x9}) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m22.412820031s ago: executing program 5 (id=3894): socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, 0x0, 0x20000040) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m21.24771646s ago: executing program 5 (id=3896): socket$inet6(0xa, 0x80001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001fa40)={0x28, r4, 0x1, 0x0, 0xfffffffe, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 6m18.84867757s ago: executing program 5 (id=3902): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00'], 0x24}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7736, 0x80, 0x0, 0x26d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x24, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m3.421987782s ago: executing program 41 (id=3902): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00'], 0x24}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7736, 0x80, 0x0, 0x26d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x24, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4m7.352689027s ago: executing program 3 (id=4196): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x4e, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={r4, r5, 0x1, 0x0, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) 4m4.768944762s ago: executing program 3 (id=4201): socket(0x2, 0x80805, 0x0) memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = dup(r3) getpeername$packet(r4, 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x11, &(0x7f00000002c0), 0x2) 4m2.459019852s ago: executing program 3 (id=4207): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x6657, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000080)={0x40000009, 0xe74e, 0x80000006, 0x10009, 0x9, 0xed}) 4m1.349129337s ago: executing program 3 (id=4209): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x2d, 0x1, 0x1, "1c13ebdaf2f293a684a1a058e8edb14399fcc100e267131b00", 0x494e4f4b}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x4000) 4m0.366379842s ago: executing program 3 (id=4212): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x8}, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x840000000002, 0x3, 0xff) 3m44.868198785s ago: executing program 42 (id=4212): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x8}, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x840000000002, 0x3, 0xff) 3m17.59518988s ago: executing program 8 (id=4292): socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 3m13.778829642s ago: executing program 8 (id=4295): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$poke(0x4, 0x0, &(0x7f00000001c0), 0x8) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x10800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3m11.12041564s ago: executing program 8 (id=4301): syz_emit_ethernet(0xb8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000080000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800002254d1327b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000bfe8bdb9d4a01662e4e2dfda633b06132298ffd8b5037ca9d9b857aa7eabfd7a6e7205bf1e496c297690879eded34492494ea39cb22a2da898b6ffc39b024e06"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x110) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) unshare(0x6020400) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2400c0, 0x0) 3m9.858265163s ago: executing program 8 (id=4303): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f00000000c0)) openat$vcsu(0xffffffffffffff9c, 0x0, 0x101000, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) ptrace(0x10, r3) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) ptrace$getregset(0x4204, r3, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) 3m8.31154097s ago: executing program 8 (id=4305): getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@ax25={{0x3, @null}, [@null, @null, @null, @netrom, @remote, @bcast, @netrom]}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$IORING_OFF_SQES(&(0x7f00004b6000/0x1000)=nil, 0x1000, 0x3000002, 0x2010, r2, 0x10000000) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x250100, 0x2) write$FUSE_ATTR(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 3m6.707868908s ago: executing program 8 (id=4309): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @private2, 0x3}]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r3, 0x7}, 0x8) r4 = open(0x0, 0x1850c2, 0x14c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x5) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, 0x0) ftruncate(r4, 0x200004) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000340)={0xeeee8000, 0x0, 0x59, 0x0, 0x80000000}) 2m50.834746933s ago: executing program 43 (id=4309): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @private2, 0x3}]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r3, 0x7}, 0x8) r4 = open(0x0, 0x1850c2, 0x14c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x5) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, 0x0) ftruncate(r4, 0x200004) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000340)={0xeeee8000, 0x0, 0x59, 0x0, 0x80000000}) 2m5.222232232s ago: executing program 9 (id=4428): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() socket$unix(0x1, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x9154}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 2m3.795440608s ago: executing program 9 (id=4435): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) fsopen(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') read$FUSE(r2, &(0x7f0000000600)={0x2020}, 0x2020) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 1m56.882693961s ago: executing program 9 (id=4444): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'team0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000004c0)={0x4, 0xfffffffc, 0x8, 0x3, 0x100, 0x0}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf4, &(0x7f0000000e00)="$eJzs3V2IXFcBAOAzszv7k6RmUhO7prFNrLb1p5tmd40/wSYlQTA0RXwpBF9CmtZgjGAFtRRM8uSbLSWCT1bxqS+limBfJPTJl4INFKH4UH3wwRCxIKLRZMrOnjM7czKTO7M7O7O7831w59x7z7n3nHvnzp37e04ARla5/rmwMFMK4fIbLx/7+4N/m14cc7iRolr/HG8aqoQQSnF4PJvfe2NL4c33XzjdLiyFufpnGg5PXm9MuzWEcCHsDVdCNey+fPWlt+aeOHHx+KV9b7966NraLD0AAIyWr105tLDrL3+8d8eN1+47EibT6MWe+vF5NY7YFo/7j8QD/3T8X45haXJ5nqWm+GQitE43HrvydGu6sTbpmvOpZOnGs/Qp74ks/0qHdJPhzvmPNY1rt9ywkaXtuBpK5dmW4XJ5dnbpnDzUz+snSrPnz5575rkhFRTou3/dH0LY29QdvdQ6vN66wyuetrRWZaofW3SRrjbsdbdRuyODy+tGbcnQl3lAXW37sPdAAEvy+4W3uZBfWVidxtzGu8v/+uPl9tNDHwx6++8p/4kh5x9GPP/8YiWs0mb9/0rLlX5H2+Jwfh8hf36p8++vnM25dWx+P6LSZTk73UfYKPcXOpVzbMDlWKlO5c+3i83qyzFM6+GxLL7595N/pxvlOwba+09+/V+n061ZV+nHfELLcGU186oNef8DrF/5c3O1dH80yp/ry+MnC+KnCuKnC+K3FMRvLYiHUfab7/0kvFhaPs/Pz+l7vR6errPdFcMP9Vie/Hpkr/nnz/32arX5u0TPRvK7U0+d+cLTJ68uPf9famz/t+L2nk43qvG3dSUmSNcL8+vqjWf/q635lDukuzsrz11t0tf7d7amK+1cnk9o2s/cVo6Z1um2d0q3pzVdNUs3HbuprLz58cmWbLp0/JH2q2l9jWfLW8mWYyIrR9qv7IhhXg5YibQ9dnr+P22fM6FSeubsuTOPxuG0nf5hrDK5OP7AgMsNrF637//MhNb3f7Y1xlfKzfuF7cvjS0v7hdfj/FrHzzXyaR0/H4fT/9w3x6br42dPf+fc0/1ffBhpz/3w+W+dOnfuzHd77Fk8Hu19qjv1zE+H0NcZDqznK+WwHorRS086bVkv5dGz7nqGvGMC1tz+Hy0dBDxy9tunnj3z7Jnz8wcPzs/NHfzi/ML++nH9/uaj+2YXhlBaoJ+W//SHXRIAAAAAAAAAAACgW98/fuzqO29+/t2l9/+X3/9L7/+nJ3/T+/8/zt7/z9+TT+/Bp/cAd7SJr6fJKlidyNJVYvfhrLw7s3x2ZdN9JIaNdvzi+/8pu7xe11See7LxlQ6DWXUCt9WXMpHVQZK3F/jxGF6K4S8DDFFpuv3oGBbVb5229VQ/RVO9FDX1A28c6XtLW0OqxyS9/922XqemL3vHAMpI/w3idcJhLyPQ3j9Gqv7vfy4v+NDLouvcjaf+6kDy+9nobhO1jkfp3bZgA9Afw27/M133TOH53391arFLya4/3rq/zOsvhV786Z3W4XXd/uQA8s/b7Rt0/sNY/qke8v/Vxf7m32j/Ltv//TmOvn3/19JiXvuLx13478+vvduUbdjd7f43X/5UD/TO3vK/EfNPS/NQ6C7/2i+y/PMbQl36X5b/li7zv23596ws///H/NNqe/iBbvOvl3gylFvLkV83Tvf/8uvGyc1s+VPdnnfI/+vPt1v+FTbUeCvmD6Nso7Qz26vsOKJx0L7y9n+jC/1t/7dR2Gy3lj+H8bk4nHbE6TmHvL2TXsufnq9I/wO7svmXCv7ftP+7sX0phkW/h9T+b9oeq/Evv2m4vi7TcKXNut2s+xrYqN5b6/t/8/+u1dbBfY6+dSfXPI+poS/juu+OrHoerzzWt/LUxlYwXaOduCGvy1qttrYX1AoMNXOGvv6HfZ4w7PyHvf6L5O3/5sfwefu/eXze/m8en7f/m8dPx2+oU3ze/m++PvP2f/P4e7L55u0DzxTEf7Qgfnf7+MZp+70F0+8piP9YQfy+RvzhlhQp/r6C6e8viL+7IP6BgvhPFMR/siD+wYL4h5vim9uATvGfKph+s0vvo4zq8sMoy9/P8/uH0VG//9PUaH3++0/3hewfYPP56WsHjp789TeqS+//TzSuh6T7eEficCWeP/0gDuf3vUPT8GLcm3H4r1n8er/eAaMkrz8j/39/qCAe2LjSc15+3zCCSlPtR8ewqN6qTsf5bCyfjuFnYvjZGD4Sw9kY7o/hgRjODah8rI2jr//20Iul5fP97Vl8t8+Tl7L3gVrqiQohzHdZnvz6QK/Ps+f1+PVqtfmv8HUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoSnXPxcWZkohXH7j5WNPnTi7f3HM4UaKav1zvGmo0pguhEdjOBbDV2LPzfdfON0c3ophKcyFUig1xocnrzdy2hpCuBD2hiuhGnZfvvrSW3NPnLh4/NK+t189dG3t1gAAAABsfh8EAAD//9SuCeg=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000001200000024"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fsmount(0xffffffffffffffff, 0x1, 0x1) link(&(0x7f0000000940)='./file1\x00', 0x0) 1m52.94611917s ago: executing program 9 (id=4453): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000001640)='./bus\x00', 0x200084c, &(0x7f0000001500)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303466372c6e6f636173652c6e6f646f74732c666c7573682c6e66732c646f74732c646f74732c6e6f646f74732c646f74732c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030303031312c646f74732c666d61736b3d30303030303030303030303030303030303030343335332c646f74732c636865636b3d7374726963742c646f74732c0032130354d7adbbc8e27a0bd0eee6bbeb407fe728ec0b4d84efffca74f3ffb6"], 0x1, 0x254, &(0x7f0000000b80)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000020, &(0x7f0000000480)={[], [{@subj_user={'subj_user', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@measure}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nobarrier'}}, {@fowner_lt}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x30, 0x36, 0x61, 0x66, 0x62, 0x61, 0x63], 0x2d, [0x65, 0x37, 0x39, 0x39], 0x2d, [0x37, 0x63, 0x66, 0x31], 0x2d, [0x35, 0x32, 0x35, 0x37], 0x2d, [0x34, 0x2f, 0x39, 0x31, 0x33, 0x34, 0x39, 0x52]}}}, {@dont_appraise}, {@fowner_gt}]}, 0x1, 0x539, &(0x7f0000003780)="$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") openat(0xffffffffffffff9c, 0x0, 0x5a042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x2128, r3}, 0x0) landlock_restrict_self(r4, 0x0) link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file0\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80, 0x5d6312615d2a01b5) socket$nl_netfilter(0x10, 0x3, 0xc) 1m49.443492248s ago: executing program 9 (id=4457): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x6302, 0xbd55, 0xd43, 0x9221, 0xfffffffffffffffd, 0x7, 0x0, 0x3ff}, &(0x7f0000000140), &(0x7f0000000280)={0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x238, &(0x7f00000003c0)={0x0, 0x20c26, 0x10100, 0x2, 0x21c, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) pause() 1m46.30525642s ago: executing program 9 (id=4462): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m30.699626735s ago: executing program 44 (id=4462): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 24.876594875s ago: executing program 0 (id=4604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600001785"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) wait4(0x0, 0x0, 0x40000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x101240) fadvise64(r5, 0x8000000000000000, 0x9, 0x6) quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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") 23.366843509s ago: executing program 0 (id=4605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='inode_switch_wbs\x00', r5}, 0x18) r6 = dup(r1) write$binfmt_elf32(r6, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7fffffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}], "84269064e02fda16d3040d75"}, 0x64) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000400000004010000040000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000006000000000000003898de4ed17582ed3dcc4d8d3e990aa9dec0a7ea306de2a87628bcdfc4315a8e43"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000140)="41000200010007", 0x7) 22.298333144s ago: executing program 0 (id=4606): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00'}, 0x18) r1 = openat$sequencer2(0xffffff9c, 0x0, 0x20401, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000300)={'\x00', 0xffffff13, 0x0, 0x40, [0x101, 0x2, 0x3, 0x2, 0xa1, 0x80000000, 0x5, 0x10, 0x16000000, 0x595, 0xbb75, 0x0, 0x0, 0x3, 0xf, 0x9, 0x6, 0x1]}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r6 = getpid() kcmp$KCMP_EPOLL_TFD(r6, 0x0, 0x7, r2, &(0x7f0000000100)={0xffffffffffffffff, r2}) r7 = syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000240)='./file0\x00', 0x1004000, &(0x7f0000000140)={[{@fat=@uid}, {@fat=@tz_utc}, {@fat=@quiet}, {@fat=@flush}, {}, {@fat=@nfs}, {@fat=@check_normal}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@quiet}, {@dots}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@dots}]}, 0x0, 0x1fe, &(0x7f0000001c80)="$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") getdents64(r7, &(0x7f00000021c0)=""/4096, 0x1000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 14.466284333s ago: executing program 7 (id=4620): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'erspan0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x2d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r6) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001a00)=ANY=[], 0x610) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfc, 0x7fffffff}]}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000}) 12.765218913s ago: executing program 0 (id=4621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getrlimit(0x9, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2314800, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r5, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) mq_timedsend(r3, &(0x7f0000000600)="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", 0x561, 0x5, 0x0) 12.562808577s ago: executing program 7 (id=4623): socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) pipe2(&(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) socket(0x1, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 10.937738366s ago: executing program 0 (id=4625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) utimensat(r4, 0x0, &(0x7f0000000180), 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000d80), 0x30000, 0x0) 9.602718319s ago: executing program 4 (id=4627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x807ff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r6, 0x10886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r8, 0x10820, 0x343}}}}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x85, 0x0, 0x0) 9.600139704s ago: executing program 2 (id=4628): syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0xffffffff, 0xfffffff6}}) ioctl$UI_DEV_CREATE(r2, 0x5501) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 9.502351334s ago: executing program 0 (id=4629): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0x5, 0x34524742, 0x5, 0x4, [{0x8, 0x9}, {0x7, 0x9}, {0x3}, {0xd, 0x8}, {0xd, 0xe0}, {0x200, 0x7ff}, {0x2, 0x3}, {0xfffffffc, 0xa}], 0xff, 0x28, 0x8, 0x1, 0x5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1e8) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000002499b8f276dc7558ecf97a4449a2e3f8367d61f49e160ba48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendfile(r1, r3, &(0x7f00000000c0)=0xc, 0x2) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000480)={0x80000, 0x182, 0x5}, 0x18) name_to_handle_at(r4, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@orangefs_parent={0x28, 0x2, {{"b80c1057004fac0c929e5b126e930b5a", 0x3}, {"13041371982ae495e27232529f48968b", 0xdca5}}}, &(0x7f0000000580), 0x200) creat(&(0x7f0000000140)='./file1\x00', 0x10b) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) setrlimit(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x1000000000000}) 8.696595043s ago: executing program 2 (id=4630): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x600080) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r6, &(0x7f00000002c0)=""/109, 0x6d, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000180)='./file1/file0\x00', 0xc000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8, 0x2}) syz_emit_ethernet(0x8e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/350], 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 8.696013581s ago: executing program 7 (id=4631): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0xf, 0x3, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x0, 0x0, 0x52424752, 0x2, 0x0, [{0x5, 0xffffffff}, {}, {}, {0x10000000, 0xfffffff8}, {0x3, 0xffffffff}, {0xfffffffe, 0x1}], 0x0, 0x8, 0x0, 0x0, 0x7}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1402200bc2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c890}, 0x1000000) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000180)={0x8, 0x6, 0x1, 0x42e, 0x10000, 0xc}) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) getpgrp(0x0) socket$inet_tcp(0x2, 0x1, 0x0) 8.623778445s ago: executing program 4 (id=4632): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'erspan0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x2d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r6) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001a00)=ANY=[], 0x610) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfc, 0x7fffffff}]}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000}) 7.551973531s ago: executing program 4 (id=4633): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4/file6\x00', 0xe0) unshare(0x22020600) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x4, 0x7d, 0x2, @vifc_lcl_addr=@private=0xa010102, @multicast2}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0xfffffffffffffff8, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, 0x0, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) 7.457249447s ago: executing program 7 (id=4634): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) inotify_init() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r4 = timerfd_create(0x8, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x90000004}) clock_adjtime(0x4, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r6, 0x4b41, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[], 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.348589646s ago: executing program 2 (id=4635): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x1}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x56}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) close(r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 5.203571623s ago: executing program 7 (id=4636): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x882}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7}) r8 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x23, 0xa, 0x7fffffffeffe) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0) 5.181286618s ago: executing program 2 (id=4637): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='comm\x00') syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYRESHEX=r4, @ANYBLOB]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_RMID(r8, 0x0) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r9, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.096871664s ago: executing program 7 (id=4638): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x8, 0x6, 0x3) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000140200001c0007"], 0x30}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff1566", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r8, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000001f00)=[{0x0}, {&(0x7f0000002a00)="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", 0x598}], 0x2}, 0x20000020) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r7, 0x31, 0x0, @void}, 0x10) 2.162028971s ago: executing program 4 (id=4639): syz_open_dev$vbi(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) openat$random(0xffffffffffffff9c, 0x0, 0x801, 0x0) io_uring_enter(0xffffffffffffffff, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x101, 0x0) write$proc_mixer(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='LINE1 \aMaster Capture!'], 0x33) close(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) unshare(0x24060400) capset(&(0x7f0000000900)={0x20071026}, &(0x7f0000000940)={0x2, 0xf, 0x4, 0x800, 0x10000, 0x9}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x6f5e, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="35eeafc163c2", 0x0, 0x100004, 0x0, 0x3, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000"], 0x188}, 0x1, 0x0, 0x0, 0x4880}, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, 0x0, 0x4) 951.31313ms ago: executing program 2 (id=4640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1a, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000600)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)='L', 0x1, 0x20008011, &(0x7f0000000100)={0xa, 0x4e21, 0x4, @loopback, 0xffffffff}, 0x1c) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, &(0x7f0000000540)) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) 949.190427ms ago: executing program 4 (id=4641): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x50424752, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000240)={0x12, {{0x29, 0x0, 0x36000000, @local}}}, 0x88) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001680)={0x4bc, 0x1, 0x5, 0x5, 0x0, 0x0, {0x5}, [{{0x254, 0x1, {{0x0, 0xca6}, 0x5, 0x9, 0x8, 0x9, 0x8, 'syz1\x00', "994d2635813721b7a4822055af6dd02eb9b7f7d29249e0805566446e3a427bab", "7411e7ad989958fd4ef886e78677c7c10823efb84ad728fe1f7d376252a14771", [{0x9, 0x5, {0x3, 0x43e1b825}}, {0x5, 0xd29, {0x3, 0x9}}, {0x0, 0x3, {0x0, 0x6}}, {0x4718, 0x400, {0x2, 0xff}}, {0xfff, 0x4, {0x3, 0x5}}, {0x9, 0x58, {0x2, 0x5}}, {0xffff, 0x5, {0x0, 0xac}}, {0xff, 0x0, {0x1, 0xa}}, {0x8, 0x7de, {0x3, 0x5}}, {0x4, 0xa620, {0x3, 0x39d1}}, {0x400, 0x401, {0x2, 0x800}}, {0x8, 0x3, {0x3, 0x7}}, {0x5, 0xe, {0x1, 0x2}}, {0xa, 0x200, {0x3, 0x9}}, {0xcbee, 0xff29, {0x1, 0x800}}, {0x6, 0x8, {0x2, 0x9}}, {0x3, 0xff43, {0x2, 0x7fffffff}}, {0xa, 0x0, {0x1, 0x9}}, {0x6, 0xf, {0x0, 0x80000000}}, {0x8, 0x8000, {0x3, 0x7}}, {0xff6c, 0x5, {0x1}}, {0x7, 0x6, {0x0, 0x5}}, {0xfffd, 0x3, {0x0, 0x66}}, {0xffff, 0x9, {0x0, 0x4}}, {0x765, 0x101, {0x2, 0x81}}, {0x0, 0x75, {0x2, 0x80}}, {0x6, 0x7, {0x2, 0xc962}}, {0x2, 0x7, {0x0, 0x3}}, {0x85b, 0x0, {0x2, 0x8}}, {0xed7, 0x3, {0x1, 0x8}}, {0x0, 0x0, {0x2, 0xe}}, {0x3, 0xf, {0x6, 0x5}}, {0x9, 0x4, {0x1, 0x3}}, {0x8, 0x8, {0x3, 0x4d93f25f}}, {0x7fff, 0x1000, {0x1, 0x1}}, {0x1ff, 0x7f, {0x1, 0x3}}, {0x8, 0x6, {0x2, 0x80}}, {0x0, 0x8, {0x0, 0x8}}, {0x4, 0x0, {0x1, 0x88}}, {0x6, 0x5, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x7, 0x5, 0x7, 0x9, 0x15, 'syz1\x00', "abe4ef06dfdad29a549e369da5c276c54edf8c1761737db534c34e0fa8353a4c", "9b53a6b2f30aab04d72e727f231718736f4ceb0c923cf6e2afa6841a2ea8d833", [{0xfe01, 0x6, {0x0, 0xfa}}, {0x3, 0xf7, {0x3, 0x6}}, {0x92, 0x6, {0x1, 0x3}}, {0xd, 0x7, {0x1, 0x4}}, {0x8, 0xb38, {0x1, 0x67567156}}, {0x90, 0xb, {0x3, 0x400}}, {0x2, 0x8, {0x2, 0x8}}, {0x7, 0x71, {0x0, 0x9}}, {0x0, 0x2, {0x3, 0xffffffff}}, {0x92, 0x6, {0x3, 0x7}}, {0x2, 0x3, {0x1, 0x5}}, {0xafef, 0x6, {0x3, 0x9}}, {0x4384, 0x8, {0x2, 0xffff}}, {0x5, 0xb, {0x3, 0x141}}, {0xe, 0x400, {0x1, 0xe}}, {0x2, 0x3, {0x0, 0x8}}, {0xffff, 0xb1, {0x1, 0x9}}, {0x2c57, 0x45, {0x0, 0x401}}, {0x4, 0xf, {0x3, 0x80000000}}, {0x0, 0xffff, {0x1, 0x6}}, {0x5c5, 0x9, {0x2, 0x7fff}}, {0x4, 0xfc00, {0x2, 0xc77}}, {0x5, 0x8000, {0x0, 0xa}}, {0x1, 0xab, {0x1, 0x6}}, {0x8, 0x0, {0x3, 0x4}}, {0x7, 0x5, {0x3, 0xf4}}, {0x6, 0x400, {0x3, 0x1}}, {0x5, 0x200, {0x3, 0x80000001}}, {0xacf0, 0x5b, {0x1, 0x10}}, {0x6, 0xd, {0x1, 0x7}}, {0x6ce4, 0x5, {0x3, 0x7f}}, {0xa, 0x0, {0x2, 0xef}}, {0x3, 0xfff, {0x2, 0x1}}, {0x80, 0x5, {0x3, 0x8}}, {0xfffb, 0xe24, {0x3, 0x5}}, {0x1, 0x9, {0x0, 0x8}}, {0x1, 0x8, {0x1, 0x1}}, {0xb, 0x200, {0x2, 0xa}}, {0x4, 0x5, {0xbc83346e91229dc2, 0x40}}, {0xfffa, 0xfa, {0x0, 0xea01}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x8004}, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) setpgid(0x0, 0xffffffffffffffff) 60.468731ms ago: executing program 4 (id=4642): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10092, &(0x7f0000000080)={[{@nodioread_nolock}]}, 0xff, 0x249, &(0x7f0000000880)="$eJzs3T9oM2UcB/DvXRJr3jfIqy6C+AdERAvldRNcXifhBSlFRFChIuKitEJtcWudXBx0VunkUsTN6ihdiosiOFXtUBdBi4PFQYdIcqnUNuKf1Jz0Ph+43F1yz/2e4+77JBkuCdBYV5JcS9JKMpukk6Q4ucHd1XRltLrZ3V1M+v3HfyyG21XrleN2l5NsJHkoyU5Z5MV2srb99MHPe4/e98Zq5973tp/qTvUgRw4P9h87enf+9Q+vP7j2+Zffzxe5lt4fjuv8FWOeaxfJLf9Fsf+Jol13D/g7Fl794KtB7m9Ncs8w/52UqU7emys37HTywDt/1vatH764fZp9Bc5fv98ZvAdu9IHGKZP0UpRzSarlspybqz7Df926VL60vPLK7AvLq0vP1z1SAedl+L3345mPLp/K/3etKv/AxdVL9p9Y2PpmsHzUqrs3wFTcUc0G+Z99dv3+yD80jvxDc8k/NJf8Q3PJPzTSTOQfGk3+obnkH5pL/qG55B+a62T+AYBm6c+cuSW4GP4sAHDh1T3+AAAAAAAAAAAAAAAAAAAAZ212dxePp2nV/PTt5PCRJO1x9VvD/yNObhw+XvqpGGz2u6JqNpFn7ppwBxN6v+a7r2/6tqbC3Wr22Z011R9ZX0o2Xktytd0+e/0Vo+vv37v5L17vPDdhgX+oOLX+8JPTrX/ar1v11r++l3wyGH+ujht/ytw2nI8ff3qD8zdh/Zd/mXAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATM1vAQAA//8mi2g4") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f00000000c0)={0x9, 0x0, 0x1, 0x3, 'syz0\x00', 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x600) connect$tipc(r4, 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x5}, 0xa) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000040)=0x1f) 0s ago: executing program 2 (id=4643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000040)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x37}, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) sendmmsg(r10, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r12, 0x21eae}}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): Bluetooth: hci2: command tx timeout [ 900.930141][ T13] team0 (unregistering): Port device team_slave_1 removed [ 901.003327][ T13] team0 (unregistering): Port device team_slave_0 removed [ 902.595271][T16776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 902.701661][T16649] chnl_net:caif_netlink_parms(): no params data found [ 902.783293][T16807] loop3: detected capacity change from 0 to 128 [ 902.859024][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 902.859041][ T30] audit: type=1800 audit(1764321416.997:206): pid=16807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3010" name="bus" dev="loop3" ino=1048759 res=0 errno=0 [ 902.921163][T16809] syz.3.3010: attempt to access beyond end of device [ 902.921163][T16809] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 902.989519][ T5846] Bluetooth: hci2: command tx timeout [ 903.120405][ T7041] kworker/u8:24: attempt to access beyond end of device [ 903.120405][ T7041] loop3: rw=1, sector=137, nr_sectors = 904 limit=128 [ 903.149750][T16649] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.156897][T16649] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.229404][T16649] bridge_slave_0: entered allmulticast mode [ 903.237250][T16649] bridge_slave_0: entered promiscuous mode [ 903.290854][T16649] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.319291][T16649] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.349072][T16649] bridge_slave_1: entered allmulticast mode [ 903.358196][T16649] bridge_slave_1: entered promiscuous mode [ 903.567461][T16649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.598375][T16649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.667299][T16828] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3016'. [ 903.757857][T16649] team0: Port device team_slave_0 added [ 903.787658][T16649] team0: Port device team_slave_1 added [ 904.424071][T16649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.444379][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.505995][T16649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.528565][T16839] lo: entered allmulticast mode [ 904.536414][T16839] tunl0: entered allmulticast mode [ 904.551239][T16839] gre0: entered allmulticast mode [ 904.560605][T16839] gretap0: entered allmulticast mode [ 904.575873][T16839] erspan0: entered allmulticast mode [ 904.587318][T16839] ip_vti0: entered allmulticast mode [ 904.601640][T16839] ip6_vti0: entered allmulticast mode [ 904.616490][T16839] sit0: entered allmulticast mode [ 904.630510][T16839] ip6tnl0: entered allmulticast mode [ 904.642503][T16839] ip6gre0: entered allmulticast mode [ 904.669436][T16839] ip6gretap0: entered allmulticast mode [ 904.688556][T16839] bond0: entered allmulticast mode [ 904.716702][T16839] bond_slave_0: entered allmulticast mode [ 904.746809][T16839] bond_slave_1: entered allmulticast mode [ 904.767731][T16839] team0: entered allmulticast mode [ 904.788174][T16839] team_slave_0: entered allmulticast mode [ 904.804557][T16839] team_slave_1: entered allmulticast mode [ 904.832354][T16839] dummy0: entered allmulticast mode [ 904.851694][T16839] nlmon0: entered allmulticast mode [ 904.865103][T16839] caif0: entered allmulticast mode [ 904.876043][T16839] batadv0: entered allmulticast mode [ 904.891218][T16839] veth0: entered allmulticast mode [ 904.902050][T16839] veth1: entered allmulticast mode [ 904.911975][T16839] wg0: entered allmulticast mode [ 904.924392][T16839] wg1: entered allmulticast mode [ 904.935158][T16839] wg2: entered allmulticast mode [ 904.951007][T16839] veth0_to_bridge: entered allmulticast mode [ 904.966110][T16839] bridge_slave_0: entered allmulticast mode [ 904.980070][T16839] veth1_to_bridge: entered allmulticast mode [ 904.987350][T16839] bridge_slave_1: entered allmulticast mode [ 904.994085][T16839] veth0_to_bond: entered allmulticast mode [ 905.002314][T16839] veth1_to_bond: entered allmulticast mode [ 905.008514][T16839] veth0_to_team: entered allmulticast mode [ 905.015260][T16839] veth1_to_team: entered allmulticast mode [ 905.023434][T16839] veth0_to_batadv: entered allmulticast mode [ 905.030056][T16839] batadv_slave_0: left promiscuous mode [ 905.035867][T16839] veth1_to_batadv: entered allmulticast mode [ 905.042626][T16839] batadv_slave_1: entered allmulticast mode [ 905.052481][T16839] xfrm0: entered allmulticast mode [ 905.057884][T16839] veth0_to_hsr: entered allmulticast mode [ 905.071371][T16839] hsr_slave_0: entered allmulticast mode [ 905.084896][T16839] veth1_to_hsr: entered allmulticast mode [ 905.097402][T16839] hsr_slave_1: entered allmulticast mode [ 905.106305][T16839] hsr0: entered allmulticast mode [ 905.111820][T16839] veth1_virt_wifi: entered allmulticast mode [ 905.118136][T16839] veth0_virt_wifi: entered allmulticast mode [ 905.125002][T16839] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 905.132796][T16839] veth1_vlan: entered allmulticast mode [ 905.141672][T16839] veth0_vlan: entered allmulticast mode [ 905.147570][T16839] vlan0: entered allmulticast mode [ 905.153234][T16839] vlan1: entered allmulticast mode [ 905.163758][T16839] macvlan0: entered allmulticast mode [ 905.169561][T16839] macvlan1: entered allmulticast mode [ 905.175227][T16839] ipvlan0: entered allmulticast mode [ 905.182955][T16839] ipvlan1: entered allmulticast mode [ 905.188531][T16839] veth1_macvtap: entered allmulticast mode [ 905.195330][T16839] veth0_macvtap: entered allmulticast mode [ 905.201570][T16839] macvtap0: entered allmulticast mode [ 905.207270][T16839] geneve0: entered allmulticast mode [ 905.213038][T16839] geneve1: entered allmulticast mode [ 905.214542][T16822] loop2: detected capacity change from 0 to 32768 [ 905.218828][T16839] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 905.270110][T16839] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 905.276262][T16822] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 905.277784][T16839] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 905.294078][T16839] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 905.301983][T16839] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 905.309374][T16839] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 905.317116][T16839] erspan0.1: entered allmulticast mode [ 905.324099][T16839] vxlan0: entered allmulticast mode [ 905.324495][T16822] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 905.338451][T16839] vxlan1: entered allmulticast mode [ 905.347871][T16839] €: entered allmulticast mode [ 905.353723][T16839] mac80211_hwsim hwsim18 wlan2: entered allmulticast mode [ 905.362035][T16839] vlan4094: entered allmulticast mode [ 905.367911][T16839] vlan0000: entered allmulticast mode [ 905.381862][T16649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.412923][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.416913][T16822] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 905.476843][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 905.484001][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 905.502525][T16649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.558178][ T148] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.580737][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 96ms [ 905.584228][ T148] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.613089][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 905.629734][T16822] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 905.644246][ T148] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.723427][ T148] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.809336][T16649] hsr_slave_0: entered promiscuous mode [ 905.810910][T16861] loop3: detected capacity change from 0 to 2048 [ 905.817081][T16649] hsr_slave_1: entered promiscuous mode [ 905.831915][T16649] debugfs: 'hsr0' already exists in 'hsr' [ 905.860112][T16861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 905.870547][T16649] Cannot create hsr debugfs directory [ 906.116941][T16868] fuse: Bad value for 'fd' [ 906.687311][T16889] netlink: 'syz.4.3033': attribute type 1 has an invalid length. [ 907.282503][T16889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 907.341598][T16893] bond1: (slave erspan0): making interface the new active one [ 907.376586][T16893] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 908.757853][T16649] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 908.803202][T16649] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 908.863645][T16649] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 908.907882][T16649] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 909.270852][T16649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.353933][T16649] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.397970][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.405135][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.485142][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.492365][ T6122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.652546][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3048'. [ 909.682084][T16965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.235945][T16649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.611984][T17013] overlayfs: failed to clone upperpath [ 910.961021][T16649] veth0_vlan: entered promiscuous mode [ 911.612753][T16649] veth1_vlan: entered promiscuous mode [ 911.688891][T16649] veth0_macvtap: entered promiscuous mode [ 911.700410][T16649] veth1_macvtap: entered promiscuous mode [ 911.862529][T16649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.901196][T16649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.047317][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.076729][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.150702][T17040] overlayfs: failed to clone upperpath [ 912.614091][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.622916][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.202399][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.236717][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.275321][ T7041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.285587][ T7041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.974619][T17101] loop2: detected capacity change from 0 to 32768 [ 915.005280][T17101] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3072 (17101) [ 915.044211][T17101] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 915.065858][T17101] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 915.209224][T17117] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3077'. [ 915.395672][T17101] BTRFS info (device loop2): setting nodatasum [ 915.412741][T17101] BTRFS info (device loop2): setting nodatacow [ 915.435059][T17101] BTRFS info (device loop2): turning on async discard [ 915.460255][T17101] BTRFS info (device loop2): enabling free space tree [ 915.493171][T17101] BTRFS info (device loop2): enabling auto defrag [ 915.527892][T17101] BTRFS info (device loop2): max_inline set to 0 [ 915.848894][T17161] input: syz0 as /devices/virtual/input/input23 [ 916.269775][T17171] overlayfs: failed to clone upperpath [ 916.727308][T15943] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 917.387013][T17191] netlink: 'syz.6.3088': attribute type 2 has an invalid length. [ 919.360641][ T30] audit: type=1800 audit(1764321433.487:207): pid=17224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3086" name="file1" dev="fuse" ino=5 res=0 errno=0 [ 919.775624][T17244] overlayfs: failed to clone upperpath [ 919.883199][T17245] netlink: 'syz.3.3104': attribute type 2 has an invalid length. [ 921.846561][T17269] loop6: detected capacity change from 0 to 32768 [ 921.920698][T17269] (syz.6.3110,17269,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 922.150567][T17269] (syz.6.3110,17269,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 922.175350][T17269] JBD2: Ignoring recovery information on journal [ 922.299935][T17305] overlayfs: failed to clone upperpath [ 922.617544][T17269] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 922.848753][ T30] audit: type=1800 audit(1764321436.957:208): pid=17269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3110" name="file1" dev="loop6" ino=16978 res=0 errno=0 [ 922.961447][ C1] I/O error, dev loop6, sector 554 op 0x1:(WRITE) flags 0x9800 phys_seg 18 prio class 2 [ 922.966726][T17269] loop6: detected capacity change from 32768 to 0 [ 922.986117][T17307] Aborting journal on device loop6-29. [ 922.997278][T17319] (syz.6.3110,17319,1):ocfs2_start_trans:379 ERROR: status = -30 [ 923.028490][T17307] Buffer I/O error on dev loop6, logical block 552, lost sync page write [ 923.042785][T17319] OCFS2: abort (device loop6): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 923.062738][T17307] JBD2: I/O error when updating journal superblock for loop6-29. [ 923.071153][T17319] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 923.081522][T17315] (syz.6.3110,17315,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 923.098222][T17319] OCFS2: Returning error to the calling process. [ 923.105006][T17319] (syz.6.3110,17319,1):ocfs2_dio_wr_get_block:2188 ERROR: status = -30 [ 923.122690][T17319] (syz.6.3110,17319,1):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = -30 [ 923.660258][T16649] (syz-executor,16649,0):ocfs2_start_trans:379 ERROR: status = -30 [ 923.693934][T16649] OCFS2: abort (device loop6): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 923.751630][T16649] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 923.784568][T16649] OCFS2: Returning error to the calling process. [ 923.801329][T16649] (syz-executor,16649,0):ocfs2_update_inode_atime:264 ERROR: status = -30 [ 923.840760][T16649] (syz-executor,16649,0):ocfs2_read_locked_inode:599 ERROR: status = -5 [ 923.892696][T16649] (syz-executor,16649,0):ocfs2_read_locked_inode:599 ERROR: status = -5 [ 924.288105][ T6126] (kworker/u8:17,6126,1):ocfs2_start_trans:379 ERROR: status = -30 [ 924.331839][ T6126] OCFS2: abort (device loop6): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 924.382751][ T6126] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 924.397990][ T30] audit: type=1326 audit(1764321438.517:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 924.496901][ T30] audit: type=1326 audit(1764321438.517:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 924.574772][ T6126] OCFS2: Returning error to the calling process. [ 924.598381][ T6126] (kworker/u8:17,6126,0):ocfs2_release_dquot:770 ERROR: status = -30 [ 924.622621][ T30] audit: type=1326 audit(1764321438.617:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 924.624129][ T6126] (kworker/u8:17,6126,0):ocfs2_release_dquot:800 ERROR: status = -30 [ 924.646255][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.735545][ T30] audit: type=1326 audit(1764321438.617:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 924.746127][ T6126] (kworker/u8:17,6126,0):ocfs2_start_trans:379 ERROR: status = -30 [ 924.825047][ T6126] OCFS2: abort (device loop6): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 924.831204][ T30] audit: type=1326 audit(1764321438.617:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 924.959405][ T6126] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 924.967700][ T30] audit: type=1326 audit(1764321438.737:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 924.992709][ T6126] OCFS2: Returning error to the calling process. [ 925.014703][ T6126] (kworker/u8:17,6126,0):ocfs2_release_dquot:770 ERROR: status = -30 [ 925.027032][ T6126] (kworker/u8:17,6126,0):ocfs2_release_dquot:800 ERROR: status = -30 [ 925.035801][T16649] (syz-executor,16649,0):ocfs2_local_free_info:835 ERROR: releasing quota file with used entries (type=0) [ 925.042156][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.051245][T16649] (syz-executor,16649,0):ocfs2_local_free_info:835 ERROR: releasing quota file with used entries (type=1) [ 925.098203][ T30] audit: type=1326 audit(1764321438.737:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 925.100623][T16649] (syz-executor,16649,0):ocfs2_assign_bh:2417 ERROR: status = -5 [ 925.202428][ T30] audit: type=1326 audit(1764321438.737:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 925.235146][T16649] (syz-executor,16649,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -5 [ 925.245407][T16649] (syz-executor,16649,0):ocfs2_shutdown_local_alloc:412 ERROR: status = -5 [ 925.257255][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.303588][T16649] Buffer I/O error on dev loop6, logical block 16936, lost sync page write [ 925.321472][ T30] audit: type=1326 audit(1764321438.737:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 925.344024][T16649] (syz-executor,16649,0):ocfs2_write_block:78 ERROR: status = -5 [ 925.369795][ T30] audit: type=1326 audit(1764321438.737:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 925.397798][T16649] (syz-executor,16649,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 925.428691][T16649] (syz-executor,16649,0):ocfs2_put_slot:517 ERROR: status = -5 [ 925.446892][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.463122][T16649] (syz-executor,16649,0):ocfs2_journal_shutdown:1100 ERROR: status = -5 [ 925.527047][T16649] ocfs2: Unmounting device (7,6) on (node local) [ 925.904268][ T13] bridge_slave_1: left allmulticast mode [ 925.929143][ T13] bridge_slave_1: left promiscuous mode [ 925.968975][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.981665][ T13] bridge_slave_0: left allmulticast mode [ 925.987370][ T13] bridge_slave_0: left promiscuous mode [ 925.995191][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.079822][T14296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 927.093747][T14296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 927.104245][T14296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 927.225064][T14296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 927.233190][T14296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 927.359710][T17403] overlayfs: failed to clone upperpath [ 928.357223][T17429] overlayfs: failed to clone upperpath [ 928.602638][T17439] loop2: detected capacity change from 0 to 128 [ 929.131737][T17439] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 929.161733][T17439] FAT-fs (loop2): Filesystem has been set read-only [ 929.309184][T14296] Bluetooth: hci2: command tx timeout [ 929.313357][T17439] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 929.840127][T17469] overlayfs: failed to clone upperpath [ 930.354668][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.483263][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.500443][ T13] bond0 (unregistering): Released all slaves [ 930.698187][T17397] caif0 speed is unknown, defaulting to 1000 [ 931.388978][T14296] Bluetooth: hci2: command tx timeout [ 931.469312][T17501] overlayfs: failed to clone upperpath [ 931.644700][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.651130][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.708296][T17508] overlayfs: failed to clone upperpath [ 931.742129][T17508] overlayfs: failed to clone lowerpath [ 931.954450][T17397] virt_wifi0 speed is unknown, defaulting to 1000 [ 932.013124][T17397] lo speed is unknown, defaulting to 1000 [ 933.247159][ T13] hsr_slave_0: left promiscuous mode [ 933.307244][ T13] hsr_slave_1: left promiscuous mode [ 933.320321][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.330849][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.348744][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.357871][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.377304][T17565] overlayfs: failed to clone lowerpath [ 933.468957][T14296] Bluetooth: hci2: command tx timeout [ 933.477121][ T13] veth1_macvtap: left promiscuous mode [ 933.493172][ T13] veth0_macvtap: left promiscuous mode [ 933.501937][ T13] veth1_vlan: left promiscuous mode [ 933.507592][ T13] veth0_vlan: left promiscuous mode [ 935.378126][ T13] team0 (unregistering): Port device team_slave_1 removed [ 935.452363][ T13] team0 (unregistering): Port device team_slave_0 removed [ 935.558897][T14296] Bluetooth: hci2: command tx timeout [ 936.597711][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3189'. [ 936.627984][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3189'. [ 936.690377][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3189'. [ 936.738858][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3189'. [ 937.166806][T17397] chnl_net:caif_netlink_parms(): no params data found [ 937.586634][T17397] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.614845][T17397] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.653799][T17397] bridge_slave_0: entered allmulticast mode [ 937.687738][T17397] bridge_slave_0: entered promiscuous mode [ 937.719928][T17397] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.752686][T17397] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.777972][T17397] bridge_slave_1: entered allmulticast mode [ 937.816304][T17397] bridge_slave_1: entered promiscuous mode [ 938.091656][T17397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.144391][T17397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.313536][T17397] team0: Port device team_slave_0 added [ 938.331098][T17397] team0: Port device team_slave_1 added [ 938.446400][T17397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.467456][T17397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.528541][T17397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.562686][T17397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.579148][T17397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.651708][T17397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.854494][T17397] hsr_slave_0: entered promiscuous mode [ 938.871429][T17397] hsr_slave_1: entered promiscuous mode [ 938.878033][T17397] debugfs: 'hsr0' already exists in 'hsr' [ 939.368693][T17397] Cannot create hsr debugfs directory [ 940.145392][T17690] overlayfs: failed to clone upperpath [ 940.951009][T17697] tipc: Enabling of bearer rejected, already enabled [ 940.973038][T17702] overlayfs: failed to clone upperpath [ 941.917660][T17734] overlayfs: failed to clone upperpath [ 942.926005][T17753] fuse: Bad value for 'fd' [ 944.666389][T17799] : renamed from veth0_vlan [ 944.767217][T17397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 944.807897][T17397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 944.861588][T17397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 944.908804][T17397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 945.245545][T17397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.355715][T17397] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.398394][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.405669][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.450966][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.458211][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.269788][T17397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.397848][T17397] veth0_vlan: entered promiscuous mode [ 946.440403][T17397] veth1_vlan: entered promiscuous mode [ 946.506691][T17397] veth0_macvtap: entered promiscuous mode [ 946.522052][T17397] veth1_macvtap: entered promiscuous mode [ 946.570030][T17397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.613642][T17397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.637547][ T6166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.651283][ T6166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.679501][ T6166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.711621][ T6166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.954033][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.973575][T17862] netlink: 'syz.3.3263': attribute type 1 has an invalid length. [ 946.981790][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.071442][T17862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 947.175596][T17866] macvlan2: entered promiscuous mode [ 947.202463][T17866] macvlan2: entered allmulticast mode [ 947.220755][T17866] bond2: entered promiscuous mode [ 947.228500][T17866] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 947.249804][T17866] bond2: left promiscuous mode [ 947.332471][ T7203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.341421][ T7203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.152270][T17897] loop0: detected capacity change from 0 to 256 [ 948.373168][T17901] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 948.622888][T17901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 949.212468][T17910] bond3: entered promiscuous mode [ 949.996480][T17932] 9p: Bad value for 'wfdno' [ 951.083504][T17973] kvm: pic: non byte write [ 951.879229][T18002] overlayfs: failed to clone upperpath [ 951.879928][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3303'. [ 953.700580][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3311'. [ 954.044255][T18049] lo: entered allmulticast mode [ 954.078806][T18049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 954.801144][T18068] netlink: 'syz.0.3319': attribute type 4 has an invalid length. [ 954.852975][T18073] netlink: 'syz.0.3319': attribute type 4 has an invalid length. [ 954.931887][T18068] lo: left allmulticast mode [ 955.197831][T18081] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 955.232795][T18081] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 955.497608][T18091] binder: 18089:18091 ioctl c0306201 2000000001c0 returned -14 [ 956.233593][T18116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3329'. [ 956.299824][T18120] overlayfs: failed to clone upperpath [ 956.334336][T18120] overlayfs: failed to clone lowerpath [ 957.149696][T18141] loop0: detected capacity change from 0 to 32768 [ 957.196032][T18141] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 957.204298][T18141] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 957.226049][T18141] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 957.250855][ T5835] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 957.259266][ T5835] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 957.454020][ T5835] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 194ms [ 957.678827][ T5835] gfs2: fsid=syz:syz.0: jid=0: Done [ 957.694625][T18141] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 958.759233][T18170] overlayfs: failed to clone upperpath [ 960.097505][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 960.097516][ T30] audit: type=1326 audit(1764321474.227:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.2.3352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2576b8f749 code=0x0 [ 960.215360][ T30] audit: type=1800 audit(1764321474.327:229): pid=18205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3353" name="nullb0" dev="tmpfs" ino=4318 res=0 errno=0 [ 961.266951][T18229] binder_alloc: 18228: pid 18228 spamming oneway? 1 buffers allocated for a total size of 4096 [ 961.290767][T18231] overlayfs: failed to clone upperpath [ 961.555450][T18236] overlayfs: failed to clone upperpath [ 961.604922][T18242] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3363'. [ 961.656467][T18242] unsupported nlmsg_type 40 [ 961.724687][T18245] dvmrp8: entered allmulticast mode [ 961.795287][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3364'. [ 963.915924][T18290] overlayfs: failed to clone upperpath [ 963.945097][T18290] netlink: 'syz.4.3375': attribute type 2 has an invalid length. [ 964.954303][T18313] overlayfs: failed to clone lowerpath [ 965.409221][T18318] loop0: detected capacity change from 0 to 4096 [ 968.043437][T18349] overlayfs: failed to clone upperpath [ 968.147543][T18350] netlink: 'syz.2.3387': attribute type 2 has an invalid length. [ 968.997234][T18359] loop0: detected capacity change from 0 to 1024 [ 969.039577][T18359] EXT4-fs: Ignoring removed mblk_io_submit option [ 969.050178][T18359] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 969.079048][T18359] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 969.114950][T18359] EXT4-fs error (device loop0): ext4_ext_check_inode:528: inode #11: comm syz.0.3389: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 969.183528][T18359] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3389: couldn't read orphan inode 11 (err -117) [ 969.200343][T18359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 969.315340][T17397] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.006146][T18391] tipc: Failed to remove unknown binding: 66,1,1/0:3895591284/3895591286 [ 970.143632][T18393] kvm: pic: level sensitive irq not supported [ 970.145567][T18393] kvm: pic: non byte read [ 970.167189][T18393] kvm: pic: level sensitive irq not supported [ 970.167256][T18393] kvm: pic: non byte read [ 970.527629][T18410] loop0: detected capacity change from 0 to 512 [ 970.656751][T18410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.754196][T18410] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 970.918879][T18410] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.3405: corrupted inode contents [ 971.034133][T18410] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.3405: mark_inode_dirty error [ 971.095264][T18410] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.3405: corrupted inode contents [ 971.147631][T18410] EXT4-fs error (device loop0): __ext4_ext_dirty:211: inode #2: comm syz.0.3405: mark_inode_dirty error [ 972.125994][T17397] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.324638][T18440] netlink: 'syz.5.3412': attribute type 1 has an invalid length. [ 972.375902][T18440] netlink: 'syz.5.3412': attribute type 4 has an invalid length. [ 972.407698][T18444] netlink: 'syz.5.3412': attribute type 1 has an invalid length. [ 972.447366][T18440] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3412'. [ 972.459266][T18444] netlink: 'syz.5.3412': attribute type 4 has an invalid length. [ 972.467020][T18444] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3412'. [ 977.174319][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'. [ 977.183266][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 977.192902][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 977.202222][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 977.212145][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 977.221395][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 977.230477][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 977.239672][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 978.492138][T18571] overlayfs: failed to clone upperpath [ 978.544858][T18575] overlayfs: failed to clone upperpath [ 979.098306][T18582] netlink: 'syz.4.3449': attribute type 1 has an invalid length. [ 979.185173][T18582] netlink: 'syz.4.3449': attribute type 4 has an invalid length. [ 979.222157][T18582] __nla_validate_parse: 140 callbacks suppressed [ 979.222214][T18582] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.3449'. [ 979.551458][T18593] tipc: Enabling of bearer rejected, failed to enable media [ 979.582113][T18594] kvm: pic: non byte write [ 980.858777][ T6218] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 981.069207][ T6218] usb 1-1: Using ep0 maxpacket: 32 [ 981.090323][ T6218] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 981.159551][ T6218] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 981.202161][ T6218] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 981.233173][ T6218] usb 1-1: Product: syz [ 981.251675][ T6218] usb 1-1: Manufacturer: syz [ 981.277316][ T6218] usb 1-1: SerialNumber: syz [ 981.303537][ T6218] usb 1-1: config 0 descriptor?? [ 981.334294][T18619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 983.680191][T14688] usb 1-1: USB disconnect, device number 17 [ 984.634714][T18693] faux_driver vkms: [drm] Unknown color mode 2054; guessing buffer size. [ 990.044838][T14296] Bluetooth: hci1: command 0x0406 tx timeout [ 990.282409][ T30] audit: type=1326 audit(1764321504.397:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.5.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 990.366704][T18786] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3505'. [ 990.405865][ T30] audit: type=1326 audit(1764321504.397:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.5.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 990.573204][ T30] audit: type=1326 audit(1764321504.427:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.5.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 990.596970][ T30] audit: type=1326 audit(1764321504.477:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.5.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 990.620704][ T30] audit: type=1326 audit(1764321504.477:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.5.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 990.649352][ T30] audit: type=1326 audit(1764321504.487:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.5.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 990.730201][ T30] audit: type=1326 audit(1764321504.487:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.5.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 990.807040][ T30] audit: type=1326 audit(1764321504.487:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.5.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 990.837902][ T30] audit: type=1326 audit(1764321504.487:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.5.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 990.893579][T18807] batman_adv: batadv0: Adding interface: dummy0 [ 990.900029][ T30] audit: type=1326 audit(1764321504.487:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.5.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cd58f749 code=0x7ffc0000 [ 990.923362][T18807] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 990.965219][T18807] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 992.123282][T18834] syzkaller0: entered promiscuous mode [ 992.129142][T18834] syzkaller0: entered allmulticast mode [ 992.874551][T18856] netlink: 107460 bytes leftover after parsing attributes in process `syz.4.3528'. [ 993.076448][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.090543][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.903397][T18868] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 994.346287][T18876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 995.750550][T16212] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 996.341206][T16212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.369092][T16212] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 996.378355][T16212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.423529][T16212] usb 1-1: config 0 descriptor?? [ 996.453276][T16212] pwc: Askey VC010 type 2 USB webcam detected. [ 997.226171][T16212] pwc: recv_control_msg error -32 req 02 val 2b00 [ 997.522114][T16212] pwc: recv_control_msg error -32 req 02 val 2700 [ 997.725490][T16212] pwc: recv_control_msg error -32 req 02 val 2c00 [ 997.733456][T16212] pwc: recv_control_msg error -32 req 04 val 1000 [ 997.740983][T16212] pwc: recv_control_msg error -32 req 04 val 1300 [ 997.748228][T16212] pwc: recv_control_msg error -32 req 04 val 1400 [ 997.756974][T16212] pwc: recv_control_msg error -32 req 02 val 2000 [ 997.767830][T16212] pwc: recv_control_msg error -32 req 02 val 2100 [ 997.775489][T16212] pwc: recv_control_msg error -32 req 04 val 1500 [ 997.990093][T16212] pwc: recv_control_msg error -71 req 02 val 2400 [ 998.006473][T16212] pwc: recv_control_msg error -71 req 02 val 2600 [ 998.017948][T16212] pwc: recv_control_msg error -71 req 02 val 2900 [ 998.033229][T16212] pwc: recv_control_msg error -71 req 02 val 2800 [ 998.040825][T16212] pwc: recv_control_msg error -71 req 04 val 1100 [ 998.047859][T16212] pwc: recv_control_msg error -71 req 04 val 1200 [ 998.057056][T16212] pwc: Registered as video103. [ 998.064481][T16212] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 998.086021][T16212] usb 1-1: USB disconnect, device number 18 [ 1002.486004][T18986] netlink: 'syz.5.3562': attribute type 8 has an invalid length. [ 1002.493883][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3562'. [ 1002.681256][ T5846] Bluetooth: hci5: unexpected event for opcode 0x0c23 [ 1004.880865][T18991] caif0 speed is unknown, defaulting to 1000 [ 1005.829539][T18991] virt_wifi0 speed is unknown, defaulting to 1000 [ 1005.894851][T18991] lo speed is unknown, defaulting to 1000 [ 1008.706708][T19065] loop0: detected capacity change from 0 to 8192 [ 1010.056152][T19092] netlink: get zone limit has 4 unknown bytes [ 1010.971877][T19100] binder_alloc: 19099: pid 19099 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1016.471461][T19163] netlink: 'syz.5.3605': attribute type 1 has an invalid length. [ 1017.277847][T19170] bond4: (slave gretap1): making interface the new active one [ 1017.478717][T19170] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1017.562396][T19172] vlan3: entered allmulticast mode [ 1017.590942][T19172] bond4: entered allmulticast mode [ 1017.601866][T19172] gretap1: entered allmulticast mode [ 1017.605883][T19181] loop0: detected capacity change from 0 to 256 [ 1017.639418][T19172] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1017.669993][T19181] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 256) [ 1019.715482][T19218] netlink: 'syz.0.3624': attribute type 39 has an invalid length. [ 1020.284620][ T5846] Bluetooth: hci4: ACL packet too small [ 1020.295188][ T5846] Bluetooth: Unexpected continuation frame (len 10) [ 1022.040145][T19254] binder: BINDER_SET_CONTEXT_MGR already set [ 1022.085377][T19254] binder: 19253:19254 ioctl 4018620d 200000000040 returned -16 [ 1022.617719][T19267] overlayfs: failed to clone upperpath [ 1022.717754][T19268] netlink: 'syz.4.3637': attribute type 2 has an invalid length. [ 1023.271321][T19273] overlayfs: failed to clone upperpath [ 1023.486129][T19254] syz.0.3636 (19254): drop_caches: 2 [ 1026.150671][T19308] netlink: 'syz.0.3650': attribute type 2 has an invalid length. [ 1026.827834][T19318] loop0: detected capacity change from 0 to 2048 [ 1026.848226][T19318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1030.039519][T19326] loop0: detected capacity change from 0 to 32768 [ 1030.081225][T19326] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3657 (19326) [ 1030.694135][T19326] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1030.723773][T19326] BTRFS info (device loop0): using blake2b (blake2b-256-lib) checksum algorithm [ 1030.839595][T19326] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1030.841718][T19326] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1030.891371][T19326] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1030.946818][T19326] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1030.995211][T19326] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1031.260216][T19326] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1031.283711][T19326] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1031.303925][T19326] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1031.317913][T19326] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1031.828918][T19326] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1031.971914][T19326] BTRFS error (device loop0): open_ctree failed: -12 [ 1036.372768][T19431] loop0: detected capacity change from 0 to 128 [ 1038.566154][T14296] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1038.577075][T14296] Bluetooth: hci2: Injecting HCI hardware error event [ 1038.588340][T14296] Bluetooth: hci2: hardware error 0x00 [ 1040.969883][T14296] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1041.101053][T19489] netlink: 'syz.2.3704': attribute type 1 has an invalid length. [ 1041.121056][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3704'. [ 1043.058897][ T6218] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1043.350196][ T6218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1043.367171][ T6218] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1043.376729][ T6218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.952989][ T6218] usb 1-1: config 0 descriptor?? [ 1043.972719][T19501] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1045.100066][ T6218] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1045.405410][ T6218] usb 1-1: USB disconnect, device number 19 [ 1046.652986][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1046.662353][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1046.882320][T19550] ceph: No mds server is up or the cluster is laggy [ 1046.961786][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1046.967918][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1054.516163][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.523552][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.375708][T19627] bridge_slave_0: left allmulticast mode [ 1056.384423][T19627] bridge_slave_0: left promiscuous mode [ 1056.395538][T19627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.436027][T19627] bridge_slave_1: left allmulticast mode [ 1056.443896][T19627] bridge_slave_1: left promiscuous mode [ 1056.454119][T19627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.634608][T19627] bond0: (slave bond_slave_0): Releasing backup interface [ 1056.646954][T19627] bond0: (slave bond_slave_1): Releasing backup interface [ 1057.218398][T19627] team0: Port device team_slave_0 removed [ 1057.246231][T19627] team0: Port device team_slave_1 removed [ 1057.257721][T19627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.266126][T19627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.410875][T19627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.418425][T19627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.443127][T19627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1058.060418][T19659] loop0: detected capacity change from 0 to 2048 [ 1058.103151][T19659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1062.436074][T19711] tipc: Enabling of bearer rejected, failed to enable media [ 1062.572982][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1062.572999][ T30] audit: type=1800 audit(1764321576.707:248): pid=19716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3770" name="file1" dev="tmpfs" ino=4854 res=0 errno=0 [ 1062.704127][T19719] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3769'. [ 1062.752627][T19719] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3769'. [ 1070.330960][T19790] IPv6: NLM_F_CREATE should be specified when creating new route [ 1070.343287][T19790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1070.350623][T19790] IPv6: NLM_F_CREATE should be set when creating new route [ 1070.357863][T19790] IPv6: NLM_F_CREATE should be set when creating new route [ 1076.801094][T19834] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1078.516959][T19856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3808'. [ 1078.659981][T19863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3808'. [ 1081.265472][T19893] netlink: 'syz.0.3817': attribute type 2 has an invalid length. [ 1086.980620][T19948] netlink: 'syz.5.3828': attribute type 21 has an invalid length. [ 1086.988757][T19948] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3828'. [ 1086.998560][T19948] netlink: 'syz.5.3828': attribute type 5 has an invalid length. [ 1087.006417][T19948] netlink: 'syz.5.3828': attribute type 6 has an invalid length. [ 1087.014230][T19948] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3828'. [ 1091.169486][T19978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3843'. [ 1094.870660][T20006] syzkaller0: entered promiscuous mode [ 1094.876181][T20006] syzkaller0: entered allmulticast mode [ 1099.049601][T20046] Cannot find del_set index 4 as target [ 1101.192332][T20057] loop0: detected capacity change from 0 to 4096 [ 1101.230115][T20057] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1101.244115][T20057] ntfs3(loop0): volume is dirty and "force" flag is not set! [ 1102.790101][T20082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'. [ 1102.811724][T20079] can: request_module (can-proto-5) failed. [ 1107.143485][T20112] overlayfs: failed to clone upperpath [ 1113.054402][T20179] tipc: Enabling of bearer rejected, failed to enable media [ 1116.239139][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.245538][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.536341][T20226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3908'. [ 1122.261905][T20252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3918'. [ 1122.300841][T20252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3918'. [ 1125.823453][T20288] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1129.698924][ T6126] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.776707][ T6126] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.821588][ T6126] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.871379][ T6126] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.410090][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1131.423383][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1131.433623][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1131.444050][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1131.451868][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1132.062251][T20343] caif0 speed is unknown, defaulting to 1000 [ 1132.707653][T20343] virt_wifi0 speed is unknown, defaulting to 1000 [ 1132.725532][T20343] lo speed is unknown, defaulting to 1000 [ 1133.550968][ T5846] Bluetooth: hci3: command tx timeout [ 1135.265551][T20343] chnl_net:caif_netlink_parms(): no params data found [ 1135.516907][T20380] 9p: Bad value for 'source' [ 1135.640202][ T5846] Bluetooth: hci3: command tx timeout [ 1137.496106][T20343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.581117][T20343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.588420][T20343] bridge_slave_0: entered allmulticast mode [ 1137.718733][ T5846] Bluetooth: hci3: command tx timeout [ 1137.800945][T20343] bridge_slave_0: entered promiscuous mode [ 1137.885450][T20343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.914574][T20343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.989127][T20405] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1139.022522][T20343] bridge_slave_1: entered allmulticast mode [ 1139.040643][T20343] bridge_slave_1: entered promiscuous mode [ 1141.392600][ T5846] Bluetooth: hci3: command tx timeout [ 1142.878069][T20343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.114636][ T6598] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.158757][ T6598] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.932898][T20343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.227035][ T6598] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.258017][ T6598] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.453235][T20343] team0: Port device team_slave_0 added [ 1147.472687][T20343] team0: Port device team_slave_1 added [ 1147.641967][T20470] rdma_op ffff88803299d1f0 conn xmit_rdma 0000000000000000 [ 1148.069296][T20471] netlink: 'syz.0.3965': attribute type 10 has an invalid length. [ 1148.272046][ T6598] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.301301][ T6598] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.125044][T20471] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1149.177134][T20343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.185000][T20343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.275811][T20343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.460477][T20488] netlink: 'syz.2.3967': attribute type 6 has an invalid length. [ 1149.487012][T20343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.495396][T20343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.553299][T20343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.308025][T20487] delete_channel: no stack [ 1150.864249][ T6598] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.063078][ T6598] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.927456][T20343] hsr_slave_0: entered promiscuous mode [ 1151.947497][T20343] hsr_slave_1: entered promiscuous mode [ 1151.963799][T20343] debugfs: 'hsr0' already exists in 'hsr' [ 1151.989062][T20343] Cannot create hsr debugfs directory [ 1155.716345][ T6598] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1155.884612][ T6598] gretap1 (unregistering): left allmulticast mode [ 1156.530915][ T6598] dvmrp8 (unregistering): left allmulticast mode [ 1157.174372][ T6598] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1157.487818][T20574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3987'. [ 1158.067194][ T6598] bond2 (unregistering): (slave bridge1): Releasing active interface [ 1158.078671][ T6598] bridge1 (unregistering): left promiscuous mode [ 1158.085061][ T6598] bridge1 (unregistering): left allmulticast mode [ 1158.164549][ T6598] team0: Port device bridge2 removed [ 1158.645751][ T6598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.721578][ T6598] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1158.744777][ T6598] bond0 (unregistering): Released all slaves [ 1158.758407][ T6598] bond1 (unregistering): Released all slaves [ 1158.772364][ T6598] bond2 (unregistering): Released all slaves [ 1158.962700][ T6598] bond3 (unregistering): Released all slaves [ 1158.976420][ T6598] bond4 (unregistering): Released all slaves [ 1158.988583][T20534] tipc: Enabling of bearer rejected, already enabled [ 1160.354860][T20343] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.171035][T20593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3994'. [ 1161.980787][T20343] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.482880][T20623] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1162.530673][T20623] kvm: pic: non byte read [ 1162.552841][T20623] kvm: pic: single mode not supported [ 1162.552864][T20623] kvm: pic: level sensitive irq not supported [ 1162.565983][T20623] kvm: pic: non byte read [ 1162.588866][T20623] kvm: pic: non byte read [ 1162.593629][T20623] kvm: pic: level sensitive irq not supported [ 1162.593807][T20623] kvm: pic: non byte read [ 1162.643768][T20343] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.962875][T20343] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.364819][T20343] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1167.179347][T20343] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1167.306814][T20343] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1167.340940][T20343] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1168.857982][ T6598] hsr_slave_0: left promiscuous mode [ 1168.870834][ T6598] hsr_slave_1: left promiscuous mode [ 1168.883379][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.904043][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.921855][ T6598] batman_adv: batadv0: Removing interface: team0 [ 1168.993622][ T6598] veth1_macvtap: left promiscuous mode [ 1169.044069][ T6598] veth0_macvtap: left promiscuous mode [ 1169.064187][ T6598] veth1_vlan: left promiscuous mode [ 1169.076270][ T6598] veth0_vlan: left promiscuous mode [ 1173.074475][ T6598] pim6reg (unregistering): left allmulticast mode [ 1173.084765][T20715] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1177.268089][ T6598] team0 (unregistering): Port device team_slave_1 removed [ 1177.394136][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.400814][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.556215][ T6598] team0 (unregistering): Port device team_slave_0 removed [ 1179.565627][ T6166] smc: removing ib device syz2 [ 1180.930359][T18704] smc: removing ib device syz0 [ 1181.146120][T20343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.266638][T20788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4036'. [ 1181.293135][T20343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.467002][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.474262][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.539852][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.547074][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.166363][T14296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1192.184359][T14296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1192.194911][T14296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1192.203514][T14296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1192.218036][T14296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1193.315947][T20895] tipc: Started in network mode [ 1193.322883][T20895] tipc: Node identity 7f000001, cluster identity 4711 [ 1193.330908][T20895] tipc: New replicast peer: 255.255.255.255 [ 1193.337459][T20895] tipc: Enabled bearer , priority 10 [ 1194.376985][T14296] Bluetooth: hci5: command tx timeout [ 1194.727430][T20913] Invalid source name [ 1194.731576][T20913] UBIFS error (pid: 20913): cannot open "./file0", error -22 [ 1195.192337][T20315] tipc: Node number set to 2130706433 [ 1196.544630][T14296] Bluetooth: hci5: command tx timeout [ 1198.669354][T14296] Bluetooth: hci5: command tx timeout [ 1200.749016][T14296] Bluetooth: hci5: command tx timeout [ 1201.290055][T20886] chnl_net:caif_netlink_parms(): no params data found [ 1202.297483][T20993] tipc: Enabled bearer , priority 0 [ 1203.125141][T20997] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4081'. [ 1203.712235][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4083'. [ 1204.210676][T21004] bond0: entered promiscuous mode [ 1204.215757][T21004] bond_slave_0: entered promiscuous mode [ 1204.248984][T21004] team0: entered promiscuous mode [ 1204.257627][T21004] team_slave_0: entered promiscuous mode [ 1204.264692][T21004] team_slave_1: entered promiscuous mode [ 1204.294858][T21004] batadv0: entered promiscuous mode [ 1204.355135][T21004] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1204.368012][T21004] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1204.379444][T21004] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1204.391916][T21007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.400384][T21010] tipc: Started in network mode [ 1204.405391][T21010] tipc: Node identity 080211000001, cluster identity 4711 [ 1204.422506][T21010] tipc: Enabled bearer , priority 0 [ 1204.451189][T21012] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 1204.465781][T21012] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 1204.649599][ T6598] IPVS: stop unused estimator thread 0... [ 1204.718554][T21020] tipc: Resetting bearer [ 1205.801840][ T5913] tipc: Node number set to 134418688 [ 1205.807747][T20886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.836934][T20886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.830146][T20886] bridge_slave_0: entered allmulticast mode [ 1206.838036][T20886] bridge_slave_0: entered promiscuous mode [ 1206.915351][T20886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.198890][T20886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.209171][T21056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4095'. [ 1207.896986][T20886] bridge_slave_1: entered allmulticast mode [ 1207.973850][T20886] bridge_slave_1: entered promiscuous mode [ 1208.366755][T20886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.435873][T20886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.662017][T21078] overlayfs: failed to clone upperpath [ 1208.754354][T21079] overlayfs: failed to clone upperpath [ 1209.363770][T20886] team0: Port device team_slave_0 added [ 1209.396094][T20886] team0: Port device team_slave_1 added [ 1210.922620][T21102] xt_policy: too many policy elements [ 1211.276914][T21110] loop0: detected capacity change from 0 to 512 [ 1211.285643][T21110] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1211.380147][T21110] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4104: bg 0: block 104: invalid block bitmap [ 1211.412272][T20886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.423445][T21110] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1211.431032][T20886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.458813][T21110] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4104: invalid indirect mapped block 1 (level 1) [ 1211.476147][T21110] EXT4-fs (loop0): 1 truncate cleaned up [ 1211.492825][T21110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.521089][ T30] audit: type=1800 audit(1764321725.657:249): pid=21110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4104" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1211.529463][T20886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.582585][T17397] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.743794][T20886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.758681][T20886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.816439][T20886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.840550][T21117] netlink: 'syz.0.4106': attribute type 4 has an invalid length. [ 1212.075771][T20886] hsr_slave_0: entered promiscuous mode [ 1212.099816][T20886] hsr_slave_1: entered promiscuous mode [ 1212.116246][T20886] debugfs: 'hsr0' already exists in 'hsr' [ 1212.133450][T20886] Cannot create hsr debugfs directory [ 1214.612629][ T6598] bridge_slave_1: left allmulticast mode [ 1214.646619][ T6598] bridge_slave_1: left promiscuous mode [ 1214.712695][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.280089][ T6598] bridge_slave_0: left allmulticast mode [ 1215.301222][ T6598] bridge_slave_0: left promiscuous mode [ 1215.328575][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.272086][T21171] netlink: 'syz.3.4118': attribute type 10 has an invalid length. [ 1217.280002][T21171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4118'. [ 1217.299882][T21172] overlayfs: failed to clone upperpath [ 1217.679033][ T6598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.691789][ T6598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.703854][ T6598] bond0 (unregistering): Released all slaves [ 1218.478350][T21171] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1218.485092][T21171] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.511293][T21171] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1218.970445][ T6598] hsr_slave_0: left promiscuous mode [ 1219.398960][ T6598] hsr_slave_1: left promiscuous mode [ 1219.407600][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.419910][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.399220][ T30] audit: type=1804 audit(1764321735.457:250): pid=21237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4132" name="file0" dev="tmpfs" ino=4193 res=1 errno=0 [ 1222.011891][T21233] NFSD: Failed to start, no listeners configured. [ 1222.142264][ T6598] team0 (unregistering): Port device team_slave_1 removed [ 1222.494290][ T6598] team0 (unregistering): Port device team_slave_0 removed [ 1225.479702][T21260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1226.614672][T21293] loop0: detected capacity change from 0 to 1024 [ 1226.678434][T21293] EXT4-fs: Ignoring removed bh option [ 1226.914984][T21293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1227.275364][T17397] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.877013][T21325] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1228.883686][T21325] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1228.891697][T21325] vhci_hcd vhci_hcd.0: Device attached [ 1229.188995][ T5913] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1229.836947][T21326] vhci_hcd: connection reset by peer [ 1229.945438][ T6777] vhci_hcd vhci_hcd.0: stop threads [ 1230.006136][ T6777] vhci_hcd vhci_hcd.0: release socket [ 1230.077933][ T6777] vhci_hcd vhci_hcd.0: disconnect device [ 1230.432446][T20886] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1230.570753][T20886] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1230.599744][T20886] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1230.700041][T21339] overlayfs: failed to clone upperpath [ 1231.228810][T21340] netlink: 'syz.4.4155': attribute type 2 has an invalid length. [ 1231.309446][T20886] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1231.455113][T21354] fuse: Unknown parameter '0xffffffffffffffff' [ 1231.736859][T20886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.839690][T20886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.903066][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.910352][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.013284][ T4149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.020524][ T4149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.613738][ T5913] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1235.332874][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 1235.467182][T20886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.766515][T21404] overlayfs: failed to clone upperpath [ 1235.858311][T21405] netlink: 'syz.2.4166': attribute type 2 has an invalid length. [ 1237.018833][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4171'. [ 1237.028676][T21422] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4171'. [ 1237.976190][T20886] veth0_vlan: entered promiscuous mode [ 1238.033840][T20886] veth1_vlan: entered promiscuous mode [ 1238.056610][T21446] netlink: 'syz.0.4178': attribute type 1 has an invalid length. [ 1238.085420][T21446] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4178'. [ 1238.212370][T20886] veth0_macvtap: entered promiscuous mode [ 1238.236321][T20886] veth1_macvtap: entered promiscuous mode [ 1239.074795][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.084068][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.119269][T20886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.181870][T20886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.812125][ T7041] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.840866][ T7041] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.861773][ T7041] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.890825][ T7041] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.820987][ T6864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.878715][ T6864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.352464][ T6126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.481434][ T6126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.296167][T21541] loop0: detected capacity change from 0 to 128 [ 1248.881345][ T6864] kworker/u8:23: attempt to access beyond end of device [ 1248.881345][ T6864] loop0: rw=1, sector=145, nr_sectors = 552 limit=128 [ 1249.378905][T21558] loop0: detected capacity change from 0 to 64 [ 1250.583745][T21571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4205'. [ 1258.734155][T21637] kAFS: No cell specified [ 1267.894537][T21741] gfs2: error -5 reading superblock [ 1269.434617][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1269.454842][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1269.464944][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1269.473215][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1269.480993][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1271.146743][T21763] loop0: detected capacity change from 0 to 16 [ 1271.210820][T21763] erofs (device loop0): mounted with root inode @ nid 36. [ 1271.544721][T21765] erofs (device loop0): inline data across blocks @ nid 36 [ 1271.552277][T21765] syz.0.4245: attempt to access beyond end of device [ 1271.552277][T21765] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 1271.608814][T14296] Bluetooth: hci3: command tx timeout [ 1273.166523][T21785] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value [ 1273.788756][T14296] Bluetooth: hci3: command tx timeout [ 1273.980126][T21789] loop8: detected capacity change from 0 to 512 [ 1273.994004][T21789] EXT4-fs: Ignoring removed oldalloc option [ 1274.022368][T21752] chnl_net:caif_netlink_parms(): no params data found [ 1274.029743][T21789] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 1274.237949][ T30] audit: type=1326 audit(1764321788.367:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21792 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1274.800340][ T30] audit: type=1326 audit(1764321788.367:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21792 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1274.843527][ T30] audit: type=1326 audit(1764321788.367:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21792 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1274.866187][ T30] audit: type=1326 audit(1764321788.367:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21792 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1274.900847][ T30] audit: type=1326 audit(1764321788.367:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21792 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1275.055162][ T30] audit: type=1326 audit(1764321788.917:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21792 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1275.094284][ T30] audit: type=1326 audit(1764321789.027:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21792 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1275.135721][ T30] audit: type=1326 audit(1764321789.027:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21792 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1275.169358][ T30] audit: type=1326 audit(1764321789.257:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21792 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1275.193384][ T30] audit: type=1326 audit(1764321789.257:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21792 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1275.854338][T21752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.881510][ T5846] Bluetooth: hci3: command tx timeout [ 1275.913530][T21752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.920997][T21752] bridge_slave_0: entered allmulticast mode [ 1275.929271][T21752] bridge_slave_0: entered promiscuous mode [ 1275.938074][T21752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.945650][T21752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.953208][T21752] bridge_slave_1: entered allmulticast mode [ 1275.971345][T21752] bridge_slave_1: entered promiscuous mode [ 1276.269243][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'. [ 1277.348945][T21825] kAFS: No cell specified [ 1277.741418][T21752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.903397][T21752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.913847][ T5846] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1277.994095][ T5846] Bluetooth: hci3: command tx timeout [ 1278.619718][T21752] team0: Port device team_slave_0 added [ 1278.670688][T21752] team0: Port device team_slave_1 added [ 1278.895751][T21752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.938832][T21752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.994448][T21752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.013333][T21752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.021319][T21752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.047869][T21752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.328346][T21839] loop0: detected capacity change from 0 to 512 [ 1279.343188][T21839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1279.753254][T21752] hsr_slave_0: entered promiscuous mode [ 1279.776213][T21839] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.4262: corrupted in-inode xattr: e_value size too large [ 1279.791710][T21839] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4262: couldn't read orphan inode 15 (err -117) [ 1279.794047][T21752] hsr_slave_1: entered promiscuous mode [ 1279.811491][T21752] debugfs: 'hsr0' already exists in 'hsr' [ 1279.812370][T21839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.817337][T21752] Cannot create hsr debugfs directory [ 1280.005875][T17397] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.587344][T21857] efs: cannot read volume header [ 1287.330017][T21900] mkiss: ax0: crc mode is auto. [ 1287.559821][T21752] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1287.577189][T21752] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1287.684748][T21917] overlayfs: failed to clone upperpath [ 1288.156211][T21752] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1288.185242][T21752] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1290.084733][T21752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.160705][T21752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.231617][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.238844][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.502073][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.509261][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.192232][T21752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1291.203070][T21752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1291.528913][T21964] loop8: detected capacity change from 0 to 32768 [ 1291.604543][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4286'. [ 1295.071961][T21995] overlayfs: failed to clone upperpath [ 1299.186064][T21752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.223032][T22018] overlayfs: missing 'lowerdir' [ 1300.231909][T22018] /dev/nullb0: Can't lookup blockdev [ 1300.277651][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.284839][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.781872][T21752] veth0_vlan: entered promiscuous mode [ 1304.049898][T21752] veth1_vlan: entered promiscuous mode [ 1305.155003][T21752] veth0_macvtap: entered promiscuous mode [ 1305.204036][T21752] veth1_macvtap: entered promiscuous mode [ 1305.384218][T21752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.398405][T21752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1305.415580][ T7041] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.463197][ T7041] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.133175][ T7041] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.236067][ T7041] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.432853][ T7041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.474456][ T7041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.026057][ T4176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.049465][ T4176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.255906][T22117] overlayfs: failed to clone upperpath [ 1311.573784][T22139] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4318'. [ 1312.015588][T22148] usb usb8: usbfs: process 22148 (syz.9.4319) did not claim interface 0 before use [ 1312.665763][T22095] mkiss: ax0: crc mode is auto. [ 1313.772674][T22139] bond0 (unregistering): Released all slaves [ 1316.014329][T22168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1316.152082][T22181] fuse: Bad value for 'fd' [ 1316.165823][T22182] Bluetooth: MGMT ver 1.23 [ 1317.804671][T14296] Bluetooth: hci5: command 0x0406 tx timeout [ 1318.500118][T22201] overlayfs: failed to clone upperpath [ 1323.456382][T14296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1323.509041][T14296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1323.521648][T14296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1323.531024][T14296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1323.542595][T14296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1325.689796][T14296] Bluetooth: hci4: command tx timeout [ 1327.708896][ T5846] Bluetooth: hci4: command tx timeout [ 1327.782061][T22290] loop0: detected capacity change from 0 to 128 [ 1327.847332][T22250] chnl_net:caif_netlink_parms(): no params data found [ 1329.893463][ T5846] Bluetooth: hci4: command tx timeout [ 1330.899846][T22326] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4354'. [ 1330.976665][T18704] kworker/u8:11: attempt to access beyond end of device [ 1330.976665][T18704] loop0: rw=1, sector=145, nr_sectors = 688 limit=128 [ 1331.046014][T22250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.060049][T22250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.082770][T22250] bridge_slave_0: entered allmulticast mode [ 1331.103830][T22250] bridge_slave_0: entered promiscuous mode [ 1331.122649][T22250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.140965][T22250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.165082][T22250] bridge_slave_1: entered allmulticast mode [ 1331.227308][T22250] bridge_slave_1: entered promiscuous mode [ 1331.989529][ T5846] Bluetooth: hci4: command tx timeout [ 1332.019442][T22338] overlayfs: failed to clone upperpath [ 1332.118126][T22250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1332.147436][T22250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.214439][T22250] team0: Port device team_slave_0 added [ 1332.237893][T22250] team0: Port device team_slave_1 added [ 1333.192286][T22360] loop9: detected capacity change from 0 to 4096 [ 1333.240054][T22250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.301086][T22250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.388657][T22250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.423050][T22250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.451837][T22250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.702564][T22250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.743852][T22360] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1333.816317][T22360] ntfs3(loop9): ino=3, mi_enum_attr [ 1333.826015][T22360] ntfs3(loop9): ino=2, mi_enum_attr [ 1333.836705][T22360] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1333.845098][T22360] ntfs3(loop9): Failed to load $LogFile (-22). [ 1336.236350][T22412] Cannot find set identified by id 0 to match [ 1336.258929][T20276] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1336.508730][T20276] usb 10-1: Using ep0 maxpacket: 32 [ 1336.543740][T20276] usb 10-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 1336.591554][T20276] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 1336.896416][T20276] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1337.423273][T20276] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.431465][T20276] usb 10-1: Product: syz [ 1337.435822][T20276] usb 10-1: Manufacturer: syz [ 1337.440595][T20276] usb 10-1: SerialNumber: syz [ 1337.546488][T22420] binder: 22417:22420 ioctl 400c620e 0 returned -14 [ 1337.954737][T22250] hsr_slave_0: entered promiscuous mode [ 1338.049590][T22250] hsr_slave_1: entered promiscuous mode [ 1338.105547][T22250] debugfs: 'hsr0' already exists in 'hsr' [ 1338.134735][T22250] Cannot create hsr debugfs directory [ 1339.091974][T20276] usb 10-1: USB disconnect, device number 7 [ 1340.511527][T22446] loop0: detected capacity change from 0 to 128 [ 1342.605622][T22446] FAT-fs (loop0): bogus sectors per cluster 0 [ 1342.672156][T22446] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1346.496573][T22477] loop9: detected capacity change from 0 to 32768 [ 1346.509093][T22477] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4387 (22477) [ 1346.538972][T22477] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1346.549178][T22477] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1346.689675][T22477] BTRFS info (device loop9): enabling ssd optimizations [ 1346.696669][T22477] BTRFS info (device loop9): turning on async discard [ 1346.703552][T22477] BTRFS info (device loop9): enabling free space tree [ 1346.734281][T22498] loop0: detected capacity change from 0 to 16 [ 1346.757072][T22498] erofs (device loop0): mounted with root inode @ nid 36. [ 1346.856284][T22503] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1346.916877][T22503] erofs (device loop0): readahead error at folio 87 @ nid 36 [ 1346.916959][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1346.917004][ T30] audit: type=1804 audit(1764321861.047:262): pid=22504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4390" name="file0" dev="tmpfs" ino=1715 res=1 errno=0 [ 1347.093366][T22503] erofs (device loop0): readahead error at folio 86 @ nid 36 [ 1347.128299][T22505] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1347.151025][T22505] erofs (device loop0): read error -117 @ 43 of nid 36 [ 1347.258808][T22503] syz.0.4389: attempt to access beyond end of device [ 1347.258808][T22503] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1347.274331][T22503] syz.0.4389: attempt to access beyond end of device [ 1347.274331][T22503] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 1347.302927][T22503] erofs (device loop0): failed to decompress -24 in[52, 4044] out[3749] [ 1348.924018][T21752] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1349.246286][T22524] mmap: syz.2.4395 (22524): VmData 25976832 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 1350.240400][T22533] mkiss: ax0: crc mode is auto. [ 1351.510214][T22250] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1351.526112][T22250] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1351.537176][T22250] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1351.549222][T22250] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1351.626352][T22250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.650387][T22250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.663612][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.670804][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.702073][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.709220][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.051400][T22557] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4401'. [ 1352.060775][T22557] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1352.669360][T22250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.987526][T22587] loop9: detected capacity change from 0 to 47 [ 1355.164727][T22250] veth0_vlan: entered promiscuous mode [ 1355.272143][T22591] MINIX-fs: deleted inode referenced: 9 [ 1355.281519][T22591] MINIX-fs: deleted inode referenced: 9 [ 1355.688344][T22250] veth1_vlan: entered promiscuous mode [ 1355.938781][T22593] netlink: 'syz.2.4408': attribute type 1 has an invalid length. [ 1356.332214][T22250] veth0_macvtap: entered promiscuous mode [ 1356.462762][T22250] veth1_macvtap: entered promiscuous mode [ 1356.508062][T22250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1356.622759][T22597] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4410'. [ 1356.745795][T22250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.161338][T22386] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.194308][T22386] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.235308][T22599] loop9: detected capacity change from 0 to 512 [ 1357.252000][ T6126] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.274364][T22599] EXT4-fs: Ignoring removed oldalloc option [ 1357.298074][ T6126] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.349831][T22599] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 1358.663232][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1358.672769][T22611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1358.682237][T22611] netlink: 'syz.2.4413': attribute type 18 has an invalid length. [ 1359.150197][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1359.159165][T22611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1359.168890][T22611] netlink: 'syz.2.4413': attribute type 18 has an invalid length. [ 1359.314841][ T6166] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.616571][ T6166] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1360.470916][ T6166] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1361.450866][T22623] loop0: detected capacity change from 0 to 4096 [ 1361.477176][T22623] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1361.716218][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.910906][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.535490][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.611981][T22623] ntfs3(loop0): ino=1d, mi_enum_attr [ 1362.617923][T22623] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1362.764206][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.865571][T22364] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.002429][T22623] ntfs3(loop0): ino=1d, mi_enum_attr [ 1363.253816][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.295045][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.307776][T22623] ntfs3(loop0): ino=1d, "file1" mi_enum_attr [ 1364.759445][T22650] pim6reg: entered allmulticast mode [ 1366.922619][T22672] overlayfs: overlapping lowerdir path [ 1367.742147][T22658] overlayfs: failed to resolve './file1': -2 [ 1367.755507][T22658] 9p: Bad value for 'wfdno' [ 1368.196292][T22682] loop7: detected capacity change from 0 to 1024 [ 1368.454745][T22682] hfsplus: failed to load extents file [ 1369.219983][T22698] Invalid source name [ 1369.224009][T22698] UBIFS error (pid: 22698): cannot open "./file0", error -22 [ 1369.970341][T22687] loop0: detected capacity change from 0 to 256 [ 1370.353109][T22687] exfat: Deprecated parameter 'utf8' [ 1370.387079][T22687] exfat: Deprecated parameter 'namecase' [ 1370.660124][T22687] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1377.227438][T22733] loop9: detected capacity change from 0 to 2048 [ 1378.308540][T22745] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1379.534075][ T5846] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 1380.385288][T22760] loop7: detected capacity change from 0 to 32768 [ 1380.408699][T22760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4451 (22760) [ 1380.444692][T22760] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1380.455072][T22760] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1380.517650][ T30] audit: type=1326 audit(1764321894.647:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22764 comm="syz.2.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2576b8f749 code=0x7ffc0000 [ 1380.559332][ T30] audit: type=1326 audit(1764321894.677:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22764 comm="syz.2.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2576b8f749 code=0x7ffc0000 [ 1380.591027][ T30] audit: type=1326 audit(1764321894.677:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22764 comm="syz.2.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2576b8f749 code=0x7ffc0000 [ 1380.630548][ T30] audit: type=1326 audit(1764321894.677:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22764 comm="syz.2.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2576b8f749 code=0x7ffc0000 [ 1380.684299][T22745] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1380.722480][T22745] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1380.747908][ T30] audit: type=1326 audit(1764321894.677:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22764 comm="syz.2.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2576b8f749 code=0x7ffc0000 [ 1380.903621][T22760] BTRFS info (device loop7): enabling ssd optimizations [ 1380.911046][T22760] BTRFS info (device loop7): turning on async discard [ 1380.917839][T22760] BTRFS info (device loop7): enabling free space tree [ 1380.928977][ T30] audit: type=1326 audit(1764321894.677:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22764 comm="syz.2.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2576b8f749 code=0x7ffc0000 [ 1380.939471][T22745] Remounting filesystem read-only [ 1380.955774][ T30] audit: type=1326 audit(1764321894.677:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22764 comm="syz.2.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2576b8f749 code=0x7ffc0000 [ 1381.549461][T21752] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 1381.608950][ T30] audit: type=1326 audit(1764321894.677:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22764 comm="syz.2.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2576b8f749 code=0x7ffc0000 [ 1381.838227][ T30] audit: type=1326 audit(1764321894.677:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22764 comm="syz.2.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2576b8f749 code=0x7ffc0000 [ 1382.534429][T22788] loop9: detected capacity change from 0 to 512 [ 1382.605639][T22788] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1382.627652][ T30] audit: type=1326 audit(1764321894.677:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22764 comm="syz.2.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2576b8f749 code=0x7ffc0000 [ 1382.862101][T22250] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1386.499255][T22731] syz.0.4439 (22731): drop_caches: 2 [ 1387.737136][T22829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4466'. [ 1387.754847][T22829] wg1: entered promiscuous mode [ 1388.827931][T22846] overlayfs: failed to clone upperpath [ 1391.678340][T22860] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1394.589094][T14296] Bluetooth: hci3: command 0x0406 tx timeout [ 1396.803719][T22894] affs: No valid root block on device nullb0 [ 1397.015743][T22377] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.286499][ T30] kauditd_printk_skb: 196 callbacks suppressed [ 1399.286516][ T30] audit: type=1326 audit(1764321913.417:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22902 comm="syz.0.4485" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32d1b8f749 code=0x0 [ 1399.593878][T22914] set match dimension is over the limit! [ 1405.906488][T14296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1405.930905][T14296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1405.940994][T14296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1405.954008][T14296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1405.965655][T14296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1406.821568][T22951] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1407.025865][T22377] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.028744][T14296] Bluetooth: hci5: command tx timeout [ 1408.034685][T22377] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.331429][T22377] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.967406][T22972] Cannot find set identified by id 0 to match [ 1410.108819][T14296] Bluetooth: hci5: command tx timeout [ 1411.556066][T22942] chnl_net:caif_netlink_parms(): no params data found [ 1411.954493][T22994] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1411.963676][T22994] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1412.192575][T14296] Bluetooth: hci5: command tx timeout [ 1412.503884][ T30] audit: type=1326 audit(1764321926.637:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22987 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1b8f749 code=0x7ffc0000 [ 1412.542435][ T30] audit: type=1326 audit(1764321926.637:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22987 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1b8f749 code=0x7ffc0000 [ 1412.591475][ T30] audit: type=1326 audit(1764321926.667:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22987 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f32d1b8f749 code=0x7ffc0000 [ 1412.710595][T22377] bridge_slave_1: left allmulticast mode [ 1412.716257][T22377] bridge_slave_1: left promiscuous mode [ 1412.767658][ T30] audit: type=1326 audit(1764321926.667:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22987 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1b8f749 code=0x7ffc0000 [ 1412.791953][T22377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.827302][T22377] bridge_slave_0: left allmulticast mode [ 1412.843678][T22377] bridge_slave_0: left promiscuous mode [ 1413.016700][ T30] audit: type=1326 audit(1764321926.667:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22987 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1b8f749 code=0x7ffc0000 [ 1413.049369][T22377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.137190][ T30] audit: type=1326 audit(1764321926.667:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22987 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f32d1b8f749 code=0x7ffc0000 [ 1413.175750][ T30] audit: type=1326 audit(1764321926.667:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22987 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1b8f749 code=0x7ffc0000 [ 1413.517467][ T30] audit: type=1326 audit(1764321926.667:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22987 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1b8f749 code=0x7ffc0000 [ 1414.121402][ T30] audit: type=1326 audit(1764321927.677:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23005 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1414.268746][T14296] Bluetooth: hci5: command tx timeout [ 1414.269007][ T30] audit: type=1326 audit(1764321927.677:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23005 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe591d8f749 code=0x7ffc0000 [ 1414.434566][T23012] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1414.594897][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1414.605970][T23017] netlink: 'syz.0.4507': attribute type 5 has an invalid length. [ 1414.616167][T23017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1417.724733][T23036] netlink: 'syz.2.4516': attribute type 10 has an invalid length. [ 1418.286181][T22377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.310694][T22377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.337383][T22377] bond0 (unregistering): Released all slaves [ 1418.542715][T23017] geneve2: entered promiscuous mode [ 1418.573663][T23017] geneve2: entered allmulticast mode [ 1418.602620][T23036] veth0_vlan: left promiscuous mode [ 1418.728988][T23036] veth0_vlan: entered promiscuous mode [ 1418.751211][T23036] team0: Device veth0_vlan failed to register rx_handler [ 1419.134823][T23049] random: crng reseeded on system resumption [ 1419.292516][T23049] loop7: detected capacity change from 0 to 256 [ 1419.466721][T23049] exFAT-fs (loop7): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1421.544984][T22370] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1421.672741][T22370] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1421.735557][T22370] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1421.754767][T22370] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1421.782208][ T24] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1422.091794][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11 [ 1422.174251][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8225, setting to 1024 [ 1422.186802][ T24] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1422.255468][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.395468][ T24] usb 8-1: config 0 descriptor?? [ 1422.749533][T22942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.758001][T22942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.765360][T22942] bridge_slave_0: entered allmulticast mode [ 1422.773495][T22942] bridge_slave_0: entered promiscuous mode [ 1422.787301][T22942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.796095][T22942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.866214][T22942] bridge_slave_1: entered allmulticast mode [ 1422.891875][T22942] bridge_slave_1: entered promiscuous mode [ 1422.919614][ T24] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 1423.037856][ T24] cm6533_jd 0003:0D8C:0022.001D: item fetching failed at offset 4/5 [ 1423.047228][ T24] cm6533_jd 0003:0D8C:0022.001D: parse failed [ 1423.054045][ T24] cm6533_jd 0003:0D8C:0022.001D: probe with driver cm6533_jd failed with error -22 [ 1424.046484][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.053112][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.075978][T23069] geneve3: entered allmulticast mode [ 1424.617096][T22942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.617964][ T7235] usb 8-1: USB disconnect, device number 34 [ 1424.768375][T23090] loop7: detected capacity change from 0 to 256 [ 1425.752371][T23090] exfat: Deprecated parameter 'utf8' [ 1425.766868][T22377] hsr_slave_0: left promiscuous mode [ 1426.008189][T23090] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1426.048778][T22377] hsr_slave_1: left promiscuous mode [ 1426.102900][T22377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.148490][T22377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.181653][T23090] overlay: filesystem on ./file0 not supported [ 1426.196235][T22377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.204976][T23100] loop0: detected capacity change from 0 to 32768 [ 1426.208052][T22377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.225658][T23100] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4531 (23100) [ 1426.242875][T23100] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1426.253723][T23100] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1426.270648][T14296] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1427.256911][T22377] veth1_macvtap: left promiscuous mode [ 1427.288167][T23100] BTRFS info (device loop0): enabling ssd optimizations [ 1427.292437][T22377] veth0_macvtap: left promiscuous mode [ 1427.295558][T23100] BTRFS info (device loop0): turning on async discard [ 1427.307613][T23100] BTRFS info (device loop0): enabling free space tree [ 1427.308869][T22377] veth1_vlan: left promiscuous mode [ 1427.332937][T22377] veth0_vlan: left promiscuous mode [ 1428.314692][T17397] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1430.024303][T23140] loop0: detected capacity change from 0 to 4096 [ 1430.042814][T23140] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1430.102922][T23140] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1430.111217][T23140] ntfs3(loop0): mft corrupted [ 1430.115993][T23140] ntfs3(loop0): Failed to load $Extend (-22). [ 1430.152088][T23140] ntfs3(loop0): Failed to initialize $Extend. [ 1430.589307][T23146] ntfs3(loop0): ino=1e, mi_enum_attr [ 1430.594756][T23146] ntfs3(loop0): ino=1e, mi_enum_attr [ 1431.318177][T23146] ntfs3(loop0): ino=1e, "file1" mi_enum_attr [ 1431.327621][T23146] ntfs3(loop0): ino=1e, "file1" mi_enum_attr [ 1431.341470][T23146] ntfs3(loop0): ino=1e, "file1" mi_enum_attr [ 1432.013849][T22377] team0 (unregistering): Port device team_slave_1 removed [ 1432.121006][T22377] team0 (unregistering): Port device team_slave_0 removed [ 1432.620973][T23161] loop0: detected capacity change from 0 to 1024 [ 1432.634281][T23161] EXT4-fs: Ignoring removed oldalloc option [ 1432.640408][T23161] EXT4-fs: Ignoring removed bh option [ 1433.110812][T23161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.356925][T17397] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.879071][T23187] netlink: 'syz.0.4546': attribute type 2 has an invalid length. [ 1437.873601][T22942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.141618][T22942] team0: Port device team_slave_0 added [ 1438.184672][T22942] team0: Port device team_slave_1 added [ 1439.461473][T22942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.468466][T22942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.680859][T22942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.966561][T22942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.100252][T22942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.545371][T22942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.067297][T22942] hsr_slave_0: entered promiscuous mode [ 1442.289456][T22942] hsr_slave_1: entered promiscuous mode [ 1443.283439][T22942] debugfs: 'hsr0' already exists in 'hsr' [ 1444.145193][T22942] Cannot create hsr debugfs directory [ 1445.789182][T14296] Bluetooth: hci4: command 0x0406 tx timeout [ 1445.893662][ T5846] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1446.710639][ T7235] IPVS: starting estimator thread 0... [ 1446.727508][T22386] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.765363][T23244] loop0: detected capacity change from 0 to 256 [ 1446.772476][T23244] exfat: Deprecated parameter 'utf8' [ 1446.797936][T23244] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1446.849964][T23245] IPVS: using max 50 ests per chain, 120000 per kthread [ 1447.957198][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1447.957218][ T30] audit: type=1326 audit(1764321961.597:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23254 comm="syz.2.4565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2576b8f749 code=0x0 [ 1447.990895][T22386] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.060877][T23266] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4567'. [ 1449.076345][T22386] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.077371][T23266] Cannot find add_set index 0 as target [ 1450.096866][T22386] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.444665][T23280] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 1450.451302][T23280] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1450.463887][T23280] vhci_hcd vhci_hcd.0: Device attached [ 1450.749019][T20313] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 1451.132353][T23285] vhci_hcd: connection reset by peer [ 1451.254529][T22364] vhci_hcd vhci_hcd.7: stop threads [ 1451.335149][T22364] vhci_hcd vhci_hcd.7: release socket [ 1451.421911][T22364] vhci_hcd vhci_hcd.7: disconnect device [ 1451.933346][T23293] loop7: detected capacity change from 0 to 32768 [ 1451.944825][T23293] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4574 (23293) [ 1451.980270][T23293] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1451.990499][T23293] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1452.084898][T23305] loop0: detected capacity change from 0 to 512 [ 1452.145891][T23293] BTRFS info (device loop7): enabling ssd optimizations [ 1452.152956][T23293] BTRFS info (device loop7): turning on async discard [ 1452.159823][T23293] BTRFS info (device loop7): enabling free space tree [ 1452.175422][T23305] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1452.620663][ T30] audit: type=1800 audit(1764321966.567:496): pid=23313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4574" name="file2" dev="loop7" ino=261 res=0 errno=0 [ 1453.006904][T23305] EXT4-fs (loop0): 1 truncate cleaned up [ 1453.056449][T23305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1453.075023][T22250] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1453.872751][T17397] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.692922][T23332] veth0_to_team: entered promiscuous mode [ 1455.969139][T22386] bridge_slave_1: left allmulticast mode [ 1455.974832][T22386] bridge_slave_1: left promiscuous mode [ 1455.982282][T22386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.141758][T22386] bridge_slave_0: left allmulticast mode [ 1456.184273][T22386] bridge_slave_0: left promiscuous mode [ 1456.289698][T22386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.319438][T20313] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1456.524102][T23358] overlayfs: failed to clone upperpath [ 1459.902495][T22386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1459.916585][T22386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1459.929143][T22386] bond0 (unregistering): Released all slaves [ 1459.949604][T23360] pimreg: entered allmulticast mode [ 1462.052482][T23393] overlayfs: failed to resolve './cgroup': -2 [ 1463.893262][T23401] IPv6: NLM_F_CREATE should be specified when creating new route [ 1463.972698][T14296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1463.989317][T14296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1464.007627][T14296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1464.130461][T14296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1464.138274][T14296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1464.212836][T23407] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4596'. [ 1464.525021][T22386] hsr_slave_0: left promiscuous mode [ 1464.544142][T22386] hsr_slave_1: left promiscuous mode [ 1464.562849][T22386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.571898][T22386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.582953][T22386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1464.590625][T22386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1464.686462][T22386] veth1_macvtap: left promiscuous mode [ 1464.702132][T22386] veth0_macvtap: left promiscuous mode [ 1464.716199][T22386] veth1_vlan: left promiscuous mode [ 1464.729184][T22386] veth0_vlan: left promiscuous mode [ 1466.394745][T23432] loop7: detected capacity change from 0 to 256 [ 1466.435783][T14296] Bluetooth: hci3: command tx timeout [ 1467.592380][T23437] loop7: detected capacity change from 0 to 1024 [ 1467.728552][T23437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1468.066756][T20278] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1468.989664][T14296] Bluetooth: hci3: command tx timeout [ 1469.023364][T23449] loop0: detected capacity change from 0 to 16 [ 1469.088714][T20278] usb 8-1: Using ep0 maxpacket: 32 [ 1469.105091][T23449] erofs (device loop0): mounted with root inode @ nid 36. [ 1469.115369][T20278] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1469.430585][T20278] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.451367][T20278] usb 8-1: config 0 descriptor?? [ 1469.472692][T20278] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1470.078359][T23455] Bluetooth: MGMT ver 1.23 [ 1470.500925][T22386] team0 (unregistering): Port device team_slave_1 removed [ 1470.584764][T22386] team0 (unregistering): Port device team_slave_0 removed [ 1471.020171][T20278] gspca_vc032x: reg_w err -110 [ 1471.032802][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.061197][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.066512][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.071864][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.077167][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.078719][ T5846] Bluetooth: hci3: command tx timeout [ 1471.082860][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.109605][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.114920][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.120377][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.128887][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.134197][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.153651][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.159130][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.182297][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.187622][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.194733][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.201024][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.206328][T20278] gspca_vc032x: I2c Bus Busy Wait 00 [ 1471.227665][T20278] gspca_vc032x: Unknown sensor... [ 1471.253910][T20278] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 1471.491233][T23459] loop0: detected capacity change from 0 to 256 [ 1471.993580][ T24] usb 8-1: USB disconnect, device number 35 [ 1472.079908][T22250] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.734225][T23472] Device name not specified. [ 1472.734225][T23472] [ 1473.149203][ T5846] Bluetooth: hci3: command tx timeout [ 1474.396889][T23408] chnl_net:caif_netlink_parms(): no params data found [ 1474.979676][T23487] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1475.247492][T22386] bridge_slave_1: left allmulticast mode [ 1475.297704][T22386] bridge_slave_1: left promiscuous mode [ 1475.336727][T22386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.379952][T22386] bridge_slave_0: left allmulticast mode [ 1475.385675][T22386] bridge_slave_0: left promiscuous mode [ 1475.402772][T22386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.161859][T22386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.175042][T22386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.295437][T22386] bond0 (unregistering): Released all slaves [ 1478.940967][T23408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.048272][T23408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.118388][T23408] bridge_slave_0: entered allmulticast mode [ 1479.580759][T23408] bridge_slave_0: entered promiscuous mode [ 1480.137697][T23516] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1480.232047][T22386] hsr_slave_0: left promiscuous mode [ 1480.247435][T22386] hsr_slave_1: left promiscuous mode [ 1480.257461][T22386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.402177][T22386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1480.921242][T23534] program syz.0.4621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1481.110954][T22386] team0 (unregistering): Port device team_slave_1 removed [ 1481.168197][T22386] team0 (unregistering): Port device team_slave_0 removed [ 1482.713659][T23408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.721344][T23408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.729956][T23408] bridge_slave_1: entered allmulticast mode [ 1482.737392][T23408] bridge_slave_1: entered promiscuous mode [ 1484.226381][T23408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.350848][T23408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.597957][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.616771][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.244392][T23562] overlayfs: failed to resolve './file1': -2 [ 1485.410036][T23408] team0: Port device team_slave_0 added [ 1485.424840][T23408] team0: Port device team_slave_1 added [ 1485.535991][T23408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.560698][T23408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.619179][T23408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.632935][T23408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.639977][T23408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.665971][T23408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.741102][T23408] hsr_slave_0: entered promiscuous mode [ 1485.764505][T23408] hsr_slave_1: entered promiscuous mode [ 1485.788114][T23408] debugfs: 'hsr0' already exists in 'hsr' [ 1485.795489][T23408] Cannot create hsr debugfs directory [ 1485.848445][T23575] dvmrp6: entered allmulticast mode [ 1485.865329][T23572] pimreg: entered allmulticast mode [ 1487.144098][T23584] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1488.883762][T23572] pimreg: left allmulticast mode [ 1488.901803][T23589] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4638'. [ 1489.202739][T23592] random: crng reseeded on system resumption [ 1490.231052][T23408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1491.084264][T23408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1491.985891][T23408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1492.151437][T23408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1492.915329][T23408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.968831][T23408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1493.033403][ T7235] [ 1493.035751][ T7235] ============================================ [ 1493.041876][ T7235] WARNING: possible recursive locking detected [ 1493.048013][ T7235] syzkaller #0 Not tainted [ 1493.052408][ T7235] -------------------------------------------- [ 1493.058542][ T7235] kworker/0:12/7235 is trying to acquire lock: [ 1493.064672][ T7235] ffff888028e68958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 1493.074485][ T7235] [ 1493.074485][ T7235] but task is already holding lock: [ 1493.081831][ T7235] ffff888028854158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: __dev_queue_xmit+0x1171/0x3140 [ 1493.091910][ T7235] [ 1493.091910][ T7235] other info that might help us debug this: [ 1493.099954][ T7235] Possible unsafe locking scenario: [ 1493.099954][ T7235] [ 1493.107404][ T7235] CPU0 [ 1493.110672][ T7235] ---- [ 1493.113938][ T7235] lock(&qdisc_xmit_lock_key#3); [ 1493.119042][ T7235] lock(&qdisc_xmit_lock_key#3); [ 1493.124057][ T7235] [ 1493.124057][ T7235] *** DEADLOCK *** [ 1493.124057][ T7235] [ 1493.132183][ T7235] May be due to missing lock nesting notation [ 1493.132183][ T7235] [ 1493.140482][ T7235] 12 locks held by kworker/0:12/7235: [ 1493.145838][ T7235] #0: ffff88814c89fd48 ((wq_completion)mld){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 [ 1493.155920][ T7235] #1: ffffc90003457b80 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 [ 1493.168432][ T7235] #2: ffff88803c407538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd60 [ 1493.177672][ T7235] #3: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1e7/0xe60 [ 1493.186892][ T7235] #4: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1493.195957][ T7235] #5: ffffffff8df41a40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x3140 [ 1493.205878][ T7235] #6: ffff888028854158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: __dev_queue_xmit+0x1171/0x3140 [ 1493.216404][ T7235] #7: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1493.225275][ T7235] #8: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 1493.235014][ T7235] #9: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1493.243796][ T7235] #10: ffffffff8df41a40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x3140 [ 1493.253792][ T7235] #11: ffff88802a607228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xeb4/0x3140 [ 1493.266406][ T7235] [ 1493.266406][ T7235] stack backtrace: [ 1493.272291][ T7235] CPU: 0 UID: 0 PID: 7235 Comm: kworker/0:12 Not tainted syzkaller #0 PREEMPT(full) [ 1493.272309][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1493.272320][ T7235] Workqueue: mld mld_ifc_work [ 1493.272341][ T7235] Call Trace: [ 1493.272349][ T7235] [ 1493.272356][ T7235] dump_stack_lvl+0x189/0x250 [ 1493.272375][ T7235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1493.272390][ T7235] ? __pfx__printk+0x10/0x10 [ 1493.272407][ T7235] ? unwind_next_frame+0xa5/0x2390 [ 1493.272425][ T7235] ? print_lock_name+0xde/0x100 [ 1493.272445][ T7235] print_deadlock_bug+0x279/0x290 [ 1493.272462][ T7235] __lock_acquire+0x2540/0x2cf0 [ 1493.272479][ T7235] ? validate_xmit_skb+0xd78/0x1500 [ 1493.272499][ T7235] ? __lock_acquire+0x6b6/0x2cf0 [ 1493.272519][ T7235] ? sch_direct_xmit+0x153/0x4b0 [ 1493.272533][ T7235] lock_acquire+0x117/0x340 [ 1493.272545][ T7235] ? sch_direct_xmit+0x153/0x4b0 [ 1493.272564][ T7235] _raw_spin_lock+0x2e/0x40 [ 1493.272577][ T7235] ? sch_direct_xmit+0x153/0x4b0 [ 1493.272590][ T7235] sch_direct_xmit+0x153/0x4b0 [ 1493.272607][ T7235] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1493.272621][ T7235] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1493.272638][ T7235] __dev_queue_xmit+0x136f/0x3140 [ 1493.272659][ T7235] ? __dev_queue_xmit+0x289/0x3140 [ 1493.272681][ T7235] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1493.272700][ T7235] ? arpt_do_table+0x238/0x1fd0 [ 1493.272716][ T7235] ? __pfx_arpt_do_table+0x10/0x10 [ 1493.272738][ T7235] ? NF_HOOK+0x9e/0x3a0 [ 1493.272755][ T7235] NF_HOOK+0x310/0x3a0 [ 1493.272772][ T7235] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1493.272789][ T7235] ? NF_HOOK+0x9e/0x3a0 [ 1493.272804][ T7235] ? __pfx_NF_HOOK+0x10/0x10 [ 1493.272820][ T7235] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1493.272840][ T7235] arp_xmit+0x16c/0x270 [ 1493.272856][ T7235] ? arp_xmit+0x23/0x270 [ 1493.272872][ T7235] arp_solicit+0xc08/0xe70 [ 1493.272891][ T7235] ? arp_solicit+0x116/0xe70 [ 1493.272908][ T7235] ? __skb_clone+0x63/0x7a0 [ 1493.272924][ T7235] ? __pfx_arp_solicit+0x10/0x10 [ 1493.272944][ T7235] ? __neigh_event_send+0xed6/0x1520 [ 1493.272960][ T7235] ? __pfx_arp_solicit+0x10/0x10 [ 1493.272976][ T7235] __neigh_event_send+0xf3e/0x1520 [ 1493.272995][ T7235] neigh_resolve_output+0x198/0x750 [ 1493.273010][ T7235] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1493.273030][ T7235] ip_finish_output2+0xd40/0x1160 [ 1493.273046][ T7235] ? ip_skb_dst_mtu+0x18d/0xb70 [ 1493.273062][ T7235] ? ip_finish_output2+0x452/0x1160 [ 1493.273079][ T7235] ? __pfx_ip_finish_output2+0x10/0x10 [ 1493.273095][ T7235] ? ip_skb_dst_mtu+0x18d/0xb70 [ 1493.273110][ T7235] ? ip_skb_dst_mtu+0x917/0xb70 [ 1493.273125][ T7235] ? ip_finish_output+0x33a/0x3f0 [ 1493.273141][ T7235] ip_output+0x29f/0x450 [ 1493.273155][ T7235] ? ip_output+0x5b/0x450 [ 1493.273170][ T7235] iptunnel_xmit+0x5f8/0xa90 [ 1493.273188][ T7235] ip_tunnel_xmit+0x1c41/0x2390 [ 1493.273213][ T7235] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1493.273230][ T7235] ? gre_build_header+0x3fd/0xa40 [ 1493.273248][ T7235] ? __pfx_gre_build_header+0x10/0x10 [ 1493.273265][ T7235] ? iptunnel_handle_offloads+0x2fd/0x630 [ 1493.273280][ T7235] ipgre_xmit+0x89e/0xc50 [ 1493.273299][ T7235] ? __pfx_ipgre_xmit+0x10/0x10 [ 1493.273318][ T7235] dev_hard_start_xmit+0x2cd/0x800 [ 1493.273340][ T7235] __dev_queue_xmit+0x1493/0x3140 [ 1493.273361][ T7235] ? __dev_queue_xmit+0x289/0x3140 [ 1493.273379][ T7235] ? in6_dev_get+0x1a/0x290 [ 1493.273394][ T7235] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1493.273407][ T7235] ? lockdep_hardirqs_on+0x98/0x140 [ 1493.273423][ T7235] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1493.273440][ T7235] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1493.273453][ T7235] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1493.273467][ T7235] ? do_raw_spin_unlock+0x122/0x240 [ 1493.273485][ T7235] ? ___neigh_create+0x1c70/0x2240 [ 1493.273511][ T7235] ip6_finish_output2+0xfb3/0x1480 [ 1493.273534][ T7235] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1493.273551][ T7235] ? ip6_mtu+0x7d/0x490 [ 1493.273566][ T7235] ? ip6_mtu+0x38c/0x490 [ 1493.273581][ T7235] ? ip6_finish_output+0x2ef/0x4e0 [ 1493.273596][ T7235] ? ip6_output+0x126/0x550 [ 1493.273611][ T7235] ip6_output+0x340/0x550 [ 1493.273627][ T7235] NF_HOOK+0x9e/0x380 [ 1493.273644][ T7235] ? NF_HOOK+0x101/0x380 [ 1493.273660][ T7235] ? __pfx_NF_HOOK+0x10/0x10 [ 1493.273677][ T7235] ? __pfx_dst_output+0x10/0x10 [ 1493.273693][ T7235] ? icmp6_dst_alloc+0x3a5/0x420 [ 1493.273709][ T7235] ? icmp6_dst_alloc+0x3a5/0x420 [ 1493.273726][ T7235] mld_sendpack+0x8d4/0xe60 [ 1493.273747][ T7235] ? mld_sendpack+0x1e7/0xe60 [ 1493.273764][ T7235] ? __pfx_mld_sendpack+0x10/0x10 [ 1493.273802][ T7235] mld_ifc_work+0x83e/0xd60 [ 1493.273823][ T7235] ? _raw_spin_unlock_irq+0x23/0x50 [ 1493.273837][ T7235] ? process_one_work+0x868/0x15a0 [ 1493.273850][ T7235] process_one_work+0x93a/0x15a0 [ 1493.273869][ T7235] ? __pfx_process_one_work+0x10/0x10 [ 1493.273885][ T7235] ? assign_work+0x3a1/0x410 [ 1493.273899][ T7235] worker_thread+0x9b0/0xee0 [ 1493.273920][ T7235] kthread+0x711/0x8a0 [ 1493.273937][ T7235] ? __pfx_worker_thread+0x10/0x10 [ 1493.273951][ T7235] ? __pfx_kthread+0x10/0x10 [ 1493.273967][ T7235] ? _raw_spin_unlock_irq+0x23/0x50 [ 1493.273980][ T7235] ? lockdep_hardirqs_on+0x98/0x140 [ 1493.273993][ T7235] ? __pfx_kthread+0x10/0x10 [ 1493.274009][ T7235] ret_from_fork+0x599/0xb30 [ 1493.274023][ T7235] ? __pfx_ret_from_fork+0x10/0x10 [ 1493.274038][ T7235] ? __switch_to_asm+0x39/0x70 [ 1493.274054][ T7235] ? __switch_to_asm+0x33/0x70 [ 1493.274069][ T7235] ? __pfx_kthread+0x10/0x10 [ 1493.274085][ T7235] ret_from_fork_asm+0x1a/0x30 [ 1493.274107][ T7235] [ 1493.804316][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.811484][ T6126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1493.826730][T23615] netlink: 'syz.4.4642': attribute type 39 has an invalid length. [ 1493.884432][T23617] netlink: 'syz.2.4643': attribute type 10 has an invalid length. [ 1493.902569][T23617] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 1494.459966][T22376] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.508788][T22376] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1494.655577][T22376] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.666216][T22376] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1494.745212][T22376] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.755705][T22376] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1494.814730][T22376] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.825495][T22376] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1494.940664][T22376] bridge_slave_1: left allmulticast mode [ 1494.946518][T22376] bridge_slave_1: left promiscuous mode [ 1494.952489][T22376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.960896][T22376] bridge_slave_0: left allmulticast mode [ 1494.966528][T22376] bridge_slave_0: left promiscuous mode [ 1494.973036][T22376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.292143][T22376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.302567][T22376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.313360][T22376] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1495.324908][T22376] bond0 (unregistering): Released all slaves [ 1495.387413][T22376] tipc: Disabling bearer [ 1495.393855][T22376] tipc: Left network mode [ 1495.566923][T22376] hsr_slave_0: left promiscuous mode [ 1495.572717][T22376] hsr_slave_1: left promiscuous mode [ 1495.578353][T22376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1495.586865][T22376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.594750][T22376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1495.603237][T22376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.612879][T22376] veth1_macvtap: left promiscuous mode [ 1495.618359][T22376] veth0_macvtap: left promiscuous mode [ 1495.624086][T22376] veth1_vlan: left promiscuous mode [ 1495.629437][T22376] veth0_vlan: left promiscuous mode [ 1495.665153][T22376] pimreg (unregistering): left allmulticast mode [ 1495.750405][T22376] team0 (unregistering): Port device team_slave_1 removed [ 1495.787549][T22376] team0 (unregistering): Port device team_slave_0 removed [ 1496.154499][T22376] IPVS: stop unused estimator thread 0... [ 1496.714114][T22376] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1496.784848][T22376] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1496.843998][T22376] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1496.905138][T22376] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1496.967518][T22376] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.012024][T22376] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.062241][T22376] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.102760][T22376] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.185798][T22376] bridge_slave_1: left allmulticast mode [ 1497.191992][T22376] bridge_slave_1: left promiscuous mode [ 1497.198039][T22376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.206855][T22376] bridge_slave_0: left allmulticast mode [ 1497.213152][T22376] bridge_slave_0: left promiscuous mode [ 1497.218868][T22376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.241919][T22376] bridge_slave_1: left allmulticast mode [ 1497.247603][T22376] bridge_slave_1: left promiscuous mode [ 1497.253476][T22376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.263089][T22376] bridge_slave_0: left allmulticast mode [ 1497.269193][T22376] bridge_slave_0: left promiscuous mode [ 1497.274832][T22376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.375645][T22376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1497.385658][T22376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1497.395325][T22376] bond0 (unregistering): Released all slaves [ 1497.520588][T22376] bond1 (unregistering): (slave erspan0): Releasing active interface [ 1497.577225][T22376] dvmrp6 (unregistering): left allmulticast mode [ 1497.843478][T22376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1497.852974][T22376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1497.862388][T22376] bond0 (unregistering): Released all slaves [ 1497.873727][T22376] bond1 (unregistering): Released all slaves [ 1498.175851][T22376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.185707][T22376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.195379][T22376] bond0 (unregistering): Released all slaves [ 1498.297861][T22376] tipc: Disabling bearer [ 1498.316322][T22376] tipc: Left network mode [ 1498.758164][T22376] hsr_slave_0: left promiscuous mode [ 1498.763958][T22376] hsr_slave_1: left promiscuous mode [ 1498.769758][T22376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.777248][T22376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.787209][T22376] hsr_slave_0: left promiscuous mode [ 1498.793379][T22376] hsr_slave_1: left promiscuous mode [ 1498.799332][T22376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.807051][T22376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.814741][T22376] batman_adv: batadv0: Removing interface: team0 [ 1498.821750][T22376] batman_adv: batadv0: Removing interface: dummy0 [ 1498.834168][T22376] hsr_slave_0: left promiscuous mode [ 1498.840282][T22376] hsr_slave_1: left promiscuous mode [ 1498.848258][T22376] hsr_slave_0: left promiscuous mode [ 1498.854287][T22376] hsr_slave_1: left promiscuous mode [ 1498.860432][T22376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.867810][T22376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.876642][T22376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.884157][T22376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.894397][T22376] veth1_macvtap: left promiscuous mode [ 1498.900066][T22376] veth0_macvtap: left promiscuous mode [ 1498.905595][T22376] veth1_vlan: left promiscuous mode [ 1498.911627][T22376] veth0_vlan: left promiscuous mode [ 1499.042228][T22376] team0 (unregistering): Port device team_slave_1 removed [ 1499.056920][T22376] team0 (unregistering): Port device team_slave_0 removed [ 1499.535707][T22376] team0 (unregistering): Port device team_slave_1 removed [ 1499.589891][T22376] team0 (unregistering): Port device team_slave_0 removed [ 1501.074274][T22376] pim6reg (unregistering): left allmulticast mode [ 1501.184353][T22376] team0 (unregistering): Port device team_slave_1 removed [ 1501.222503][T22376] team0 (unregistering): Port device team_slave_0 removed