last executing test programs: 32m0.263163146s ago: executing program 32 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 30m37.297892996s ago: executing program 33 (id=663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000011000500000000000003000007000000", @ANYRES32=r3, @ANYBLOB="01000000000000000c001a800800048004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 30m9.595924592s ago: executing program 34 (id=775): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r3, r4, 0x3, 0x0, 0x0, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x4, 0x2, 0x5, 0x412e, 0xe154, 0x1000, 0x7f, 0x3d, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 27m4.76721713s ago: executing program 35 (id=2323): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000180)={0x0, 0x0}) 25m13.270978557s ago: executing program 36 (id=3129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffb, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 22m37.479173221s ago: executing program 37 (id=4149): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r1) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) 22m3.888688613s ago: executing program 38 (id=4446): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x14, 0x1000000b, 0xc, 0x8, "0000000000000000000000041a02003d00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 21m37.35486826s ago: executing program 39 (id=4597): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) splice(r0, 0x0, r5, 0x0, 0x25a5, 0x0) 21m27.591955005s ago: executing program 40 (id=4659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000005}) 20m49.41143103s ago: executing program 41 (id=4846): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x303}, "a8a1c7317aacfa66", "21ea6d1a28b147a2b5a0c490889f28f4", "d589cb90", "ee368d1c68b11d24"}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc040005) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "2fbc61aac78cc949", "d73cb7376ccdd961eb57c264df4580a7bf502983278b5d639eabe200", "549fec04", "a209bf873c6299e6"}, 0x38) 20m37.961081919s ago: executing program 42 (id=4921): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000200), &(0x7f0000000580)=[r3], &(0x7f0000000040)}) 20m28.116653856s ago: executing program 43 (id=4894): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2882020, 0x0) 20m6.319046754s ago: executing program 44 (id=5054): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x40840) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8a, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@jqfmt_vfsv0}, {@noload}, {@noblock_validity}, {@grpjquota, 0x22}, {@errors_continue}, {@resuid}, {@i_version}]}, 0xff, 0x464, &(0x7f00000004c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 18m30.547259509s ago: executing program 45 (id=5491): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0) 17m34.416343897s ago: executing program 46 (id=5831): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) 17m31.018048519s ago: executing program 47 (id=5758): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) syz_emit_ethernet(0x0, 0x0, 0x0) ppoll(&(0x7f00000007c0)=[{r1, 0x4040}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 16m39.339113721s ago: executing program 48 (id=6116): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dd58) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f0000000580)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$evdev(r1, &(0x7f0000000280)=[{{}, 0x5, 0x1, 0x658}], 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x72, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], &(0x7f0000000300)=[0xfffffffffffffffe], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x0) 16m24.376665671s ago: executing program 49 (id=6198): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x30, 0x0, @fd_index=0x5, 0x3, 0x0, 0xdfffffff, 0x3, 0x1}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9m26.259382819s ago: executing program 1 (id=7839): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 9m17.512419377s ago: executing program 1 (id=7871): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r2, 0x1009}], 0x1, 0x8000007) 9m1.450757831s ago: executing program 50 (id=7871): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r2, 0x1009}], 0x1, 0x8000007) 6m52.022047434s ago: executing program 2 (id=8269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 6m50.229899997s ago: executing program 2 (id=8272): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) r2 = io_uring_setup(0x3ac3, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x1, 0x215}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r3, &(0x7f00000004c0)=""/186, 0xba, 0x10021, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x2, 0x0) 6m47.049119561s ago: executing program 2 (id=8278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 6m43.818912022s ago: executing program 2 (id=8281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/193, 0xc1}], 0x1, &(0x7f0000000500)=[{&(0x7f0000000340)=""/239, 0xef}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r3, 0x0, 0x80000000, 0x0) 6m41.996084303s ago: executing program 2 (id=8284): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x54) mkdir(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) setpriority(0x0, 0x1, 0xa7a8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 6m39.399158806s ago: executing program 2 (id=8292): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2100, 0x0) getsockname$unix(r1, 0x0, &(0x7f00000000c0)) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 6m23.7946032s ago: executing program 51 (id=8292): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2100, 0x0) getsockname$unix(r1, 0x0, &(0x7f00000000c0)) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 6m16.246699615s ago: executing program 8 (id=8348): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) shutdown(r0, 0x1) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) pwrite64(r1, &(0x7f0000000140)="690ef5672c5d07ca8db41e848049fe936bd584e6c48ce0b95a4e7be2e5247e01bf956e6e86e6aa7c45523e2874144fb1f1caa73862017435ecefbce1f9e630aec89c5d351ce22ddf212c32aee1309176d2", 0x51, 0xf5) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) 6m15.802935599s ago: executing program 8 (id=8350): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m14.190806323s ago: executing program 8 (id=8352): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000300)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard}, {}, {@errors_remount}, {@keep_last_dots}]}, 0x5, 0x1531, &(0x7f0000002f80)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f"], 0xa8}}, 0x0) 6m12.15756921s ago: executing program 8 (id=8358): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(r1, &(0x7f0000000200)='mountinfo\x00') 6m9.287168865s ago: executing program 8 (id=8365): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) iopl(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x30) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6m8.004210353s ago: executing program 8 (id=8366): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 5m52.23994736s ago: executing program 52 (id=8366): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4bab19d69a5addee134dd447034da6dd89704603d31a3d25b9d5f46cfd43d9e29aac7422920d98e1463256bd4cc929373ad9000000000faf6a95a04ad3b9db9b230f8224a3d6db187a94e5dadfe181d20d3a4bd08e8b0e6eeb79fdee230dd852a36dfc9046d03b8f316b2d460ca5d08c515d914db8ce430ea0237911c440ee750fe787aaffa83b809651c529e4cf68c8219a827ea003c59e3e51b00cd7f9464f37be2eb3e1475819ad37edcc238b85ab205a2b394916815d9cf7bf3f8e3d19a4697756299e21f2afd3ae31e0f09b8153965635216de47156f4e5fc97cb04f9c5e13256be1d9e0a94f9c6387940de1bcd7b532d16ebba216601cf23be6a7c259550bd059a5a7aee85eb558de8201c1d9c7b29e27313f61cf0b07dd790071bdbceabdd32ce2bcc279b1575a1431b03e5dc37307d15a2782175c87dad1a3aadf48b382bea4ae0b423edee0e12ada4c1dacc40bf387630792ab5c7ed6e2ef7e8a77268b0ff8978ccddfa8da4521d24b3fddc70d181c20caa9a584df9b2e"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 3m49.51402529s ago: executing program 6 (id=8686): socket(0x10, 0x803, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001dc00)=""/102392, 0x18ff8) mknod(0x0, 0xc000, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) 3m49.281008752s ago: executing program 6 (id=8699): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 3m45.116947705s ago: executing program 6 (id=8697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x9, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x7fffffff}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3m43.376907703s ago: executing program 6 (id=8701): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x50) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m39.959397973s ago: executing program 6 (id=8709): syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() kcmp(r2, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 3m27.384366302s ago: executing program 6 (id=8734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f00000008c0)={[{}, {@type={'type', 0x3d, "0f4fb860"}}, {@umask={'umask', 0x3d, 0x8000}}, {@uid}, {@force}, {@creator={'creator', 0x3d, "f5e298ff"}}, {@nls={'nls', 0x3d, 'cp865'}}, {@part}, {@barrier}]}, 0x1, 0x6e8, &(0x7f00000001c0)="$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") 3m11.724763735s ago: executing program 53 (id=8734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f00000008c0)={[{}, {@type={'type', 0x3d, "0f4fb860"}}, {@umask={'umask', 0x3d, 0x8000}}, {@uid}, {@force}, {@creator={'creator', 0x3d, "f5e298ff"}}, {@nls={'nls', 0x3d, 'cp865'}}, {@part}, {@barrier}]}, 0x1, 0x6e8, &(0x7f00000001c0)="$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") 2m32.227794357s ago: executing program 0 (id=8849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000280)={0xfffffff2, 0x1, &(0x7f0000000180)=[0x401], 0x0, 0x0, 0x0}) 2m30.179985546s ago: executing program 0 (id=8834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) 2m27.188049578s ago: executing program 0 (id=8845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 2m23.126116136s ago: executing program 0 (id=8856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x8000003, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 2m20.107130075s ago: executing program 0 (id=8861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x4008880) 2m18.65704177s ago: executing program 0 (id=8865): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x4002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 2m2.13671195s ago: executing program 54 (id=8865): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x4002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1m32.443594772s ago: executing program 1 (id=8891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 1m30.659449507s ago: executing program 1 (id=8934): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$eJzs3M9PE1sUwPHTH5S2BMri5b08E8ONbnQzgepaaQwkxiYSpMYfickAU206tqTTQGqM6Mqt8Y9wQViyI1H+ATbudOPGHRsTF7Iwjul0htIyUCmljfT7Scgceu+ZObct5EzTmZ17b57ms5aW1csSjCoJiIjsioxKUDwBdxt04ojs91IuD33/dP7O/Qe3Uun01KxS06m5K0ml1MjY+5XnMXfa5qBsjz7a+Zb8uv3v9v87v+ae5CyVs1ShWFa6mi9+KevzpqEWc1ZeU2rGNHTLULmCZZRq48XaeNYsLi1VlF5YHI4vlQzLUnqhovJGRZWLqlyqqNBjPVdQmqap4biglcza7KyeajN5ocPF4JSUSik9JCKxAyOZtZ4UBAAAeqq5/w+K6mT/v35hqzx0d2PE7f83I379/9XPtX019P9REfHt/73j+/b/+vH6/4MdUX85Uf9fFe1gMWjPWOTAQ4F6WB0spfS4+/frePVwfdwJ6P8BAAAAAAAAAAAAAAAAAAAAAPgb7Np2wrbthLf1fgbdizu8331SQyJyvQclo4NO8PrjDKhfuBceETFfL2eWM7WtO2FLREwxZFwS8tN5P7iqsXflkaoalQ/mqpu/upwJOSOprOSc/AlJDEhzvm1P30xPTaiaxvwBie/PT0pC/vHPT/rmR+TSxX35miTk44IUxZRFp456/osJpW7cTjflx5x5AAAAAACcBZra43v+rmmHjdfy986vmz8fCNXPr8d9z8/Dci7c27UDAAAAANAvrMqzvG6aRumIICat57QfhE9pz94K/zTL+y7D6a30iMA7eMOQd3Pdjj8tgWM8LYcEwYZSV7xKW2SNVeeok67C+9josDkyM9n9V9AJ/nv77kfndnhtI9pipe0HoaPfAANd+ecDAAAAoKvqTb/3yGRvCwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA914+5ojUfkpv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoX78DAAD//0WxAls=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) unlink(&(0x7f00000003c0)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1m22.76869221s ago: executing program 1 (id=8956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r3, 0x0, 0x0, 0x0) 1m18.670667388s ago: executing program 1 (id=8964): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m3.488397956s ago: executing program 55 (id=8964): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 17.430580727s ago: executing program 3 (id=9074): syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000080)={0x1, 0x1000000000002, 0x120000000001, 0x2, 0x4ff, 0xe5, 0x1000001000, 0x400080000049}, 0x0, &(0x7f0000000000)={0x3fe, 0x0, 0x0, 0x9, 0x86, 0x8000800, 0x5}, 0x0, 0x0) 16.584140548s ago: executing program 4 (id=9077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000000380)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0xc0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) 14.330869157s ago: executing program 3 (id=9081): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_clone3(0x0, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x3, r1, 0x5}) 12.212660086s ago: executing program 5 (id=9084): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x4e23, 0x8004}, {@in=@dev, 0x0, 0x32}, @in=@remote, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x0, 0x0, 0x21}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000001a0000f7000000000000009ddd0ef2a3a1", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) splice(r4, 0x0, r2, 0x0, 0xf846, 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 12.162780897s ago: executing program 4 (id=9085): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x620, 0x1, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$dri(0x0, 0x0, 0x80100) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) 10.977242232s ago: executing program 9 (id=9087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 10.902763006s ago: executing program 4 (id=9088): socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000084}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x400006, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[], 0x3, 0x1cf, &(0x7f0000000780)="$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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 10.902272594s ago: executing program 3 (id=9089): r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd_index=0x2, 0xc0f, 0x0, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) io_uring_enter(r0, 0x133d, 0x0, 0x8, 0x0, 0x0) 10.858245182s ago: executing program 7 (id=9090): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 10.780414455s ago: executing program 5 (id=9091): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa7a, &(0x7f0000000a00)="$eJzs3U2MG1cBAOBn73rTTVLilIQuSWgTftry091ms4SfCJqquRA1FbdKFZcoTUNEGhCpBK0qkeTEjVZVuJYiTuVQAUJqLyjqiUslGolLT4UDB6IgVeIAhcRo7fe84xebsXc3a3v9fdLb5zdv7PdmdmY8npn3XgAmVrX5d2lprhLClbdfPfb3B/42uzzl0fYc9ebf6UKqFkKoxPR09nkfTLXimx++dKpbXAmLzb8pHZ680X7vthDCxbA/XA31sOfKtVfeXXzixKXjlw+898aR63dm6QEAYLJ8++qRpd1/+dPenR+9ed/RsKU9PZ2f12N6ezzvPxpP/NP5fzV0piuFUDSTzTcdQzWbb6rLfMVyatl80z3Kn8k+t9bO39sx35aS8qcK07otN4yztB3XQ6U635GuVufnW7/JQ/N3/Uxl/vzZc89eGFJFgXX3z/tDCPuFQUOj0fhJcwWOQF0EYbWhsWPYRyCAlvx+4W0u5lcW1qb9adP9lX/jsWr398M62OjtX/njVf6vLjnisH4269aUlivtR9tjOr+PkD+/NOj+nz4vvx9R67Oeve4jjMv9hV71nNrgeqxWr/rn28Vm9Y0Yp/XwzSy/uP/k/9Nx+R8D3f1ro67/vz479Gudy2H/CNRhU4faCNRB6Ds0hn0AAkbWynNzLY0o5efP9eX5W0ry7yrJny3J31qSv60kHybZ757/WXi5svI7P/9NP+j1sHSd7e4Yf2zA+uTXIwctP3/ud1BrLT9/nhhG2Vsnnzr91WeevtZ6/r/S3v5vxe19f0zX4751Nc6Qrhfm19Xbz/7XO8up9pjvnqw+d982f6NV4q7O+Sq7Vj4nFI4zt9VjrvN9O3rNt69zvno232wMd2X1zc9PtmbvS+cf6bia1td0try1bDlmsnqk48rOGOf1gNVI22Ov5//T9jkXapVnz547/UhMp+30j1O1LcvTDxY/9NcbU3dgbfpt/zMXOtv/bG9Pr1WLx4UdK9MrxeNCPZu+2Eq2b5On6YdiOn3PfXdqtjl9/tT3zz2z3gsPE+7CCy9+7+S5c6d/6EV6MWu1eOFF2ZFjsz45CJNj4fnnfrBw4YUXHz773Mkzp8+cPn/o8OFDi4uHv3ZoaaF5Xr9QPLsHNpOVL/1h1wQAAAAAAAAAAADo14+OH7v253e+8n6r/f9K+7/U/j89+Zva//80a/+ft5NPrQJSO8CdXfKb4+691VmPmWy+Wgwfz+q7Kytnd/a+T8S4PY5fbP+f2tvn/bqm+tybTc/7703zZd0J3NZfykzWB0l7vMDYYP/TMX05xr8MMESV2e6TY1zWv3Xa1lP/FPqlGE/p/5a2htSPSWr/3atfp3T837kBdWT9bURzwmEvI9DdP0Z+/M/CmfjQ6/J/Q6Mx/DqsPYz+ehbWMTQaRvEARsOwx/9M1z1TfP4P37prOaTZbjzWebzM+y+FtRj18SeVv7nG/2yPf9fX8a9L7+od/Tz3P7rCv1+7/n6h2LCn3+NvvvypH+hd5WUWfRTLT8v/YOiv/MbrWfn5DaE+/Scrf2uf5d+2/PtWV/5/Y/lptT30mVZ85rXWf693+a0aV6qd9civG6f7f/l14+Rmtvypb8+Bl3+VAzXeiuXDJOs9zmy/I9iOpnEZ/7eX/DmML8d0OhCm5xzyb+RB65+er0jfA7uzz6+UfL+NyzjFvUz6+L9fj3HZ/pDG/03bY71LulpI17qs23HfVmCz+WDk7/+NWbg4AnUQRjSMxhjYxdBoNIbakbdexIdr2Ot/2Hefh13+sNd/mXz83/wcPh//t5r9gMjH/83fn4//m+fn4+vl+fn4v/n6zMf/zfPvzT43v4I9V5L/yZL8PSX5e1fyZ7vl7yt5/6dK8g+U5N9Xkn9/Sf49JflTJfmfLcn/XEn+AyX5D5Xkf74kf7Nrtkcp7FSTtvwwyfL2efZ/mBzp/k+v/X9XST4wvn7+5sHHn/7td+qt9v8z7d9r6T7e0Ziuxd/OP47p/L53KKSX896J6b9m+aN+vQMmSd5/Rv79/mBJPjC+0nNe9m+YQJXuPfbk99t69VvV6zyf8fKFGH8xxl+K8cMxno/xQowPxnhxg+rHnfH4b35/5OXKyu/9HVl+v8+T5+2B8n6iDvVZn/z6wKDPs+f9+A1qreWvsjkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0FSbf5eW5iohXHn71WNPnTi7sDzl0fYc9ebf6UKq1n5fCI/EeCrGv4gvbn740qlifCvGlbAYKqHSnh6evNEuaVsI4WLYH66Gethz5dor7y4+ceLS8csH3nvjyPU7twYAAABg8/tfAAAA///pGxs+") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) sendfile(r0, r0, 0x0, 0xe3aa6ea) truncate(0x0, 0x3000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x82140, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x7005, 0x0) 9.682624732s ago: executing program 9 (id=9092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) 7.321387256s ago: executing program 3 (id=9093): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") bind$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r0, r0, 0x0, 0x800000009) sched_setscheduler(0x0, 0x1, 0x0) 7.30480553s ago: executing program 9 (id=9094): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x6e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x3}}, 0x48) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.690729351s ago: executing program 5 (id=9095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001c007110610000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 6.658706958s ago: executing program 7 (id=9096): sched_setaffinity(0x0, 0x0, 0x0) ioperm(0xe6, 0x2, 0x3) read$msr(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4(r0, 0x0, 0x0, 0x800) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) 6.355904884s ago: executing program 9 (id=9097): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) 6.349484556s ago: executing program 4 (id=9108): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) cachestat(r0, &(0x7f0000000140)={0x1, 0x7fc001}, &(0x7f0000000100), 0x0) 4.746454201s ago: executing program 9 (id=9098): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf39, 0x0) splice(r3, 0x0, r6, 0x0, 0x4, 0x4) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r4) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) 4.630627669s ago: executing program 7 (id=9099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xe0440, 0x0) poll(&(0x7f00000007c0)=[{r4, 0x41b}], 0x1, 0xcd7a) 4.600360549s ago: executing program 3 (id=9100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1705e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x4) 4.562465239s ago: executing program 5 (id=9101): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f0000000700)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES32=0x0], 0x1, 0x1db, &(0x7f0000000440)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x80800}) open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) 4.189950483s ago: executing program 4 (id=9102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1bb9ec930dabfc165907d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31c0971007f269f873e14e5fe3c46c0ac2b22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b98ade053b2f9b7918"], 0x1, 0x625c, &(0x7f000000bdc0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEQEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRCMhFjwECIklIJaseIAs2LLjAbBkIwFZpVDNnDOuabrdvmS6eub8ftKk6qtTNX0q/67pbldVnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4nvf/cGZKiIu/TwtOBbxmehH9CJWmnotIlbWjuX1BxHxXGw3x7MRMVyKqHLj0xGvRcRHRyPu3ru13iw6+5D9+M6f/v67Hx75/t/+MDz1nz/f6L8+bb2bN3/977/cfvz9BQAAgBLVdV1X6WP+8fT5vtd1pwCAuciv/3WSl6sXrt5csP6o1Wq1+gDWbfVkt9tFRGy2t2neMzgdDwAHzGZ83HUX6JD8izaIiCNddwJYaFXXHWBf3L13a71K+Vbt14O1nfZ8Lcie/Der3fs7pk1nGb/GZF7Pr63oxzNT+rMypz4skpx/bzz/Szvto7Tefuc/L9PyH+3c+lScnH9/PP8xhyf/3sT8S5XzHzxS/n35AwAAAADAAsv//n+s4/O/S0++Kw/lQed/1+bUBwAAAAAAAAD4tD3p+H+7KuP/AQAAwKJqPqs3fnP0/rJp38XWLL9YRTw1tj5QmHSzzGrX/QAAAAAAAAAAAACAkgx2ruG9WEUMI+Kp1dW6rpuftvH6UT3p9gdd6fsPJev6jzwAAOz46OjYvfxVxHJEXEzf9TdcXV2t6+WV1Xq1XlnK72dHS8v1SutzbZ42y5ZGs98Pr8Sobn7Zcmu7tlmfl2e1j/++5rFGdX92x+akw8ABICJ2Xo3uekU6ZOr66ej6XQ4Hg+P/8HH88zC6fp4CAAAA+6+u67pKX+d9PJ3z73XdKQBgLvLr//h5AbVarVar1Yevbqsnu90uImKzvU3znsFw/ABwwGzGxxOX/9IAv0WYlj9FGETEc113AlhoVdcdYF/cvXdrvUr5Vu3XgzS+e74WZE/+m9X2dnn7SdNZxq8xmdfzayv68cyU/jw7pz4skpx/bzz/Szvto7Tefuc/L9Pyb/bzWAf96VrOvz+e/5jDk39vYv6lyvkPHin/vvwBAAAAAGCB5X//P7ZQ539Hj7s7Mz3o/O/avj0qAAAAAAAAAOyvu/duref7XvP5/89NWM/9n4dTzr+Sf5Fy/un+/90Lb14aW6/fmr/z1v38/3Xv1vrvb/zzs3n6sPkv5ZkqPbOq9Iyo0iNVgzR9zB2bYmvYHzWPNKx6/UG65qcevhNX4mpsxOk96/bS8XC//cye9qanw+32ur/TfnZP+2C3PW9/bk/7MF3pVK/k9pOxHj+Jq/H2dnvTtjRj/5dntNcz2nP+fcd/kXL+g9ZPk/9qaq/Gpo07H/b+77hvTyc9zptXPv+r0/u/OzNtRX9339qa/Xuhg/5s/z85MoqfXd+4dvLm5Rs3rp2JNNmz9Gykyacs5z9MPzn/l17cac9/99vH650PR4+c/6LYisHU/F9szTf7+/Kc+9aFnP8o/eT8307tk4//g5z/9OP/lQ76AwAAAAAAAAAAAAAAAA9S1/X2LaJvRsT5dP9PV/dmAgDzlV//6yQvn1fdf9zt/7h3P7rqv1o957pasP7Mtf6kXqz+qBey/u+C9Wfh6rZ6sjfaRUT8tb1N857hF5N+GQCwyD6JiH903Qk6I/+C5e/7a6Ynuu4MMFfX3//gR5evXt24dr3rngAAAAAAAAAAjyuP/7nWGv/5RF3Xt8fW2zP+61ux9qTjfw7yzO4Ao1MGqu4/+j49yFZv1O+1hht/PqaN/z3cnXvQ+N+DGY83nNE+mtG+NKN9eUb7xBs9WnL+z7fGOz8REcfHhl8vYfzX8THvS5Dzf6H1fG7y/9LYeu38698e5Px7e/I/deO9n566/v4Hr1557/K7G+9u/PjcmTOnz50/f+HChVPvXLm6cXrnvx32eH/l/PPY164DLUvOP2cu/7Lk/L+QavmXJef/xVTLvyw5//x+T/5lyfnnzz7yL0vO/+VUy78sOf8vp1r+Zcn5v5Jq+Zcl5/+VVMu/LDn/V1Mt/7Lk/E+mWv5lyfmfSvVD5r+y3/1iPnL++QyX478sOf98ZYP8y5LzP5tq+Zcl538u1fIvS87/tVTLvyw5/6+mWv5lyfmfT7X8y5Lz/1qq5V+WnP+FVMu/LDn/r6da/mXJ+X8j1fIvS87/9VTLvyw5/2+mWv5lyfl/K9XyL0vO/9upln9Zcv5vpFr+Zbn//f9mzJgxk2e6/ssEAAAAAAAAAAAAAIybx+XEXe8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyPHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4Gf2TdvHEgMhPyd/E3YOCaEZJNd24lfaFNMeG14Kwmh0Bds17s2C37Da5dAo9pRoETCqKiibbhoCwi1uamIWi5oBSgXqFXVStBe0BtEhcpFVAUUkFBpBWw15zzPszOzZ2d2vWNn5pzPR0p+2Zkzc86ceWZ2v3a+OwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ6ubXzX+ikWVZo9EoLtiSZS9ozqumtuSXvPr5PT4AAABg436e//u5a9MFB9Zwo5Zt/vGmb355aWlpKXvP6B+Pf2ZpKV0xlWXjm7Isvy566nvvbbRuEzyWTTZGWr4e6bH70R7Xj/W4frzH9RM9rt/U4/rJHtevOAErXJU10p3tyP9zS3FKs+uy8fy6HSW3eqyxaaR57tJts0Z+m6Xxo9lCdjybz2bbti+2beTbf/Xm5r7enMV9jbTsa1tzhfzokSPxGBrhHO9o29fyfUY/eG029eMfPXLkL88+e0PZ7Hka2u6vOM7btjeP82PhkuJYG9mmdE7icY60HOe2kudktO04G/ntmv/deZzPrfE4R5cP84rqfM4ns5H8v7+Vn6exRlZynraFy356S5ZlF5YPu3ObFfvKRrLNbZeMLD8/k8WKbN5Hcym9OBtb1zq9eQ3rtDnndrSv087XRHz+bw63G1vlGFqfph88OtHyvP9s6VLWadR81Ku9VjrXYL9fK4OyBuO6+Fb+oB8vXYM7wuN/5NbV12Dp2ilZg+lxt6zB7b3W4MjEaH7M6Ulo5LdZXoM727YfzffUyOczt3ZfgzNnT5yeWfzIR+9cOHH42Pyx+ZO7d+6c3b1nz759+2aOLhyfny3+fYlne/BtzkbSa2B7OHfxNfDKjm1bl+rS5ydWvP9e6utwssvrcEvHtv1+HY51PrjGlXlBrlzTxWvjXc2TPnlxJFvlNZY/P7dv/HWYHnfL63Cs5XVY+j2l5HU4tobXYXOb07ev7WeWsZZ/yo5h9e8FG1uDW1rWYOfPI51rsN8/jwzKGpwM6+I7t6/+vWBbON7Hp9f788joijWYHm5472lekn7en9yXj7J1eWPziqsnsnOL82fuevjw2bNndmZhXBEvaVkrnet1c8tjylas15F1r9cDCzc9fmPJ5VvCuZq8s/mvyVWfq+Y2d9/V/bnKv7uVn8+2S3dlYfTZlT6fZd/Nm+dzIss++41HH/jaI5993arns5k3Pzaz8Z/FUy5tef8dX+X9N+b+XxT7S3f12Oj4WPH6HU1nZ7zt/bj9qRrL37sa+b6fm1nb+/F4+OdKvx9f1+X9eGvHtv1+Px7vfHDx/bjR6087Nqbz+ZwM6+T4bPf34+Y2W3etd02OdX0/viXMRjj/rwpJIeWilrWz2rpN+xobGw+PayzuoX2d7m7bfjxks+a+ntx1aev0tluK+xpNj27ZlVqnUx3b9nudpj/7Wm2dNnr96dul6Xw+J8O6uG5393Xa3Obpuzf+3nlV/M+W986JXmtwfHSieczjaRHm7/fZ0lVxDd6VHclOZcezufzaiXw9NfJ9Td+ztjU4Ef650u+VW7uswds6tu33Gkzfx1Zbe42xlQ++Dzqfz8mwLp64p/sabG7z+r39/dn1tnBJ2qblZ9fOP19b7c+8buw4TZdrrYyF4/zG3u5/Ntvc5vi+9ebM7ufpjnDJ1SXnqfP1u9prai67MudpazjOZ/etfp6ax9Pc5jP717ieDmRZdv5D9+V/3hv+fuVvzn37y21/71L2dzrnP3TfD1949B/Wc/wADL9fFGNz8b2u5W+m1vL3/wAAAMBQiLl/JMxE/gcAAIDKiLk//l/hifwPAAAAlRFz/1iYSU3y/9bXP7vwi/NZauYvBfH6dBruL7aLHdfZ8PXU0rLm5fd9cf4nf39+bfseybLsZ/f/Xun2W++Px1WYCsf51BvaL1/hy3euad+HHjqf9tvaX/9cuP/4eNa6DMoquLNZln312k/l+5l678V8Pn3/oXw+cOHxx5rbPLe/+Dre/pmXFNv/WSj/Hjh6uO32z4Tz8P0wZ99Sfj7i7b508VXb9r57eX/xdo3t1+QP+4n3Ffcbf0/Opx8rto/nebXj/9onn/xSc/uHX1F+/OdHyo//yXC/Xwzzf15WbN/6HDS/jrf7eDj+uL94u7u+8PXS43/qE8X2p99YbHcozLj/28LXO9747ELr+Xq4cbjtcWVvKraL+5/99h/m18f7i/ffefyTBy+2nY/O9fH0vxX3M9Oxfbw87if6u479N++ndX3G/T/5B4faznOv/T/1wDMva95v5/7v6Nju9Iduz/e/fH/tv7Hpzz/+qdL9xeM58Nen2x7PgXeG13HY/xPvC+sxXP+/TxX31/nbFQ69s/39J27/uS3n2x5P9OYfF/t/6jXH8rlp8qrNV7/ghddceHnz3GXZtzYV99dr/8f+4lTb8X/++uJ8xOtjR79z/6uJ+z/z4emTpxbPLcyls/rItfnvznlrcTzxeK8N762dXx88dfb982emZqdms2yqur9C75J9IcwfFuNC962XVryD3v5QeD5v/NOvbr71Xz8ZL//3dxWXX3xL8X3rlWG7T4fLt4Tnb337X+mJm6/PX9+Np8MRLq38fcEbsW3Hf+1b04bh8Xf+XBDX++mXvj8/D83r8u8b8XW9weP/7lxxP18J53Up/Gbm7dcv7691+/i7ES4+WLzeN3z+wttcfF7/Kjzfb/t+cf/xuOLj/W74OebrW9vf7+L6+Mr5kc77z3+Lx4XwfpJdKK6PW8XzffG560sPL/4ekuzCDfnXf5Tu54Z1PczVLH5kceb4wslzD8+cnV88O7P4kY8ePHHq3MmzB/Pf5XnwA71uv/z+tDl/f5qb33N3lr9bnSrGZfZ8H//ph47M7Z29dW7+6OFzR88+dHr+zLEji4tH5ucWbz189Oj8h3vdfmHu3p279u/eu2v62MLcvfv279+9f3rh5KnmYRQH1cOe2Q9OnzxzML/J4r137995zz13z06fODU3f+/e2dnpc71un39vmm7e+nenz8wfP3x24cT89OLCR+fv3bl/z55dLb8N8Celtz9x+uji1MyZcydnzi3On5kpHsvU2fzi5ve+Xvunmhb/o/h5tlOj+EV82Tvu2JN+P2vTFx9d9a6KTTp+geiz4XfR/NOLTu9by9cx94+HmdQk/wMAAEAdxNw/EWYi/wMAAEBlxNy/KcxE/gcAAIDKiLl/MsykJvm/cv3/refXtH/9f/3/1vOl/1+z/v+Dg9b/L94v9P/7Y6P9e/3/QP9f/1//X/9/1f5/Of1/ygxa/z/m/quyrJb5HwAAAOog5v7NYSbyPwAAAFRGzP1Xh5nI/wAAAFAZMfe/IMykJvlf/1//X/9f/1//v3z/+v/DSf+/O/3/HvT/Z7J69f8v9PP49f/1/1lp0Pr/Mfe/MMykJvkfAAAA6iDm/mvCTOR/AAAAqIyY+68NM5H/AQAAoDJi7t8SZlKT/K//r/+v/6//r/9fvn/9/+Gk/9+d/n8P+v8+/1//X/+fvhq0/n/M/S8KM6lJ/gcAAIA6iLn/xWEm8j8AAAAMnrFLu1nM/S8JM1mR/y9xBwAAAMDzLub+67KOInhN/v5f/1//f/D7/5vSdfr/+v/ZQPb/RzP9/8Gh/9+d/n8P+v/6//r/+v/01aD1//Pcn01mLw0zqUn+BwAAgDqIuf/6MBP5HwAAACoj5v7/F2Yi/wMAAEBlxNy/NcykJvlf/1//f/D7/z7/X/9/0Pv/Pv9/kOj/d6f/34P+v/6//r/+P301aP3/mPtvCDOpSf4HAACAOoi5/8YwE/kfAAAAKiPm/v8fZiL/AwAAQGXE3L8tzKQm+V//f8D7/7E5qv+v/6//r/+v/78m+v/d6f/3oP+v/6//r/9PXw1a/z/m/peFmdQk/wMAAEAdxNx/U5iJ/A8AAACVEXP/y8NM5H8AAACojJj7p8JMapL/9f8HvP9f9OAnfP6//r/+v/6//v/a6P93p//fg/6//n9f+v9L5/X/9f8pDFr/P+b+m8NMapL/AQAAoA5i7t8eZiL/AwAAQGXE3H9LmIn8DwAAAJURc/+OMJOa5H/9/6Ho/2f6//r/+v/6//r/a6P/353+fw/6//r/Pv9f/5++GrT+f8z9rwgzqUn+BwAAgDqIuf/WMBP5HwAAACoj5v5XhpnI/wAAAFAZMfffFmZSk/yv/6//r/+v/6//X75//f/hpP/fnf5/D/r/+v/6//r/9NWg9f9j7n9VmElN8j8AAADUQcz9t4eZyP8AAABQGTH33xFmIv8DAABAZcTcPx1mUpP8r/+v/6//r/+v/7/8HOr/Dz/9/+70/3vQ/9f/1//X/6evBq3/H3P/nWEmNcn/AAAAUAcx998VZiL/AwAAQGXE3D8TZiL/AwAAQGXE3D8bZlKT/K//r/+v/6//v67+/8uX77dK/f+y/ev/Dyf9/+70/3vQ/9f/f977/+P6/1TKoPX/Y+7fGWZSk/wPAAAAdRBz/64wE/kfAAAAKiPm/t1hJvI/AAAAVEbM/XeHmdQk/+v/6//r/+v/+/z/8v3r/w8n/f/u+t//jw9R/1//X//f5//r/7PSoPX/Y+6/J8ykJvkfAAAA6iDm/j1hJvI/AAAAVEbM/XvDTOR/AAAAqIyY+/eFmdQk/+v/6//r/+v/6/+X71//fzjp/3fn8/970P/X/9f/1/9ngx78/davLq3/P1F2x33p/8fcvz/MpCb5HwAAAOog5v5Xh5nI/wAAAFAZMff/Uj7/efkK+R8AAAAqo8j9k9kvh5nUJP/r/7d1z5sPV/9f/1//X/8/p/8/nPT/u9P/70H/X/9f/1//n75atf8fond5/79UX/r/MfffG2ZSk/wPAAAAdRBz/6+Emcj/AAAAUBkx978mzET+BwAAgMqIuf9AmElN8r/+v8//1//X/9f/L9//le7/x0+61f/fGP3/7vT/e9D/1//X/9f/p68u7fP/S/Wl/x9z/2vDTGqS/wEAAKAOYu6/L8xE/gcAAIDKiLn/dWEm8j8AAABURsz9rw8zqUn+1//X/9f/1//X/y/fv8//H076/93p//eg/6//r/+v/09fDVr/P+b+N4SZ1CT/AwAAQB3E3P/GMBP5HwAAACoj5v43hZnI/wAAAFAZMfe/OcykJvlf/1//X/9f/1//v3z/+v/DSf+/O/3/HvT/9f/1//X/6atB6//H3P+rYSY1yf8AAAAwlCbXt3nM/fd33lj+BwAAgMqIuf8tYSbyPwAAAFRGzP1vDTOpSf7X/9f/1//X/9f/L9+//v9w0v/vbsj6/z+/Jlyu/1/Q/x/s419v/3+s4+vL0v//3mr9/6VNnbfX/+dyGLT+f8z9bwszqUn+BwAAgDqIuf/tYSbyPwAAAFRGzP3vCDOR/wEAAKAyYu7/tTCTmuR//f/mcSy3l/X/q9r/H9H/H7z+/99+J8v0//X/+07/v7sh6//7/P8O+v+Dffw+/1//n5UGrf8fc/87w0xqkv8BAACgDmLufyDMRP4HAACAyoi5/8EwE/kfAAAAKiPm/neFmdQk/+v/+/z/evT/ff5/Nnj9f5//33JW9f/7R/+/O/3/HvT/9f8Hrf//n/r/DLdB6//H3P9QmElN8j8AAADUQcz97w4zkf8BAACgMmLu//UwE/kfAAAAKiPm/veEmdQk/+v/D0v/f2pI+/+P6v9fxv7/TdcU2+n/6/+zTP+/O/3/HvT/9f8Hrf/v8/8ZcoPW/4+5/71hJmvP/5Nr3hIAAAB4XsTc/xthJjX5+38AAACog5j7fzPMRP4HAACAyoi5/7fCTGqS//X/h6X/7/P/M/1/n//f8Xj0//X/y1y5/n9859H/1//X/4/0//X/9f/pNGj9/5j7fzvMpCb5HwAAAOog5v73hZnI/wAAADAUyv6f7E4x9x8MM5H/AQAAoDJi7j8UZlKT/K//v4b+/6be96f/3378+v/l62Nd/f8/2f4v3/nm2w/t1P/X/9f/X5cr+vn/zRe/z//X/9f/T/T/9f/1/+k0aP3/mPsPh5nUJP8DAABAHcTc/zthJvI/AAAAVEbM/UfCTOR/AAAAqIyY++fCTGqS//X/ff6//v+A9v+H+PP/4/nQ/2/Xt/5/fNPV/y9V9O/TKrq8/f93L/fE9f/X2/+fKL1U/1//f5iPX/9f/5+VBq3/H3P/fJhJTfI/AAAA1EHI/SNHi7l8hfwPAAAAlRFz/7EwE/kfAAAAKiPm/veHmdQk/+v/6//r/+v/+/z/8v136/83xnz+/6BK/fuf5i8U/f8Og9P/L6f/r/8/zMev/6//z0qD1v+PuX8hzKQm+R8AAADqIOb+D4SZyP8AAABQGTH3fzDMRP4HAACAyoi5/3iYSU3yv/7/8PX/47b6//r/+v81/fx//f+uNtq/1/8P9P/r3f//b/1//X/9f/pj0Pr/MfefCDP5P/bu5MnWur7j+Onkktu3yCKLVGWRTaqyzDJLFsk6+QOyyCabVFkucEDFmYvziKLirAjOAw4giKjgPIATijOoOM8DDiBKXYvu7/fb09Pn9HC6+3l+v9drwRcbmnOgbjV8bt+3Tyf7HwAAAHqQu//CuMX+BwAAgGbk7n9Y3GL/AwAAQDNy9z88bulk/+v/D9P/b1TKnv+/9f2Pov//D/3/bq+v/9f/t0z/P5/+fwH9v+f/6//1/yzV2Pr/3P2PiFs62f8AAADQg9z9j4xb7H8AAABoRu7+i+IW+x8AAACakbv/UXFLJ/t/W/+/Muuz/8+MdxLP/9f/e/6//n+d/l//P+R4+/9LH/zKp//X/+v/g/5/T/3/6d0+X/9Pi8bW/+fuf3Tc0sn+BwAAgB7k7n9M3GL/AwAAQDNy918ct9j/AAAA0Izc/Y+NWzrZ/8t7/v+ZtY9PtP8v+n/9/9oH9P/6f/3/ZHn+/3w99f8X3XH+hffc8M837uf19f/6f8//1/+zXGPr/3P3Py5u6WT/AwAAQA9y9z8+brH/AQAAoBm5+58Qt9j/AAAA0Izc/U+MWzrZ/8vr/yf9/P+i/9f/r31A/6//1/9Plv5/vp76/4O8vv5f/6//1/+zXGPr/3P3Pylu6WT/AwAAQA9y9z85brH/AQAAoBm5+y+JW+x/AAAAaEbu/rNxSyf7X/9/9P3/A/p//X9c/b/+X/9/9PT/8+n/F9D/6//1//p/lmps/X/u/kvjlk72PwAAAPQgd/9T4hb7HwAAAJqRu/+pcYv9DwAAAM3I3f+0uKWT/a//9/x//b/+X/8//Pr6/2nS/8+n/19A/3/Yfv48/b/+X//PZvvs/++f82V7Kf1/7v6nxy2d7H8AAADoQe7+Z8Qt9j8AAAA0I3f/M+MW+x8AAACakbv/WXFLJ/tf/6//1//r/w/c/+/8obdG/z9M/3889P/zjab/Xzk1+GH9/+T7f8//1//r/9libM//z93/7Lilk/0PAAAAPcjd/5y4Zc7+3/dP5gMAAAAnKnf/c+MW3/8HAACAycvqLHf/8+KWTva//l//r//X/3v+//Drz+v/b9z0/vT/46L/n280/f8u9P/6/ym/f/2//p+dxtb/5+5/ftzSyf4HAACAHuTuvyxusf8BAACgGbn7XxC32P8AAADQjNz9L4xbOtn/w/3/xh/X/++N/n/r+9f/D//4WFb/n39F/f/c/v8/Pf+/T/r/+Y6//z+t/9/61z9g/7/+FUf/P+7333j/f2bR5+v/GTK2/j93/+VxSyf7HwAAAHqQu/9FcYv9DwAAAM3I3f/iuMX+BwAAgEn793/caMFy978kbulk/3v+v/5f/z+9/t/z/9ed5PP/Z8fe/5/S/++R/n8+z/9fYLT9/zr9/7jff+P9v+f/cyBj6/9z918Rt3Sy/wEAAKAHV9w3W9v9L53N7H8AAACYos2/dmD7LygNuftfFrfY/wAAANCM3P0vj1s62f/6f/2//l//r/8ffv1x9f+e/79Xk+7/T238rv5f/z9kov3/qcb6/yt3+/wx9P+X6P8ZmS39/80bHz+p/j93/yvilk72PwAAAPQgd/8r4xb7HwAAAJqRu/9VcYv9DwAAAM3I3f/quKWT/X/k/f+Z3V9b/6//1//r//X/+v9lm3T/7/n/+v82+3/P//f8f/1/xzb6/61fD0+q/8/d/5q4pZP9DwAAAD3I3f/auMX+BwAAgGbk7r8ybrH/AQAAoBm5+18Xt3Sy/z3/X/+v/9f/6/+HX1//P036//n0/wvo//X/+n/9P0u15fn/m5xU/5+7/6q4pZP9DwAAAD3I3X913GL/AwAAQDNy978+brH/AQAAoBm5+98Qt3Sy//X/R9v/58f1//r/mf5f/6//Pxbd9v8rQ/8m2mmX/v+2h5z9760f0f/r//X/+n/9P0swiv7/3MZ/Xebuf2Pc0sn+BwAAgB7k7n9T3GL/AwAAQDNy9785brH/AQAAoBm5+98St+xz///DUt/V8dH/e/6//l//r/8ffn39/zR12//vkef/L6D/1//r//X/LNWR9P/3bnxx3+/z/3P3vzVu8f1/AAAAaEbu/rfFLfY/AAAANCN3/9vjFvsfAAAAmpG7/x1xSyf7X/+v/9f/6//1/8Ovf9D+f3U2TP9/PPT/8+n/F9D/6//1//p/lupI+v9N9tv/5+6/Jm7pZP8DAABAD3L3vzNusf8BAACgGbn73xW32P8AAADQjNz9745bOtn/+n/9v/5f/6//H359z/+fJv3/fPr/2Wx27Zw3MNT/nzut/9f/6//1/xzQ2Pr/3P3viVs62f8AAADQg9z918Yt9j8AAAA0I3f/dXGL/Q8AAADNyN3/3rilk/2v/9f/6//1//r/4dfX/0+T/n8+/f8Cnv9/2H7+nP5f/6//Z7Ox9f+5+6+PWzrZ/wAAANCD3P03xC32PwAAADQjd//74hb7HwAAAJqRu//GuKWT/a//1//r//X/R9L/n9X/b6f/Px5H1//P9P/6f/3/Ap7/r//X/7PdcfX/98fX+0X9f+7+98ctnex/AAAA6EHu/pviFvsfAAAAmpG7/wNxi/0PAAAAzcjd/8G4pZP9r//X/+v/9f+e/z/8+vr/afL8//n0/wvo//X/+n/9P0t1XP3/br3/9v+du/9DcUsn+x8AAAB6kLv/5rjF/gcAAIBm5O6/JW6x/wEAAKAZufs/HLd0sv/1//r/rf3/bKb/1//r/9cdQ/+/OtP/L53+fz79/wL6/zb7/7+ZNdT/n9n18/X/jNHY+v/c/R+JWzrZ/wAAANCD3P0fjVvsfwAAAGhG7v6PxS32PwAAADQjd//H45aW9v8Du6dv0+//T2/7RP3/bDa782LP/9f/z3l9/f9o+v/6p6r/Xx79/3z6/wX0/232/57/r//nxIyt/8/d/4m4paX9DwAAAJ3L3f/JuMX+BwAAgGbk7v9U3GL/AwAAQDNy9386bulk/2/p/+/dCM/yj4+//9/+ifr/2aGe/6//X/uA/l//r/+frMP291etxr/T9P/6f/3/YD+/sst/98z0//p//T8Dxtb/5+7/TNzSyf4HAACAHuTuvzVusf8BAACgGbn7b4tb7H8AAABoRu7+z8Ytnez/6T//f/sn6v9n+v8u+v9V/b/+X/8/aCzP/7/ggv+6Xf+v/2+x/59H/6//1/+z3dj6/9z9n4tbOtn/AAAA0IPc/Z+PW+x/AAAAaEbu/i/ELfY/AAAANCN3/xfjlk72/87+/7zZeqG6bqj/j0ZN/7+J/n/r+9f/D//48Px//b/+/+iNpf/3/P+DvX/9v/5/yu9/X/3/v+z8fP0/LRpb/5+7//a4pZP9DwAAAD3I3f+luMX+BwAAgGbk7v9y3GL/AwAAQDNy998Rt3Sy/z3/X/+v/9f/6/+HX1//P036//n0/wvo/w/fz+dXVf3/dJ///7f6f5ZnbP1/7v6vxC1rw+9f//6Af5sAAADAiOTu/2rc0sn3/wEAAKAHufu/FrfY/wAAANCM3P1fj1s62f/6f/2//l//r/8ffn39/zTp/+fT/y/QT/+/OvTBk+7nD+uk338z/b/n/7NEY+v/c/d/I27pZP8DAABA2+5b+23u/m/GLfY/AAAANCN3/7fiFvsfAAAAmpG7/864pZP9r//X/7ff//+f/n/b6+v/9f8t0//nv9GH6f8X6Kf/H3TS/fzU33/1/+dO6//1/4Sx9f+5+++KWzrZ/wAAANCD3P3fjlvsfwAAAGhG7v7vxC32PwAAADQjd/9345ZO9r/+v6/+f2XWY//v+f+t9P+r2/5+9P/6/yHT6f+vPjX0Uc//1//r/6f7/j3/X//PTmPr/3P3371yqsv9DwAAAFP1P//20Lv2+ufevfbb1dn34hb7HwAAAJqRu//7cYv9DwAAAM3I3f+DuKWT/a//76v/7/P5//r/Vvp/z//X/+/FdPr/Yfp//b/+f7rvX/+v/2ensfX/uft/GLdsGn6D/wc9AAAAwMn5u/396bn7fxS3dPL9fwAAAOhB7v4fxy079v+5Pf6qdgAAAGBscvf/JG7p5Pv/+v+R9/+zI+r/48/T/6/T/+v/h15f/z9N+v/5Dtn/n1vR/+v/59D/6//1/2w3tv4/d/9N18+63P8AAADQqC0/o/DTtd+uzn4Wt9j/AAAA0Izc/T+PW+x/AAAAaEbu/l/ELZ3sf/3/yPv/Az3//0z9nuf/d97/X7Y6+Pr6f/1/y/T/83n+/wL6f/2//l//z1Lto/9fG6RH3f/n7v9l3NLJ/gcAAIAe5O7/Vdxi/wMAAEAzcvf/Om6x/wEAAKAZuft/E7d0sv/1/yfQ/19+ejY70v5/D8//1//30f/v8vrt9P//dP7ZW//3/6+7Rv/PhuPs//PHgv5f/6//X6f/1//r/9lubM//z93/27ilk/0PAAAAPcjdf0/cYv8DAABAM3L3/y5ueXD/33JS7woAAABYptz9v49bOvn+v/6/xef/T7P/z3/WJ9D/n51e/59Nce/9v+f/6/938vz/+fT/C+j/9f/6f/0/SzW2/j93/x/ilk72PwAAAPQgd/8f45bc/yv7/ql7AAAAYGRy998bt/j+PwAAADQjd/99cUsn+1//r/8fS/+fPP9/4/M8/3+d/l//vx/6//n0/wvo//X/+n/9P0s1tv4/d/+f4pZO9j8AAAD0IHf//XGL/Q8AAADNyN3/57jF/gcAAIBm5O7/S9zSyf7X/+v/9f/6f/3/8Ovr/6dJ/z+f/n8B/b/+X/+v/2epxtb/5+7/awAAAP//Tx5w3g==") pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7800, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x7b) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0x0, 0x0, 0x0, 0x448}, 0x0, [0x4fc0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b07c7d, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x7c4f, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7355, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x10, 0xbaf4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x3, 0x0, 0x0, 0x66, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc]}, 0x45c) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000a40)="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", 0xde0}, {&(0x7f0000001a40)="c2f3a88da071d96c72693eb3431ab283e02e0f363a04667af64004fe25072cc8bdec97165b7cd5d3da1b40b282d040be0ac8e3dd5506c17ba5ea29f255230cbfea68c4809c41644dc5c8b675bf747a993b6a25f51f3acc86cba6be4c34e2cd78402771438492d4751b2fcbca206dfe5a20c18a1cb52d11cc980e7237ab298eaa282fb7ff6b605f5188894fd4b1", 0x8d}, {0x0}, {&(0x7f0000000200)="b6ac7564e536a21701b6ab4ee0133f998c65696c3f15287fe317b2166e2f01df8d297f14e79de9eac4cc05ce13", 0x2d}], 0x4) 2.710879085s ago: executing program 7 (id=9103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82014001000010009"], 0x19) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x3eae, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.710420135s ago: executing program 5 (id=9104): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0x1}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.167906026s ago: executing program 7 (id=9105): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0x2, &(0x7f0000000000)={0x7, 0x77, 0x0, 0x84080, 0xffffffffffffffff}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x5, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000100)=0x5) 786.602157ms ago: executing program 3 (id=9106): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x8008700b, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) r4 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) 194.783277ms ago: executing program 4 (id=9107): socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) creat(&(0x7f0000000180)='./bus\x00', 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000020000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f9008500000082000000850000000e00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730140000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 131.608131ms ago: executing program 7 (id=9109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000040)={0x7f, 0x8}, 0x1) 131.28781ms ago: executing program 9 (id=9110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=9111): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000032780)=ANY=[@ANYBLOB='adinicb,iocharset=maciceland,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB=',novrs,iocharset=macinuit,mode=0000\x00000000000000010000,iocharset=iso8859-2,adinicb,volume=00000000000000000001,umask=00000000000000000000000,gid=forget,unhide,\x00'], 0x1, 0xc4d, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c28, 0x0, 0x3, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): IBSS network, BSSID 50:50:50:50:50:50 [ 1087.820409][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.852107][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.811248][T20193] Bluetooth: hci4: command 0x1003 tx timeout [ 1091.822036][ T5834] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1093.604267][ T30] audit: type=1326 audit(1759872775.435:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23996 comm="syz.2.6308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf4b8eec9 code=0x7fc00000 [ 1094.046832][T24018] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1094.287538][T24012] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1094.972391][T24035] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6322'. [ 1095.394487][T24037] overlayfs: failed to clone upperpath [ 1097.381529][T24074] fuse: Bad value for 'fd' [ 1097.703717][T24079] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.818686][T24098] fuse: Bad value for 'fd' [ 1101.848383][T24138] overlayfs: failed to clone upperpath [ 1102.213067][T24144] netlink: 'syz.6.6362': attribute type 10 has an invalid length. [ 1102.275516][T24144] team0: Port device dummy0 added [ 1102.284332][T24149] netlink: 'syz.6.6362': attribute type 10 has an invalid length. [ 1102.317896][T24149] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1102.480202][T24149] team0: Failed to send options change via netlink (err -105) [ 1102.495093][T24149] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1102.551832][T24149] team0: Port device dummy0 removed [ 1102.610454][T24149] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1104.647171][T24182] veth0_vlan: left promiscuous mode [ 1104.720505][T24182] veth0_vlan: entered allmulticast mode [ 1104.811362][T24182] veth0_vlan: entered promiscuous mode [ 1104.972551][T24186] sg_read: process 774 (syz.6.6378) changed security contexts after opening file descriptor, this is not allowed. [ 1105.444747][T24196] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6381'. [ 1107.125057][T24225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6390'. [ 1108.245989][T24236] veth0_vlan: entered allmulticast mode [ 1109.794537][T22828] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1109.976701][T22828] usb 3-1: Using ep0 maxpacket: 16 [ 1110.023581][T22828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1110.106997][T22828] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1110.167213][T22828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.198602][T22828] usb 3-1: Product: syz [ 1110.217239][T22828] usb 3-1: Manufacturer: syz [ 1110.251390][T22828] usb 3-1: SerialNumber: syz [ 1110.288439][T22828] usb 3-1: config 0 descriptor?? [ 1110.344107][T22828] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1110.397234][T22828] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1110.586981][T24270] overlayfs: failed to clone upperpath [ 1111.173527][T22828] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1111.183967][T24276] loop8: detected capacity change from 0 to 128 [ 1111.842516][T22828] em28xx 3-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 1111.875919][T22828] em28xx 3-1:0.0: board has no eeprom [ 1112.131294][T22828] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1112.154975][T22828] em28xx 3-1:0.0: dvb set to bulk mode. [ 1112.173144][ T5919] em28xx 3-1:0.0: Binding DVB extension [ 1112.221805][T22828] usb 3-1: USB disconnect, device number 17 [ 1112.260908][T22828] em28xx 3-1:0.0: Disconnecting em28xx [ 1112.606889][ T5919] em28xx 3-1:0.0: Registering input extension [ 1112.634176][T22828] em28xx 3-1:0.0: Closing input extension [ 1112.734958][T22828] em28xx 3-1:0.0: Freeing device [ 1113.112691][ T30] audit: type=1326 audit(1759872794.945:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24304 comm="syz.2.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf4b8eec9 code=0x7fc00000 [ 1113.595293][T24317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6423'. [ 1113.788722][ T30] audit: type=1326 audit(1759872795.615:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24304 comm="syz.2.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0cf4b8eec9 code=0x7fc00000 [ 1114.782301][T24354] loop6: detected capacity change from 0 to 1024 [ 1114.790062][T24354] EXT4-fs: Ignoring removed orlov option [ 1114.871534][T24354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1114.964130][ T30] audit: type=1800 audit(1759872796.795:408): pid=24354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6437" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1114.990606][ T30] audit: type=1804 audit(1759872796.815:409): pid=24354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.6437" name="/newroot/291/bus/bus" dev="loop6" ino=18 res=1 errno=0 [ 1115.610919][T18833] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.993786][T24372] netlink: 'syz.6.6443': attribute type 1 has an invalid length. [ 1116.284983][T24377] veth5: entered promiscuous mode [ 1116.354400][T24377] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1117.623737][T24407] team0: Port device vlan2 added [ 1120.535516][T24421] loop6: detected capacity change from 0 to 32768 [ 1120.686945][T24421] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1121.410907][ T30] audit: type=1800 audit(1759872803.245:410): pid=24444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6469" name="file0" dev="fuse" ino=5 res=0 errno=0 [ 1121.506165][T18833] ocfs2: Unmounting device (7,6) on (node local) [ 1122.466867][T20193] Bluetooth: hci0: command 0x0406 tx timeout [ 1124.406666][T24507] tipc: Enabling of bearer rejected, failed to enable media [ 1124.542578][ T5970] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1124.611662][ T5970] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1124.829766][T24526] netlink: 'syz.7.6491': attribute type 4 has an invalid length. [ 1124.882732][T24529] netlink: 'syz.7.6491': attribute type 4 has an invalid length. [ 1125.499238][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.505856][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.777122][T24570] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6507'. [ 1126.946484][T24573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6508'. [ 1131.258805][T24643] overlayfs: failed to clone upperpath [ 1136.841973][T24715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6556'. [ 1136.865781][ T30] audit: type=1326 audit(1759872818.695:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24712 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf4b8eec9 code=0x7ffc0000 [ 1136.956002][ T30] audit: type=1326 audit(1759872818.695:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24712 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf4b8eec9 code=0x7ffc0000 [ 1137.020473][ T30] audit: type=1326 audit(1759872818.695:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24712 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cf4b8eec9 code=0x7ffc0000 [ 1137.150420][ T30] audit: type=1326 audit(1759872818.695:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24712 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf4b8eec9 code=0x7ffc0000 [ 1137.312289][ T30] audit: type=1326 audit(1759872818.715:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24712 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cf4b8eec9 code=0x7ffc0000 [ 1137.523799][ T30] audit: type=1326 audit(1759872818.715:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24712 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf4b8eec9 code=0x7ffc0000 [ 1137.688235][ T30] audit: type=1326 audit(1759872818.715:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24712 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf4b8eec9 code=0x7ffc0000 [ 1137.874450][ T30] audit: type=1326 audit(1759872818.725:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24712 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cf4b8eec9 code=0x7ffc0000 [ 1138.012356][ T30] audit: type=1326 audit(1759872818.825:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24712 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf4b8eec9 code=0x7ffc0000 [ 1138.144323][ T30] audit: type=1326 audit(1759872818.825:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24712 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf4b8eec9 code=0x7ffc0000 [ 1143.148535][T24820] fuse: Bad value for 'fd' [ 1144.427285][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6598'. [ 1144.613651][T24840] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1144.704687][T24840] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1144.739824][T24845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6602'. [ 1144.754653][T24840] bond1: (slave ipvlan2): Error -95 calling set_mac_address [ 1145.080955][ T5970] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1145.284076][ T5970] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1145.329817][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.091848][ T5970] usb 3-1: config 0 descriptor?? [ 1146.164523][ T5970] cp210x 3-1:0.0: cp210x converter detected [ 1146.756803][ T5970] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1147.000994][ T5970] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1147.027047][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6609'. [ 1147.037973][ T5970] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1147.093524][ T5970] usb 3-1: USB disconnect, device number 18 [ 1147.146322][ T5970] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1147.191357][ T5970] cp210x 3-1:0.0: device disconnected [ 1148.438296][T24928] input: syz1 as /devices/virtual/input/input50 [ 1148.750632][T24933] loop6: detected capacity change from 0 to 128 [ 1149.062023][T24939] syz.6.6617: attempt to access beyond end of device [ 1149.062023][T24939] loop6: rw=2049, sector=145, nr_sectors = 288 limit=128 [ 1149.858058][T24956] tipc: Started in network mode [ 1149.881132][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1149.881159][ T30] audit: type=1326 audit(1759872831.715:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.7.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1149.881204][T24956] tipc: Node identity ac14140f, cluster identity 4711 [ 1149.928273][ T30] audit: type=1326 audit(1759872831.715:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.7.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1149.953667][ T30] audit: type=1326 audit(1759872831.755:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.7.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1149.983644][T24956] tipc: New replicast peer: 255.255.255.255 [ 1149.992040][T24956] tipc: Enabled bearer , priority 10 [ 1149.998431][ T30] audit: type=1326 audit(1759872831.755:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.7.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1150.083272][ T30] audit: type=1326 audit(1759872831.755:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.7.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1150.123872][ T30] audit: type=1326 audit(1759872831.785:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.7.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1150.153274][ T30] audit: type=1326 audit(1759872831.785:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.7.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1150.177501][ T30] audit: type=1326 audit(1759872831.785:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.7.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1150.205179][ T30] audit: type=1326 audit(1759872831.785:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.7.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1150.228240][ T30] audit: type=1326 audit(1759872831.785:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.7.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1150.325560][T24967] netlink: 277 bytes leftover after parsing attributes in process `syz.9.6632'. [ 1150.709839][T24978] tipc: Failed to remove unknown binding: 66,1,1/0:567353168/567353170 [ 1150.719837][T24978] tipc: Failed to remove unknown binding: 66,1,1/0:567353168/567353170 [ 1151.136445][T20308] tipc: Node number set to 2886997007 [ 1152.017285][T25003] syz_tun: entered allmulticast mode [ 1154.118782][T25034] netlink: 'syz.9.6659': attribute type 1 has an invalid length. [ 1154.296811][T25036] veth3: entered promiscuous mode [ 1154.338524][T25036] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1157.595676][T25105] tipc: New replicast peer: 255.255.255.255 [ 1157.621333][T25105] tipc: Enabled bearer , priority 10 [ 1162.749684][T25175] overlayfs: failed to clone upperpath [ 1163.002474][T25178] overlayfs: failed to clone upperpath [ 1163.900491][T25198] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6721'. [ 1164.098724][T25202] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6722'. [ 1170.605557][T25279] overlayfs: failed to clone upperpath [ 1172.298964][T25315] overlayfs: failed to clone upperpath [ 1172.551715][T25317] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6762'. [ 1173.847448][T25357] overlayfs: failed to clone upperpath [ 1175.075654][T25380] overlayfs: failed to clone upperpath [ 1177.908703][T25404] overlayfs: failed to clone upperpath [ 1178.776004][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 1179.858609][T25434] syz_tun: entered allmulticast mode [ 1179.904543][T25434] dvmrp1: entered allmulticast mode [ 1180.006379][T25433] syz_tun: left allmulticast mode [ 1183.413524][T25482] delete_channel: no stack [ 1185.681941][T25505] overlayfs: failed to clone upperpath [ 1186.938221][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.948698][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.226698][T25532] tipc: Failed to remove unknown binding: 66,1,1/0:1757700992/1757700994 [ 1187.310035][T25532] tipc: Failed to remove unknown binding: 66,1,1/0:1757700992/1757700994 [ 1187.330774][T25532] tipc: Failed to remove unknown binding: 66,1,1/0:1757700992/1757700994 [ 1187.656132][T25546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6841'. [ 1192.330895][ T5919] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1192.510806][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 1192.538491][ T5919] usb 7-1: config 0 has no interfaces? [ 1192.565086][ T5919] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1192.617980][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.701972][ T5919] usb 7-1: config 0 descriptor?? [ 1194.133653][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 1194.303200][T25624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6866'. [ 1195.157360][T20308] usb 7-1: USB disconnect, device number 31 [ 1196.054558][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1196.054590][ T30] audit: type=1804 audit(1759872877.865:461): pid=25637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6871" name="file0" dev="ramfs" ino=80801 res=1 errno=0 [ 1197.020318][T25643] overlayfs: failed to clone upperpath [ 1198.080064][T25657] loop6: detected capacity change from 0 to 256 [ 1199.746907][T25688] overlayfs: failed to clone upperpath [ 1200.703003][T25695] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1205.075324][T25740] loop6: detected capacity change from 0 to 128 [ 1205.151737][T25740] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1205.169310][T25740] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1205.561470][T18833] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1206.743394][T25768] netlink: 'syz.2.6918': attribute type 1 has an invalid length. [ 1206.744324][T25770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6919'. [ 1207.690277][T25788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6925'. [ 1209.370648][T25816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1209.499584][T25816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1209.693553][T25816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.293566][T25872] overlayfs: failed to clone upperpath [ 1216.423922][ T30] audit: type=1804 audit(1759872898.255:462): pid=25880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.6951" name="file0" dev="ramfs" ino=81486 res=1 errno=0 [ 1221.182263][T25927] svc: failed to register nfsdv3 RPC service (errno 111). [ 1221.332452][T25927] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1223.912706][T25949] tipc: Started in network mode [ 1223.970411][T25949] tipc: Node identity 4, cluster identity 4711 [ 1223.988342][T25949] tipc: Node number set to 4 [ 1226.816709][T25975] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 1227.116086][T25975] bond0: (slave bond_slave_0): Releasing backup interface [ 1227.226117][ T5985] IPVS: starting estimator thread 0... [ 1227.244531][T25975] bond0: (slave bond_slave_1): Releasing backup interface [ 1227.341001][T25983] IPVS: using max 20 ests per chain, 48000 per kthread [ 1227.363435][T25975] team0: Port device team_slave_1 removed [ 1227.442392][T25975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.490812][T25975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.531620][T25975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1227.546612][T25975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.631214][T25975] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1227.669819][T25991] loop6: detected capacity change from 0 to 16 [ 1227.697857][T25991] erofs (device loop6): mounted with root inode @ nid 36. [ 1227.880511][T25990] netlink: 'syz.9.6983': attribute type 3 has an invalid length. [ 1228.012410][T25990] netlink: 'syz.9.6983': attribute type 3 has an invalid length. [ 1229.690851][ T30] audit: type=1326 audit(1759872911.515:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26011 comm="syz.8.6989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba0f38eec9 code=0x0 [ 1231.247209][T26020] netlink: 'syz.2.6992': attribute type 4 has an invalid length. [ 1233.239238][T26037] loop6: detected capacity change from 0 to 1764 [ 1233.324033][T26037] iso9660: Bad value for 'dmode' [ 1234.686411][ T30] audit: type=1326 audit(1759872916.515:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26047 comm="syz.1.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2d18eec9 code=0x7fc00000 [ 1234.861068][ T30] audit: type=1326 audit(1759872916.545:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26047 comm="syz.1.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2d18eec9 code=0x7fc00000 [ 1234.973873][ T30] audit: type=1326 audit(1759872916.545:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26047 comm="syz.1.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2d18eec9 code=0x7fc00000 [ 1235.539209][T26061] md: md2 stopped. [ 1235.574021][T26061] md: md2 stopped. [ 1236.091346][ T30] audit: type=1326 audit(1759872917.915:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26047 comm="syz.1.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e2d12af79 code=0x7fc00000 [ 1236.278000][ T30] audit: type=1326 audit(1759872918.105:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.7.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1236.450884][ T30] audit: type=1326 audit(1759872918.105:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.7.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1236.553700][ T30] audit: type=1326 audit(1759872918.195:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.7.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1236.650395][ T30] audit: type=1326 audit(1759872918.195:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.7.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1236.673070][ T30] audit: type=1326 audit(1759872918.195:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.7.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1236.903691][ T30] audit: type=1326 audit(1759872918.225:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.7.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1237.640754][ T30] audit: type=1326 audit(1759872918.225:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.7.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1245.818220][T26186] loop6: detected capacity change from 0 to 256 [ 1245.853647][T26186] FAT-fs (loop6): bogus sectors per cluster 30 [ 1245.859856][T26186] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1247.397983][T26217] overlayfs: failed to clone upperpath [ 1248.283199][T26228] overlayfs: failed to clone upperpath [ 1248.377449][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.384992][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.764771][T26233] overlayfs: failed to clone upperpath [ 1250.308998][T26245] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 1250.537310][T26248] bridge_slave_0: left allmulticast mode [ 1250.566760][T26248] bridge_slave_0: left promiscuous mode [ 1250.604436][T26248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.686801][T26248] bridge_slave_1: left allmulticast mode [ 1250.749288][T26248] bridge_slave_1: left promiscuous mode [ 1250.787409][T26248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.968515][T26248] bond0: (slave bond_slave_0): Releasing backup interface [ 1251.102645][T26248] bond0: (slave bond_slave_1): Releasing backup interface [ 1253.317788][T26248] team0: Port device team_slave_0 removed [ 1253.406392][T26248] team0: Port device team_slave_1 removed [ 1253.490767][T26248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.548789][T26248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.715735][T26248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.757283][T26248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.848855][T26248] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1254.211698][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1254.211719][ T30] audit: type=1326 audit(1759872936.045:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26264 comm="syz.7.7073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x0 [ 1255.078746][ T1771] libceph: connect (1)[c::]:6789 error -101 [ 1255.088385][ T1771] libceph: mon0 (1)[c::]:6789 connect error [ 1255.371165][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 1255.395529][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 1255.843408][T26277] ceph: No mds server is up or the cluster is laggy [ 1257.979205][T26308] binder: 26307:26308 unknown command 0 [ 1258.030724][T26308] binder: 26307:26308 ioctl c0306201 200000000080 returned -22 [ 1261.883928][T26344] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7097'. [ 1261.941328][T26345] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7097'. [ 1264.511636][T26360] overlayfs: failed to clone lowerpath [ 1264.535731][T26360] overlayfs: failed to clone lowerpath [ 1267.532122][ T30] audit: type=1326 audit(1759872949.295:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26376 comm="syz.6.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79dd18eec9 code=0x7fc00000 [ 1268.816766][ T30] audit: type=1326 audit(1759872950.645:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26376 comm="syz.6.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79dd12af79 code=0x7fc00000 [ 1269.981003][ T1771] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1270.142800][ T1771] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1270.277850][ T1771] usb 7-1: config 0 has no interface number 0 [ 1270.300777][ T1771] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.336226][ T1771] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.359955][ T1771] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1270.380316][ T1771] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.398627][ T1771] usb 7-1: config 0 descriptor?? [ 1271.052753][ T1771] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.0044/input/input51 [ 1271.326158][ T1771] holtek_kbd 0003:04D9:A055.0044: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 1271.370564][ T1771] usb 7-1: USB disconnect, device number 32 [ 1272.338235][T26424] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1277.101340][T26496] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 1277.166286][T26496] ref_ctr increment failed for inode: 0x359 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888025012b00 [ 1278.159523][T26513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1278.166485][T26513] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1278.176937][T26513] vhci_hcd vhci_hcd.0: Device attached [ 1279.233565][ T1771] usb 38-1: SetAddress Request (2) to port 0 [ 1279.323386][ T1771] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1279.468457][T26514] vhci_hcd: connection reset by peer [ 1279.606164][ T3449] vhci_hcd: stop threads [ 1279.640891][ T3449] vhci_hcd: release socket [ 1279.769495][ T3449] vhci_hcd: disconnect device [ 1280.779821][T26532] overlayfs: failed to clone upperpath [ 1283.173717][T26565] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1283.226562][T26565] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1283.236773][T26565] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1283.243828][T26565] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 1283.260819][T26565] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1283.269633][T26565] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1283.279025][T26565] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1283.288000][T26565] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1283.298175][T26565] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1283.306977][T26565] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1283.315438][T26565] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1283.325283][T26565] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1284.156971][T26573] geneve0: entered allmulticast mode [ 1284.451028][ T1771] usb 38-1: device descriptor read/8, error -110 [ 1284.863845][ T1771] usb usb38-port1: attempt power cycle [ 1285.464707][ T1771] usb usb38-port1: unable to enumerate USB device [ 1288.838590][T26645] random: crng reseeded on system resumption [ 1293.508475][T26706] /dev/nullb0: Can't lookup blockdev [ 1297.013355][ T30] audit: type=1326 audit(1759872978.835:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26739 comm="syz.1.7236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e2d18eec9 code=0x0 [ 1301.828784][T26791] netlink: 'syz.2.7253': attribute type 2 has an invalid length. [ 1307.778153][T26875] netlink: 'syz.9.7273': attribute type 12 has an invalid length. [ 1309.967241][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1320.570880][T26949] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7293'. [ 1320.662063][T26949] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7293'. [ 1325.021668][T26985] overlayfs: failed to clone upperpath [ 1325.307202][T20193] Bluetooth: hci6: unexpected event for opcode 0x200b [ 1326.092322][T27015] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7316'. [ 1327.051829][T27028] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7321'. [ 1328.330547][T27041] cgroup: Unknown subsys name 'hash' [ 1329.166927][T27054] ref_ctr increment failed for inode: 0x546 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807ba15600 [ 1329.330761][T20193] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1329.342061][T20193] Bluetooth: hci6: Injecting HCI hardware error event [ 1329.352878][T20193] Bluetooth: hci6: hardware error 0x00 [ 1330.186930][T27076] overlayfs: failed to clone upperpath [ 1331.118276][ T1771] IPVS: starting estimator thread 0... [ 1331.261642][T27083] IPVS: using max 28 ests per chain, 67200 per kthread [ 1331.411716][T20193] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1336.429212][ T30] audit: type=1326 audit(1759873018.245:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.8.7357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0f38eec9 code=0x7ffc0000 [ 1336.585941][ T30] audit: type=1326 audit(1759873018.255:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.8.7357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0f38eec9 code=0x7ffc0000 [ 1336.728089][ T30] audit: type=1326 audit(1759873018.305:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.8.7357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fba0f38eec9 code=0x7ffc0000 [ 1336.761855][ T30] audit: type=1326 audit(1759873018.305:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.8.7357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0f38eec9 code=0x7ffc0000 [ 1336.784352][ T30] audit: type=1326 audit(1759873018.305:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.8.7357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0f38eec9 code=0x7ffc0000 [ 1336.810745][ T30] audit: type=1326 audit(1759873018.345:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.8.7357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba0f38eec9 code=0x7ffc0000 [ 1336.890766][ T30] audit: type=1326 audit(1759873018.345:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.8.7357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0f38eec9 code=0x7ffc0000 [ 1336.917390][ T30] audit: type=1326 audit(1759873018.345:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.8.7357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0f38eec9 code=0x7ffc0000 [ 1336.923084][T27141] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7359'. [ 1336.940703][ T30] audit: type=1326 audit(1759873018.355:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.8.7357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fba0f38eec9 code=0x7ffc0000 [ 1336.940781][ T30] audit: type=1326 audit(1759873018.355:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.8.7357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0f38eec9 code=0x7ffc0000 [ 1337.850179][T27158] netlink: 1335 bytes leftover after parsing attributes in process `syz.2.7365'. [ 1338.193202][T27164] loop6: detected capacity change from 0 to 256 [ 1338.226836][T27164] vfat: Unknown parameter 'autofs' [ 1338.243601][T27169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7370'. [ 1338.994622][T27197] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7372'. [ 1341.051879][T27228] overlayfs: failed to clone upperpath [ 1344.718906][T27271] overlayfs: failed to clone upperpath [ 1346.547465][T27289] ref_ctr increment failed for inode: 0x8b3 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88805eb760c0 [ 1350.271012][T27344] netlink: 'syz.6.7412': attribute type 29 has an invalid length. [ 1350.316905][T27344] netlink: 'syz.6.7412': attribute type 29 has an invalid length. [ 1350.376774][T27344] netlink: 500 bytes leftover after parsing attributes in process `syz.6.7412'. [ 1350.847326][T27350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7414'. [ 1351.001691][T27353] vlan2: entered allmulticast mode [ 1351.026766][T27353] bond3: entered allmulticast mode [ 1351.885669][T27367] ref_ctr increment failed for inode: 0x1d56 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888028e9d600 [ 1352.422688][ T5985] IPVS: starting estimator thread 0... [ 1352.525813][T27375] IPVS: using max 23 ests per chain, 55200 per kthread [ 1355.554090][T27412] ref_ctr increment failed for inode: 0x431 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888028e9b5c0 [ 1364.687514][ T1771] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1364.871547][ T1771] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1364.930075][ T1771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.956418][ T1771] usb 3-1: Product: syz [ 1364.969786][ T1771] usb 3-1: Manufacturer: syz [ 1364.983379][ T1771] usb 3-1: SerialNumber: syz [ 1365.005599][ T1771] usb 3-1: config 0 descriptor?? [ 1365.275377][ T1771] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1366.593868][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1366.593900][ T30] audit: type=1326 audit(1759873048.415:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27501 comm="syz.8.7463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba0f38eec9 code=0x0 [ 1366.698410][ T1771] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1366.747826][ T1771] usb 3-1: USB disconnect, device number 19 [ 1368.527928][ T30] audit: type=1804 audit(1759873050.355:534): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.7468" name="file0" dev="tmpfs" ino=1126 res=1 errno=0 [ 1368.643872][T27519] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7469'. [ 1368.697558][T27519] netem: unknown loss type 0 [ 1368.738223][T27519] netem: change failed [ 1368.765577][T27523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7471'. [ 1368.825898][T27521] veth0: entered promiscuous mode [ 1371.563000][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1373.214783][T27552] ceph: No mds server is up or the cluster is laggy [ 1373.940354][T27562] EXT4-fs (loop13): unable to read superblock [ 1375.530832][ T5919] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1375.800869][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 1375.819351][ T5919] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.830898][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1375.837531][ T5919] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1375.849458][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.861125][ T5919] usb 3-1: config 0 descriptor?? [ 1376.465789][ T5919] nzxt-smart2 0003:1E71:2009.0045: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1376.853348][ T5919] usb 3-1: USB disconnect, device number 20 [ 1379.173849][T27607] 9pnet: p9_errstr2errno: server reported unknown error l_path=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa$ [ 1389.994773][T27685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7522'. [ 1390.149800][T27693] overlayfs: failed to clone lowerpath [ 1390.966823][T27710] sock: sock_set_timeout: `syz.2.7529' (pid 27710) tries to set negative timeout [ 1391.531483][T27721] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7533'. [ 1392.369778][T27723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1394.336916][T27741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7540'. [ 1398.151983][T27799] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1400.234693][T27811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1401.215943][T27822] 9pnet: Could not find request transport: fdï<ˆÔ«‚Ù° øÇ*¯›ÏÜeÍ( [ 1401.215943][T27822] Ž†6“5p=Ò³/>±†Š>[Rõ-IsøáOL!ÏPÈàu Õ`Â΂8rä ݃–Ù‡Í6ÄvÜ¢HþÕ€ˆS¶1ÿt“Ý´#C™_4(–ÉwPõ5ƒ…¶óÆqéQKì…-!96Á—·ä’±¾#SŽ€G ¥§®ù/ zu¨µ±ŠèzŠ‰^ã™\$àáV~–ªÚß=³Ó™®|’¶kGwÞçØÓì÷ü´g”¸Ú—È·øóNJòAúÿˆšá½0xffffffffffffffff [ 1404.688714][T27857] lo speed is unknown, defaulting to 1000 [ 1404.695131][T27857] lo speed is unknown, defaulting to 1000 [ 1404.717416][T27857] lo speed is unknown, defaulting to 1000 [ 1404.808376][T27857] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1404.969061][T27857] lo speed is unknown, defaulting to 1000 [ 1404.989390][T27857] lo speed is unknown, defaulting to 1000 [ 1405.004579][T27857] lo speed is unknown, defaulting to 1000 [ 1405.023278][T27857] lo speed is unknown, defaulting to 1000 [ 1405.045564][T27857] lo speed is unknown, defaulting to 1000 [ 1405.064549][T27857] lo speed is unknown, defaulting to 1000 [ 1405.083261][T27857] lo speed is unknown, defaulting to 1000 [ 1405.099217][T27857] lo speed is unknown, defaulting to 1000 [ 1409.849913][T27906] 9pnet: Could not find request transport: fdï<ˆÔ«‚Ù° øÇ*¯›ÏÜeÍ( [ 1409.849913][T27906] Ž†6“5p=Ò³/>±†Š>[Rõ-IsøáOL!ÏPÈàu Õ`Â΂8rä ݃–Ù‡Í6ÄvÜ¢HþÕ€ˆS¶1ÿt“Ý´#C™_4(–ÉwPõ5ƒ…¶óÆqéQKì…-!96Á—·ä’±¾#SŽ€G ¥§®ù/ zu¨µ±ŠèzŠ‰^ã™\$àáV~–ªÚß=³Ó™®|’¶kGwÞçØÓì÷ü´g”¸Ú—È·øóNJòAúÿˆšá½0xffffffffffffffff [ 1411.730109][ T5912] Process accounting resumed [ 1419.078151][T27986] overlayfs: failed to clone upperpath [ 1419.171209][T27988] overlayfs: failed to clone upperpath [ 1420.959366][T28015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7629'. [ 1423.643814][T28040] overlayfs: failed to clone upperpath [ 1425.484870][T28056] overlayfs: failed to clone upperpath [ 1432.696952][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.921256][T28127] vlan4: entered promiscuous mode [ 1432.926524][T28127] vlan4: entered allmulticast mode [ 1432.987040][T28127] hsr_slave_1: entered allmulticast mode [ 1433.462322][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7675'. [ 1433.531492][T20193] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 1435.583910][ T1771] libceph: connect (1)[c::]:6789 error -101 [ 1435.590057][ T1771] libceph: mon0 (1)[c::]:6789 connect error [ 1435.727219][T28172] ceph: No mds server is up or the cluster is laggy [ 1436.951798][T28187] overlayfs: failed to clone upperpath [ 1438.483791][T28201] siw: device registration error -23 [ 1439.648641][T28203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.715684][T28206] overlayfs: failed to clone upperpath [ 1441.917277][T28222] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1444.611757][T28247] siw: device registration error -23 [ 1445.963614][T28251] overlayfs: failed to clone lowerpath [ 1446.418409][T28260] overlayfs: failed to clone upperpath [ 1446.466793][T28260] overlayfs: failed to clone upperpath [ 1447.968199][T28284] ipip0: entered promiscuous mode [ 1448.049423][T28284] ipip0: entered allmulticast mode [ 1448.083839][T28286] bridge0: port 1(syz_tun) entered blocking state [ 1448.106800][T28286] bridge0: port 1(syz_tun) entered disabled state [ 1448.144887][T28286] syz_tun: entered allmulticast mode [ 1448.158630][T28286] syz_tun: entered promiscuous mode [ 1448.172811][T28286] bridge0: port 1(syz_tun) entered blocking state [ 1448.179332][T28286] bridge0: port 1(syz_tun) entered forwarding state [ 1454.851525][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7742'. [ 1457.237817][ T30] audit: type=1326 audit(1759873139.065:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28370 comm="syz.8.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0f38eec9 code=0x7fc00000 [ 1457.661466][T28388] Invalid source name [ 1457.665851][T28388] UBIFS error (pid: 28388): cannot open "./file0", error -22 [ 1458.921857][T28402] vlan2: entered promiscuous mode [ 1458.935194][T28402] vlan2: entered allmulticast mode [ 1458.940428][T28402] hsr_slave_1: entered allmulticast mode [ 1459.025700][T28411] netlink: 'syz.6.7760': attribute type 4 has an invalid length. [ 1459.077700][T28412] netlink: 'syz.6.7760': attribute type 4 has an invalid length. [ 1461.270428][T28426] overlayfs: failed to clone upperpath [ 1463.042492][T28457] netlink: 'syz.2.7773': attribute type 12 has an invalid length. [ 1466.524359][T28460] Set syz1 is full, maxelem 65536 reached [ 1467.209746][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 1467.229705][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 1467.256100][T28476] ceph: No mds server is up or the cluster is laggy [ 1467.662659][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 1467.672245][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 1468.500994][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 1468.507124][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 1468.863613][T28493] netlink: 'syz.8.7784': attribute type 4 has an invalid length. [ 1468.925563][T28493] netlink: 'syz.8.7784': attribute type 4 has an invalid length. [ 1469.348620][T28504] bond4: (slave ip6gretap1): making interface the new active one [ 1469.441392][T28504] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1471.592285][T28516] overlayfs: failed to clone upperpath [ 1474.402872][ T30] audit: type=1326 audit(1759873156.205:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28535 comm="syz.7.7798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x0 [ 1482.650494][T28635] overlayfs: failed to clone upperpath [ 1483.361633][T28646] netlink: 'syz.8.7832': attribute type 10 has an invalid length. [ 1483.381100][T28646] mac80211_hwsim hwsim49 wlan1: left allmulticast mode [ 1483.421817][T28646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.435468][T28646] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1485.194354][T28664] overlayfs: failed to clone upperpath [ 1488.109799][T28683] pimreg: left allmulticast mode [ 1489.752760][T28698] netlink: 'syz.9.7848': attribute type 10 has an invalid length. [ 1490.105923][T28698] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1490.225773][T28713] overlayfs: failed to clone upperpath [ 1490.591141][T28702] netlink: 'syz.1.7839': attribute type 1 has an invalid length. [ 1491.700258][T28724] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1491.711456][T28724] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1492.198026][T28702] gretap1: entered promiscuous mode [ 1492.249885][T28702] bond2: (slave gretap1): making interface the new active one [ 1492.258290][T28702] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1492.272801][T28739] netlink: 'syz.2.7856': attribute type 4 has an invalid length. [ 1493.294046][T28767] netlink: 'syz.7.7866': attribute type 10 has an invalid length. [ 1493.388452][T28767] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1493.421680][T28766] wg2: entered promiscuous mode [ 1493.432843][T28766] wg2: entered allmulticast mode [ 1494.136695][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1497.941299][ T13] wlan1: Trigger new scan to find an IBSS to join [ 1501.721238][T28815] Set syz1 is full, maxelem 65536 reached [ 1501.964556][T28842] overlayfs: failed to clone upperpath [ 1502.699246][T16807] wlan1: Creating new IBSS network, BSSID 0a:ff:8d:00:00:00 [ 1502.744510][T28855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7898'. [ 1503.023250][T28853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7898'. [ 1504.042069][ T30] audit: type=1326 audit(1759873441.878:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28859 comm="syz.2.7900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cf4b8eec9 code=0x0 [ 1510.611582][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7911'. [ 1512.524324][T28918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1512.536140][T28918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1512.544675][T28918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1512.554531][T28918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1512.563975][T28918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1513.032080][T28916] lo speed is unknown, defaulting to 1000 [ 1514.789667][T28918] Bluetooth: hci4: command tx timeout [ 1517.010998][T28918] Bluetooth: hci4: command tx timeout [ 1517.374922][T20755] bridge0: port 1(syz_tun) entered disabled state [ 1517.591563][T20755] syz_tun (unregistering): left allmulticast mode [ 1517.622269][T20755] syz_tun (unregistering): left promiscuous mode [ 1517.681113][T20755] bridge0: port 1(syz_tun) entered disabled state [ 1518.238933][T28916] chnl_net:caif_netlink_parms(): no params data found [ 1519.397721][T28918] Bluetooth: hci4: command tx timeout [ 1521.410768][T20193] Bluetooth: hci4: command tx timeout [ 1521.489154][T29005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7940'. [ 1521.498500][T29005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7940'. [ 1521.507951][T29005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7940'. [ 1521.517230][T29005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7940'. [ 1521.526395][T29005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7940'. [ 1521.535606][T29005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7940'. [ 1521.544946][T29005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7940'. [ 1521.554147][T29005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7940'. [ 1521.565110][T29005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7940'. [ 1521.574428][T29005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7940'. [ 1521.795388][T28916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.885790][T28916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.916376][T28916] bridge_slave_0: entered allmulticast mode [ 1521.958336][T28916] bridge_slave_0: entered promiscuous mode [ 1522.354833][T28916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.423004][T28916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.492872][T28916] bridge_slave_1: entered allmulticast mode [ 1522.500505][T28916] bridge_slave_1: entered promiscuous mode [ 1522.927130][T28916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.073841][T28916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.854360][T28916] team0: Port device team_slave_0 added [ 1524.866538][T28916] team0: Port device team_slave_1 added [ 1525.067480][T28916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.092057][T28916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.302094][T28916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.395448][T28916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.473439][T28916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.568473][T28916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.909729][T28916] hsr_slave_0: entered promiscuous mode [ 1525.945835][T28916] hsr_slave_1: entered promiscuous mode [ 1525.972053][T28916] debugfs: 'hsr0' already exists in 'hsr' [ 1525.988148][T28916] Cannot create hsr debugfs directory [ 1528.416190][T29083] __nla_validate_parse: 12 callbacks suppressed [ 1528.416212][T29083] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.7965'. [ 1531.292929][T28916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1531.364719][T28916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1531.396366][T28916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1531.436289][T28916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1532.712151][T20193] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1532.712243][T20193] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1533.346557][T28916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.455204][T28916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.748217][T16807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.755391][T16807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1534.577660][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.584851][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1536.146042][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1536.886166][T29163] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 1537.208989][T29166] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7988'. [ 1538.090937][T28916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1539.624193][T29201] hugetlbfs: syz.7.7997 (29201): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1539.938366][T28916] veth0_vlan: entered promiscuous mode [ 1539.989686][T29210] overlayfs: failed to clone upperpath [ 1539.994130][T28916] veth1_vlan: entered promiscuous mode [ 1540.154320][T28916] veth0_macvtap: entered promiscuous mode [ 1540.473341][T28916] veth1_macvtap: entered promiscuous mode [ 1541.232400][T28916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1541.299802][T28916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1541.420947][T24875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.449053][T24875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.556061][T24875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.645012][T24875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.086156][T24865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.207315][T24865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.472996][T24868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.496630][T24868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.787597][T29273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8015'. [ 1545.087812][T29273] bridge_slave_1: left allmulticast mode [ 1545.127102][T29273] bridge_slave_1: left promiscuous mode [ 1545.202618][T29273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.341300][T29273] bridge_slave_0: left allmulticast mode [ 1545.390211][T29273] bridge_slave_0: left promiscuous mode [ 1545.435124][T29273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.468640][T29309] netlink: 'syz.4.8029': attribute type 1 has an invalid length. [ 1548.557127][T29309] bond1 (unregistering): Released all slaves [ 1554.360201][T29370] loop4: detected capacity change from 0 to 16 [ 1554.404943][T29370] erofs (device loop4): mounted with root inode @ nid 36. [ 1554.548180][T29373] erofs (device loop4): read error -117 @ 72 of nid 36 [ 1555.621756][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1558.090766][T29402] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1565.191878][T29468] binder: 29466:29468 ioctl c00c620f 0 returned -14 [ 1565.268207][T29471] netlink: 'syz.8.8077': attribute type 2 has an invalid length. [ 1567.111489][T29488] loop4: detected capacity change from 0 to 1024 [ 1568.143862][T24873] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1586.678445][T29587] netlink: 'syz.9.8115': attribute type 1 has an invalid length. [ 1586.854275][T29587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1588.093723][T29591] vlan2: entered promiscuous mode [ 1588.098798][T29591] bond2: entered promiscuous mode [ 1588.199332][T29592] gretap1: entered promiscuous mode [ 1588.451811][T29592] bond2: (slave gretap1): making interface the new active one [ 1589.391133][T29592] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1589.771387][T29613] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8121'. [ 1590.297835][T29624] overlayfs: failed to clone upperpath [ 1596.410202][T29682] RDS: rds_bind could not find a transport for fe88::7, load rds_tcp or rds_rdma? [ 1596.627728][T29689] Bluetooth: MGMT ver 1.23 [ 1596.716443][T29692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8144'. [ 1598.302734][T29710] openvswitch: netlink: Flow actions attr not present in new flow. [ 1599.472452][ T30] audit: type=1800 audit(1759873537.308:538): pid=29715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8151" name="file1" dev="tmpfs" ino=1605 res=0 errno=0 [ 1602.369993][T24865] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1602.692796][T20193] Bluetooth: hci4: command tx timeout [ 1604.163549][T29762] orangefs_mount: mount request failed with -4 [ 1604.772369][T20193] Bluetooth: hci4: command 0x0419 tx timeout [ 1606.851665][T28918] Bluetooth: hci4: command 0x0419 tx timeout [ 1610.380862][T29824] netlink: 'syz.7.8182': attribute type 2 has an invalid length. [ 1610.564725][T29824] : entered promiscuous mode [ 1614.861518][T29860] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8198'. [ 1617.031444][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1620.548979][T29920] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8214'. [ 1620.558796][T29920] netlink: 'syz.7.8214': attribute type 6 has an invalid length. [ 1620.594034][T29920] netlink: 'syz.7.8214': attribute type 5 has an invalid length. [ 1620.615808][T29920] netlink: 'syz.7.8214': attribute type 4 has an invalid length. [ 1620.732350][T29925] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1620.809225][T29927] FAT-fs (loop9): unable to read boot sector [ 1625.078849][T29968] loop4: detected capacity change from 0 to 1024 [ 1628.344589][T28918] Bluetooth: hci2: Malformed Event: 0x02 [ 1631.516525][T30027] overlayfs: failed to clone upperpath [ 1632.986216][T24875] hfsplus: b-tree write err: -5, ino 4 [ 1635.087898][T30064] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8268'. [ 1635.737997][ T6327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1639.962802][T28918] Bluetooth: hci4: command 0x0419 tx timeout [ 1647.524653][T20193] Bluetooth: hci5: unexpected cc 0x1001 length: 1 < 9 [ 1647.531603][T20193] Bluetooth: hci5: unexpected event for opcode 0x1001 [ 1647.557921][T30140] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8291'. [ 1649.433829][T30148] binder: BINDER_SET_CONTEXT_MGR already set [ 1650.010599][T30148] binder: 30142:30148 ioctl 4018620d 200000004a80 returned -16 [ 1650.025272][T30159] binder: 30142:30159 ioctl c0306201 2000000004c0 returned -22 [ 1655.358175][T30211] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8297'. [ 1659.814116][T30252] netlink: 'syz.7.8311': attribute type 1 has an invalid length. [ 1659.821956][T30252] netlink: 'syz.7.8311': attribute type 2 has an invalid length. [ 1663.898191][T30268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8317'. [ 1665.190185][T30281] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8319'. [ 1667.774259][T30309] syz_tun: entered allmulticast mode [ 1667.793134][T30308] syz_tun: left allmulticast mode [ 1669.494239][T24865] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1670.623289][T28918] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1670.637219][T28918] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1670.726957][T28918] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1670.737425][T28918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1670.749051][T28918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1671.364002][T30323] lo speed is unknown, defaulting to 1000 [ 1671.497252][T30342] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8341'. [ 1672.865217][T28918] Bluetooth: hci6: command tx timeout [ 1673.009685][T24865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.734833][T24865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.930608][T28918] Bluetooth: hci6: command tx timeout [ 1674.967554][T24865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.245863][T24865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.986949][T30378] netlink: 88 bytes leftover after parsing attributes in process `syz.7.8351'. [ 1677.010856][T28918] Bluetooth: hci6: command tx timeout [ 1677.055488][T30378] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8351'. [ 1677.139366][T30323] chnl_net:caif_netlink_parms(): no params data found [ 1678.457139][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.075071][T24865] bridge_slave_1: left allmulticast mode [ 1679.092405][T28918] Bluetooth: hci6: command tx timeout [ 1679.092442][T24865] bridge_slave_1: left promiscuous mode [ 1679.109629][T24865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.120282][T24865] bridge_slave_0: left allmulticast mode [ 1679.130420][T24865] bridge_slave_0: left promiscuous mode [ 1679.136421][T24865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.056692][T24865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1683.073869][T24865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1683.092592][T24865] bond0 (unregistering): Released all slaves [ 1684.526388][T30442] overlayfs: failed to clone upperpath [ 1688.951312][T24865] bond1 (unregistering): Released all slaves [ 1689.627157][T24865] bond2 (unregistering): Released all slaves [ 1689.794089][T24865] tipc: Disabling bearer [ 1689.838583][T24865] tipc: Left network mode [ 1689.843074][T30467] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8375'. [ 1694.523389][T30507] overlayfs: failed to clone upperpath [ 1696.094448][T30323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.101742][T30323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.109123][T30323] bridge_slave_0: entered allmulticast mode [ 1696.119021][T30323] bridge_slave_0: entered promiscuous mode [ 1696.130054][T30323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.143642][T30323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.151214][T30323] bridge_slave_1: entered allmulticast mode [ 1696.188555][T30323] bridge_slave_1: entered promiscuous mode [ 1698.830519][T30323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1698.872093][T30323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1700.284498][T20193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1700.295726][T20193] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1700.304065][T20193] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1700.313410][T20193] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1700.324622][T20193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1700.442930][T24865] hsr_slave_0: left promiscuous mode [ 1700.552377][T24865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1700.593278][T24865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.653090][T24865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1700.693466][T24865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1701.040035][T24865] veth1_macvtap: left promiscuous mode [ 1701.069316][T24865] veth0_macvtap: left promiscuous mode [ 1701.121386][T24865] veth1_vlan: left promiscuous mode [ 1701.148860][T24865] veth0_vlan: left promiscuous mode [ 1703.306170][T20193] Bluetooth: hci0: command tx timeout [ 1703.347801][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1703.985858][T24865] team0 (unregistering): Port device vlan2 removed [ 1705.337449][T24865] team0 (unregistering): Port device team_slave_1 removed [ 1705.341048][T20193] Bluetooth: hci0: command tx timeout [ 1705.382268][T24865] team0 (unregistering): Port device team_slave_0 removed [ 1705.809343][T30323] team0: Port device team_slave_0 added [ 1705.819444][T30323] team0: Port device team_slave_1 added [ 1705.910278][T30584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1705.949195][T30589] bond3: (slave veth7): Enslaving as an active interface with an up link [ 1705.968130][T30590] vlan3: entered allmulticast mode [ 1705.973437][T30590] veth1: entered allmulticast mode [ 1705.979438][T30590] veth1: entered promiscuous mode [ 1705.988989][T30590] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 1706.047740][T30323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1706.055481][T30323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.082445][T30323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1706.096767][T30323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.104255][T30323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.131371][T30323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.220877][T30543] lo speed is unknown, defaulting to 1000 [ 1706.230042][T30323] hsr_slave_0: entered promiscuous mode [ 1706.237440][T30323] hsr_slave_1: entered promiscuous mode [ 1706.245082][T30323] debugfs: 'hsr0' already exists in 'hsr' [ 1706.251574][T30323] Cannot create hsr debugfs directory [ 1706.403228][T24865] IPVS: stop unused estimator thread 0... [ 1707.414145][T20193] Bluetooth: hci0: command tx timeout [ 1707.443736][T24873] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.901712][T30543] chnl_net:caif_netlink_parms(): no params data found [ 1708.433133][T24873] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.490851][T20193] Bluetooth: hci0: command tx timeout [ 1709.789969][T24873] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.903226][T24873] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.179969][T30543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.216966][T30543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.225446][T30543] bridge_slave_0: entered allmulticast mode [ 1711.242395][T30543] bridge_slave_0: entered promiscuous mode [ 1711.293349][T30543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.320812][T30543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.328084][T30543] bridge_slave_1: entered allmulticast mode [ 1711.350737][T30543] bridge_slave_1: entered promiscuous mode [ 1711.556156][T30543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.792794][T30543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.881924][T24873] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1712.912265][T24873] bond0 (unregistering): Released all slaves [ 1712.983863][T30543] team0: Port device team_slave_0 added [ 1713.046399][T30323] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1713.100410][T30543] team0: Port device team_slave_1 added [ 1713.133143][T30323] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1713.162179][T30323] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1713.272250][T30323] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1713.561473][T30543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.573661][T30543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.601302][T30543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.614622][T30543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.621653][T30543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.651800][T30543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.754992][T24873] hsr_slave_0: left promiscuous mode [ 1713.766966][T24873] hsr_slave_1: left promiscuous mode [ 1715.079634][T30543] hsr_slave_0: entered promiscuous mode [ 1715.088152][T30543] hsr_slave_1: entered promiscuous mode [ 1715.094785][T30543] debugfs: 'hsr0' already exists in 'hsr' [ 1715.102384][T30543] Cannot create hsr debugfs directory [ 1715.363662][T30323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1715.406771][T30323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1715.437664][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.444854][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1715.462652][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.469826][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1715.730316][T30543] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1715.743812][T30543] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1715.756249][T30543] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1715.786404][T30543] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1715.839855][T30323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1715.935421][T30543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1715.966139][T30543] 8021q: adding VLAN 0 to HW filter on device team0 [ 1715.985268][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.992423][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1716.012215][T24868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.019370][T24868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.327608][T30323] veth0_vlan: entered promiscuous mode [ 1716.357082][T30323] veth1_vlan: entered promiscuous mode [ 1716.408661][T30323] veth0_macvtap: entered promiscuous mode [ 1716.423649][T30543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1716.434032][T30323] veth1_macvtap: entered promiscuous mode [ 1716.464327][T30323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.492598][T30323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.521281][T24873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.532746][T24873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.555598][T24873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.564743][T24873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.576706][T30543] veth0_vlan: entered promiscuous mode [ 1716.599550][T30543] veth1_vlan: entered promiscuous mode [ 1716.710808][T24873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.718665][T24873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.763064][T30543] veth0_macvtap: entered promiscuous mode [ 1716.775598][T24873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.779513][T30543] veth1_macvtap: entered promiscuous mode [ 1716.795281][T24873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.818611][T30543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.845573][T30543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.878426][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.909095][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.949476][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.996199][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.449831][ T30] audit: type=1326 audit(1759873657.278:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30688 comm="syz.5.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dff18eec9 code=0x7fc00000 [ 1719.539372][T24467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.542500][ T30] audit: type=1326 audit(1759873657.308:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30688 comm="syz.5.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4dff18eec9 code=0x7fc00000 [ 1719.582455][ T30] audit: type=1326 audit(1759873657.328:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30688 comm="syz.5.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dff18eec9 code=0x7fc00000 [ 1719.584062][T24467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.659349][ T6327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.700870][ T6327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.228527][T30762] loop0: detected capacity change from 0 to 4096 [ 1726.276444][T30766] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1726.543814][ T30] audit: type=1800 audit(1759873664.378:542): pid=30762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8456" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1729.580808][ T30] audit: type=1326 audit(1759873666.668:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30787 comm="syz.9.8476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25b918eec9 code=0x0 [ 1734.122213][T30827] netlink: 'syz.0.8475': attribute type 1 has an invalid length. [ 1735.457577][T24865] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1735.832415][T30843] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1738.242776][T30859] lo speed is unknown, defaulting to 1000 [ 1739.500627][T30884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8491'. [ 1740.364599][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1741.942677][T30896] loop0: detected capacity change from 0 to 128 [ 1741.967543][T30896] hpfs: Bad magic ... probably not HPFS [ 1742.014924][T30884] bridge_slave_1: left allmulticast mode [ 1742.082055][T20193] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 1742.093590][T30884] bridge_slave_1: left promiscuous mode [ 1742.099406][T30884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.243840][T30884] bridge_slave_0: left allmulticast mode [ 1742.249531][T30884] bridge_slave_0: left promiscuous mode [ 1742.282325][T30884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.650046][T30923] loop4: detected capacity change from 0 to 256 [ 1746.241309][T20193] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1746.250186][T20193] Bluetooth: hci3: Injecting HCI hardware error event [ 1746.261597][T20193] Bluetooth: hci3: hardware error 0x00 [ 1746.338688][T30923] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 1748.304538][T30941] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 1748.370906][T20193] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1753.107120][T30977] loop4: detected capacity change from 0 to 128 [ 1753.118616][T30978] loop5: detected capacity change from 0 to 1024 [ 1754.525974][T30977] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1754.602652][T30977] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1755.782349][T28916] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1764.692774][ T30] audit: type=1326 audit(1759873702.518:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.8545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1764.792332][ T30] audit: type=1326 audit(1759873702.528:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.8545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1764.944055][ T30] audit: type=1326 audit(1759873702.528:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.8545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1765.092364][ T30] audit: type=1326 audit(1759873702.528:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.8545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1765.209934][ T30] audit: type=1326 audit(1759873702.528:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.8545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1765.341579][ T30] audit: type=1326 audit(1759873702.528:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.8545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1765.496475][ T30] audit: type=1326 audit(1759873702.528:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.8545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1766.561690][ T30] audit: type=1326 audit(1759873702.528:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.8545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1766.787147][ T30] audit: type=1326 audit(1759873702.528:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.8545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1767.042154][ T30] audit: type=1326 audit(1759873702.538:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.8545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5b5638eec9 code=0x7ffc0000 [ 1768.791312][T20308] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1769.583855][ T3449] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1769.830787][T20308] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.341652][T20308] usb 5-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1770.447044][T20308] usb 5-1: config 2 interface 0 has no altsetting 0 [ 1770.570916][T20308] usb 5-1: string descriptor 0 read error: -71 [ 1770.620638][T20308] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1770.658394][T20308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.681330][T31122] ptrace attach of "./syz-executor exec"[23671] was attempted by "./syz-executor exec"[31122] [ 1772.331875][T31119] netlink: 'syz.4.8573': attribute type 2 has an invalid length. [ 1773.353561][T20308] usb 5-1: can't set config #2, error -71 [ 1774.221248][T20308] usb 5-1: USB disconnect, device number 13 [ 1774.318079][T31132] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8562'. [ 1774.630679][T31132] bridge_slave_1: left allmulticast mode [ 1774.636372][T31132] bridge_slave_1: left promiscuous mode [ 1774.654654][T31132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.721799][T31132] bridge_slave_0: left allmulticast mode [ 1774.727499][T31132] bridge_slave_0: left promiscuous mode [ 1774.734307][T31132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.350730][T31218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8585'. [ 1785.644235][T31229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1785.863984][T31235] loop4: detected capacity change from 0 to 128 [ 1791.134721][T31287] netlink: 'syz.0.8605': attribute type 1 has an invalid length. [ 1791.229460][T31287] vlan2: entered promiscuous mode [ 1791.251818][T31287] macvlan0: entered promiscuous mode [ 1791.294351][T31289] gretap2: entered promiscuous mode [ 1794.348224][T28918] Bluetooth: hci6: command 0x0406 tx timeout [ 1795.270887][T31307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8612'. [ 1795.406691][T31307] bridge_slave_1: left allmulticast mode [ 1795.459402][T31307] bridge_slave_1: left promiscuous mode [ 1795.473177][T31307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.562054][T31307] bridge_slave_0: left allmulticast mode [ 1795.570721][T31307] bridge_slave_0: left promiscuous mode [ 1795.576545][T31307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.123951][T31321] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8617'. [ 1796.297694][T31324] loop4: detected capacity change from 0 to 64 [ 1797.271710][T31324] overlayfs: upper fs needs to support d_type. [ 1797.287067][T31324] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1797.294151][T31324] overlayfs: failed to set xattr on upper [ 1797.299971][T31324] overlayfs: ...falling back to redirect_dir=nofollow. [ 1797.306887][T31324] overlayfs: ...falling back to index=off. [ 1797.313444][T31324] overlayfs: ...falling back to uuid=null. [ 1801.571361][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.607255][T24873] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1803.799432][T31372] loop4: detected capacity change from 0 to 4096 [ 1804.362437][T31381] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1804.694569][T31382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8635'. [ 1805.358830][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1805.358858][ T30] audit: type=1800 audit(1759873743.188:583): pid=31384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.8638" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1806.206564][T31382] bridge_slave_1: left allmulticast mode [ 1806.218099][ T30] audit: type=1800 audit(1759873744.048:584): pid=31388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8638" name="nullb0" dev="tmpfs" ino=6576 res=0 errno=0 [ 1806.229864][T31382] bridge_slave_1: left promiscuous mode [ 1806.579615][T31382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.518334][T31382] bridge_slave_0: left allmulticast mode [ 1807.560815][T31382] bridge_slave_0: left promiscuous mode [ 1807.581102][T31382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.727246][T31427] loop4: detected capacity change from 0 to 512 [ 1810.309913][T31432] netlink: 165 bytes leftover after parsing attributes in process `syz.5.8650'. [ 1810.744730][T31427] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.8648: casefold flag without casefold feature [ 1811.263744][T31427] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.8648: couldn't read orphan inode 15 (err -117) [ 1811.288429][T31427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1813.023574][T28916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1815.332137][T31477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8664'. [ 1819.113399][T31516] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8674'. [ 1819.134061][T31516] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8674'. [ 1819.806750][T31510] uprobe: syz.7.8673:31510 failed to unregister, leaking uprobe [ 1823.915687][T31546] Bluetooth: hci0: command 0x0406 tx timeout [ 1825.755255][T31571] overlayfs: failed to clone lowerpath [ 1837.992616][T31668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8719'. [ 1851.050339][T31763] Set syz0 is full, maxelem 0 reached [ 1855.841114][T31785] loop0: detected capacity change from 0 to 128 [ 1855.920651][ T30] audit: type=1800 audit(1759873794.751:585): pid=31785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8748" name="file1" dev="loop0" ino=1048795 res=0 errno=0 [ 1856.144524][T31785] syz.0.8748: attempt to access beyond end of device [ 1856.144524][T31785] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1856.406674][T31785] syz.0.8748: attempt to access beyond end of device [ 1856.406674][T31785] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1856.422290][T31785] syz.0.8748: attempt to access beyond end of device [ 1856.422290][T31785] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1856.432677][T31789] syz.0.8748: attempt to access beyond end of device [ 1856.432677][T31789] loop0: rw=2049, sector=313, nr_sectors = 112 limit=128 [ 1856.436024][T31785] syz.0.8748: attempt to access beyond end of device [ 1856.436024][T31785] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1856.471721][T31785] syz.0.8748: attempt to access beyond end of device [ 1856.471721][T31785] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1856.485352][T31785] syz.0.8748: attempt to access beyond end of device [ 1856.485352][T31785] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1857.238747][T31789] syz.0.8748: attempt to access beyond end of device [ 1857.238747][T31789] loop0: rw=2049, sector=585, nr_sectors = 16 limit=128 [ 1857.256707][T31789] syz.0.8748: attempt to access beyond end of device [ 1857.256707][T31789] loop0: rw=2049, sector=609, nr_sectors = 24 limit=128 [ 1857.402026][T31785] syz.0.8748: attempt to access beyond end of device [ 1857.402026][T31785] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1860.357380][T31820] loop0: detected capacity change from 0 to 64 [ 1863.134289][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1864.141005][ T6327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1865.871108][T31546] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1865.889017][T31546] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1865.900165][T31546] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1865.925426][T31546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1865.986591][T31546] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1866.308692][T31857] lo speed is unknown, defaulting to 1000 [ 1867.350844][T31874] loop0: detected capacity change from 0 to 4096 [ 1867.461274][T31877] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1868.142417][T31868] orangefs_mount: mount request failed with -4 [ 1868.150712][T20193] Bluetooth: hci2: command tx timeout [ 1868.841046][T31857] chnl_net:caif_netlink_parms(): no params data found [ 1868.877838][T31884] loop4: detected capacity change from 0 to 128 [ 1868.921870][ T30] audit: type=1800 audit(1759873807.761:586): pid=31884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8777" name="file1" dev="loop4" ino=1048798 res=0 errno=0 [ 1869.196578][T31884] bio_check_eod: 59 callbacks suppressed [ 1869.196605][T31884] syz.4.8777: attempt to access beyond end of device [ 1869.196605][T31884] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1869.259504][T31885] syz.4.8777: attempt to access beyond end of device [ 1869.259504][T31885] loop4: rw=2049, sector=569, nr_sectors = 24 limit=128 [ 1869.276809][T31884] syz.4.8777: attempt to access beyond end of device [ 1869.276809][T31884] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1869.297061][T31885] syz.4.8777: attempt to access beyond end of device [ 1869.297061][T31885] loop4: rw=2049, sector=753, nr_sectors = 128 limit=128 [ 1869.314286][T31884] syz.4.8777: attempt to access beyond end of device [ 1869.314286][T31884] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1869.343137][T31885] syz.4.8777: attempt to access beyond end of device [ 1869.343137][T31885] loop4: rw=2049, sector=945, nr_sectors = 96 limit=128 [ 1869.357437][T31884] syz.4.8777: attempt to access beyond end of device [ 1869.357437][T31884] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1869.372285][T31885] syz.4.8777: attempt to access beyond end of device [ 1869.372285][T31885] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1869.388441][T31884] syz.4.8777: attempt to access beyond end of device [ 1869.388441][T31884] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1869.407201][T31885] syz.4.8777: attempt to access beyond end of device [ 1869.407201][T31885] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1870.321288][T20193] Bluetooth: hci2: command tx timeout [ 1872.420490][T20193] Bluetooth: hci2: command tx timeout [ 1872.803118][T31857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.024111][T31857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.074866][T31857] bridge_slave_0: entered allmulticast mode [ 1873.361399][T31857] bridge_slave_0: entered promiscuous mode [ 1874.450544][T20193] Bluetooth: hci2: command tx timeout [ 1876.293507][T31857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.349042][T31857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.394943][T31857] bridge_slave_1: entered allmulticast mode [ 1877.313140][T31857] bridge_slave_1: entered promiscuous mode [ 1877.324865][T31943] loop0: detected capacity change from 0 to 128 [ 1877.452938][T31943] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1877.540852][T31943] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1878.150122][T31950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1878.180748][T31857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1878.512135][T30543] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1878.532575][T31956] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1878.600549][T31958] vlan2: entered allmulticast mode [ 1878.619343][T31958] veth1: entered allmulticast mode [ 1878.641253][T31958] veth1: entered promiscuous mode [ 1878.653436][T31958] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1878.666774][T31857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1878.716207][T31857] team0: Port device team_slave_0 added [ 1878.725283][T31857] team0: Port device team_slave_1 added [ 1878.763812][T31857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.771224][T31857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.798460][T31857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.812349][T31857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.819372][T31857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.848134][T31857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.905336][T31857] hsr_slave_0: entered promiscuous mode [ 1878.913126][T31857] hsr_slave_1: entered promiscuous mode [ 1878.919474][T31857] debugfs: 'hsr0' already exists in 'hsr' [ 1878.925912][T31857] Cannot create hsr debugfs directory [ 1879.634344][T31973] loop5: detected capacity change from 0 to 128 [ 1880.938661][ T30] audit: type=1800 audit(1759873819.771:587): pid=31973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8796" name="file1" dev="loop5" ino=1048801 res=0 errno=0 [ 1881.460298][T31978] bio_check_eod: 75 callbacks suppressed [ 1881.460326][T31978] syz.5.8796: attempt to access beyond end of device [ 1881.460326][T31978] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1881.529998][T31973] syz.5.8796: attempt to access beyond end of device [ 1881.529998][T31973] loop5: rw=2049, sector=217, nr_sectors = 24 limit=128 [ 1881.542049][T31857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1881.556071][T31857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1882.541788][T31978] syz.5.8796: attempt to access beyond end of device [ 1882.541788][T31978] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1882.556106][T31973] syz.5.8796: attempt to access beyond end of device [ 1882.556106][T31973] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1882.557313][T31978] syz.5.8796: attempt to access beyond end of device [ 1882.557313][T31978] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1882.572616][T31973] syz.5.8796: attempt to access beyond end of device [ 1882.572616][T31973] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1882.809358][T31857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1882.817049][T31978] syz.5.8796: attempt to access beyond end of device [ 1882.817049][T31978] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1882.882697][T31857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1882.932147][T31973] syz.5.8796: attempt to access beyond end of device [ 1882.932147][T31973] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1882.946235][T31973] syz.5.8796: attempt to access beyond end of device [ 1882.946235][T31973] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 1882.960011][T31973] syz.5.8796: attempt to access beyond end of device [ 1882.960011][T31973] loop5: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 1886.550569][T31857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1889.133287][T31857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1889.163538][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.170812][ T6327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1889.216196][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1889.223380][ T6327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1891.242833][T32052] loop5: detected capacity change from 0 to 512 [ 1891.250254][T32052] EXT4-fs: Ignoring removed mblk_io_submit option [ 1891.273123][T32052] EXT4-fs: inline encryption not supported [ 1891.279097][T32052] EXT4-fs: Ignoring removed mblk_io_submit option [ 1891.289949][T32052] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1891.309301][T32052] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1891.331731][T31857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1891.357187][T32052] EXT4-fs (loop5): 1 truncate cleaned up [ 1891.370079][T32052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1891.424377][T31857] veth0_vlan: entered promiscuous mode [ 1891.440122][T31857] veth1_vlan: entered promiscuous mode [ 1893.545284][T31857] veth0_macvtap: entered promiscuous mode [ 1893.553972][T32065] netlink: 'syz.9.8820': attribute type 1 has an invalid length. [ 1893.689176][T32069] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1893.708114][T32069] bond4: (slave bond5): making interface the new active one [ 1893.716430][T32069] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1893.745607][T31857] veth1_macvtap: entered promiscuous mode [ 1893.857227][T30323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1893.867029][T32065] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 1893.945358][T31857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1894.174023][T31857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1894.209144][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.229756][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.027923][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.289913][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1896.863081][T24868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1896.932628][T24868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1897.079824][ T6327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1897.089002][ T6327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1897.331316][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1897.506323][T32107] trusted_key: encrypted_key: insufficient parameters specified [ 1898.908810][T32121] loop4: detected capacity change from 0 to 2048 [ 1898.934381][T32121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1898.947832][T32123] loop3: detected capacity change from 0 to 128 [ 1898.984863][ T30] audit: type=1800 audit(1759873837.821:588): pid=32123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8830" name="file1" dev="loop3" ino=1048808 res=0 errno=0 [ 1899.311968][T32123] bio_check_eod: 29 callbacks suppressed [ 1899.311998][T32123] syz.3.8830: attempt to access beyond end of device [ 1899.311998][T32123] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1900.294463][T32123] syz.3.8830: attempt to access beyond end of device [ 1900.294463][T32123] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1900.327273][T32123] syz.3.8830: attempt to access beyond end of device [ 1900.327273][T32123] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1900.593181][T32123] syz.3.8830: attempt to access beyond end of device [ 1900.593181][T32123] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1900.677504][T32123] syz.3.8830: attempt to access beyond end of device [ 1900.677504][T32123] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1900.756765][T32123] syz.3.8830: attempt to access beyond end of device [ 1900.756765][T32123] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1900.772619][T32131] syz.3.8830: attempt to access beyond end of device [ 1900.772619][T32131] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1900.773667][T32123] syz.3.8830: attempt to access beyond end of device [ 1900.773667][T32123] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1900.792847][T32131] syz.3.8830: attempt to access beyond end of device [ 1900.792847][T32131] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1900.801216][T32123] syz.3.8830: attempt to access beyond end of device [ 1900.801216][T32123] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1905.492332][T31546] Bluetooth: hci2: unexpected cc 0x1001 length: 23 > 9 [ 1905.518585][T31546] Bluetooth: hci2: unexpected cc 0x1001 length: 1 < 9 [ 1905.550785][T32168] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8838'. [ 1910.247626][ T1771] IPVS: starting estimator thread 0... [ 1911.103389][T32216] IPVS: using max 21 ests per chain, 50400 per kthread [ 1911.548044][T31546] Bluetooth: hci6: unexpected event for opcode 0x0411 [ 1911.553484][T32223] loop3: detected capacity change from 0 to 256 [ 1912.565147][T32223] bio_check_eod: 140 callbacks suppressed [ 1912.565175][T32223] syz.3.8859: attempt to access beyond end of device [ 1912.565175][T32223] loop3: rw=2049, sector=256, nr_sectors = 40 limit=256 [ 1916.240526][T31546] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1916.252409][T31546] Bluetooth: hci6: Injecting HCI hardware error event [ 1916.262290][T20193] Bluetooth: hci6: hardware error 0x00 [ 1916.339620][T32257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8870'. [ 1919.089923][T20193] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1924.457554][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1928.708263][T30025] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1929.234520][T32333] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8892'. [ 1931.062408][T32348] loop3: detected capacity change from 0 to 1024 [ 1931.165481][T32348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1931.310103][T32355] loop5: detected capacity change from 0 to 2048 [ 1931.636207][T32355] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1932.543055][T31857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1932.561558][T32355] NILFS (loop5): mounting unchecked fs [ 1932.902772][T31546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1932.908242][T32355] NILFS (loop5): recovery complete [ 1932.914153][T31546] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1932.932391][T31546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1932.950640][T31546] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1933.689905][T31546] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1933.727872][T32373] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1936.291756][T31546] Bluetooth: hci5: command tx timeout [ 1936.575895][T32366] lo speed is unknown, defaulting to 1000 [ 1938.375627][T31546] Bluetooth: hci5: command tx timeout [ 1939.264696][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.688652][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1940.822122][T31546] Bluetooth: hci5: command tx timeout [ 1941.636338][T32434] ptrace attach of "./syz-executor exec"[30323] was attempted by "./syz-executor exec"[32434] [ 1942.412218][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.651786][T32439] loop4: detected capacity change from 0 to 1024 [ 1942.990753][T31546] Bluetooth: hci5: command tx timeout [ 1943.069757][T32439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1944.236675][T32449] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1945.295779][T28916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1945.764540][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1948.585643][T32366] chnl_net:caif_netlink_parms(): no params data found [ 1949.982957][T32497] ptrace attach of "./syz-executor exec"[7955] was attempted by "./syz-executor exec"[32497] [ 1950.857700][T32500] netlink: 165 bytes leftover after parsing attributes in process `syz.9.8930'. [ 1952.424205][T32366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.432950][T32366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.440155][T32366] bridge_slave_0: entered allmulticast mode [ 1952.511448][T32366] bridge_slave_0: entered promiscuous mode [ 1952.925453][T32507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1953.407656][ T36] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 1953.572176][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1953.583699][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1953.595563][ T36] bond0 (unregistering): Released all slaves [ 1953.630338][T32509] bond3: (slave veth7): Enslaving as an active interface with an up link [ 1953.671415][T32511] vlan3: entered allmulticast mode [ 1953.686329][T32511] veth1: entered allmulticast mode [ 1953.696202][T32511] bond3: (slave vlan3): Opening slave failed [ 1953.722828][T32366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.730109][T32366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.739230][T32366] bridge_slave_1: entered allmulticast mode [ 1953.747546][T32366] bridge_slave_1: entered promiscuous mode [ 1953.837082][T32366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1953.865158][T32366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1953.937063][T32366] team0: Port device team_slave_0 added [ 1953.945583][T32366] team0: Port device team_slave_1 added [ 1954.001669][ T36] hsr_slave_0: left promiscuous mode [ 1954.007693][ T36] hsr_slave_1: left promiscuous mode [ 1954.014553][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1954.024357][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1954.032994][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1954.040431][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1954.064365][ T36] veth1_macvtap: left promiscuous mode [ 1954.070037][ T36] veth0_macvtap: left promiscuous mode [ 1954.075867][ T36] veth1_vlan: left promiscuous mode [ 1954.082178][ T36] veth0_vlan: left promiscuous mode [ 1954.621406][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1954.662883][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1955.105389][T32366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1955.113083][T32366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1955.141661][T32366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1955.156228][T32366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1955.163234][T32366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1955.189970][T32366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1955.285368][T32366] hsr_slave_0: entered promiscuous mode [ 1955.292723][T32366] hsr_slave_1: entered promiscuous mode [ 1955.298983][T32366] debugfs: 'hsr0' already exists in 'hsr' [ 1955.306269][T32366] Cannot create hsr debugfs directory [ 1955.527141][T32366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1955.558221][ T36] IPVS: stop unused estimator thread 0... [ 1955.622934][T32366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1955.716234][T32366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1955.794465][T32366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1955.978067][T32366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1955.997453][T32366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1956.014549][T32366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1956.033456][T32366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1956.095388][ T36] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1956.118103][ T36] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 1956.355565][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1956.369052][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1956.387033][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1956.402252][ T36] bond0 (unregistering): Released all slaves [ 1956.524951][ T36] bond1 (unregistering): Released all slaves [ 1956.543749][ T36] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1956.553390][ T36] bond2 (unregistering): Released all slaves [ 1956.571776][ T36] bond3 (unregistering): Released all slaves [ 1956.592879][ T36] bond4 (unregistering): Released all slaves [ 1956.693795][ T36] tipc: Disabling bearer [ 1956.707903][ T36] tipc: Left network mode [ 1956.802493][T32366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1956.855555][T32366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1956.892811][T24873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1956.900026][T24873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1956.915191][T32502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.922349][T32502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1957.022148][ T36] hsr_slave_0: left promiscuous mode [ 1957.028332][ T36] hsr_slave_1: left promiscuous mode [ 1957.034895][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1957.046175][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1957.472073][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1957.518950][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1957.897296][T32366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1958.136690][ T36] IPVS: stop unused estimator thread 0... [ 1958.185907][T32366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1958.254211][T32366] veth0_vlan: entered promiscuous mode [ 1958.274180][T32366] veth1_vlan: entered promiscuous mode [ 1958.325424][T32366] veth0_macvtap: entered promiscuous mode [ 1958.339755][T32366] veth1_macvtap: entered promiscuous mode [ 1958.375252][T32366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1958.398076][T32366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1958.419305][T24467] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.441510][T24467] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.504637][T24467] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.519362][T24467] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.567068][T24873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1958.577209][T24873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1958.625673][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1958.635545][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1958.827007][T32528] loop4: detected capacity change from 0 to 1024 [ 1958.912990][T32528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1960.108615][T31546] Bluetooth: hci4: unexpected cc 0x204b length: 9 > 3 [ 1960.115582][T31546] Bluetooth: hci4: unexpected event for opcode 0x204b [ 1960.553770][T28916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1960.891247][T32551] loop1: detected capacity change from 0 to 128 [ 1960.932827][ T30] audit: type=1800 audit(1759873900.766:589): pid=32551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8934" name="file1" dev="loop1" ino=1048817 res=0 errno=0 [ 1961.914033][T30025] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1962.069686][T32557] syz.1.8934: attempt to access beyond end of device [ 1962.069686][T32557] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1962.150946][T32557] syz.1.8934: attempt to access beyond end of device [ 1962.150946][T32557] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1962.253515][T32557] syz.1.8934: attempt to access beyond end of device [ 1962.253515][T32557] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1962.288817][T32551] syz.1.8934: attempt to access beyond end of device [ 1962.288817][T32551] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1962.305189][T32551] syz.1.8934: attempt to access beyond end of device [ 1962.305189][T32551] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1962.327115][T32551] syz.1.8934: attempt to access beyond end of device [ 1962.327115][T32551] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1962.341586][T32557] syz.1.8934: attempt to access beyond end of device [ 1962.341586][T32557] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1965.067678][T32557] syz.1.8934: attempt to access beyond end of device [ 1965.067678][T32557] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1965.402203][T32578] netlink: 165 bytes leftover after parsing attributes in process `syz.7.8958'. [ 1965.480911][T32551] syz.1.8934: attempt to access beyond end of device [ 1965.480911][T32551] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1966.229524][T32551] syz.1.8934: attempt to access beyond end of device [ 1966.229524][T32551] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1966.638834][T32585] overlayfs: failed to clone upperpath [ 1968.380874][T24467] bio_check_eod: 102 callbacks suppressed [ 1968.380903][T24467] kworker/u8:20: attempt to access beyond end of device [ 1968.380903][T24467] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 1970.045410][T32605] loop5: detected capacity change from 0 to 1024 [ 1971.121696][T32605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1975.134629][T30323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1977.046208][T32647] netlink: 165 bytes leftover after parsing attributes in process `syz.4.8965'. [ 1980.515721][T32658] loop3: detected capacity change from 0 to 128 [ 1980.631204][ T30] audit: type=1800 audit(1759873922.458:590): pid=32658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8971" name="file1" dev="loop3" ino=1048820 res=0 errno=0 [ 1982.600775][T32669] syz.3.8971: attempt to access beyond end of device [ 1982.600775][T32669] loop3: rw=2049, sector=281, nr_sectors = 64 limit=128 [ 1982.641629][T32658] syz.3.8971: attempt to access beyond end of device [ 1982.641629][T32658] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1982.678970][T32669] syz.3.8971: attempt to access beyond end of device [ 1982.678970][T32669] loop3: rw=2049, sector=617, nr_sectors = 168 limit=128 [ 1982.719815][T32669] syz.3.8971: attempt to access beyond end of device [ 1982.719815][T32669] loop3: rw=2049, sector=793, nr_sectors = 8 limit=128 [ 1982.744014][T32657] syz.3.8971: attempt to access beyond end of device [ 1982.744014][T32657] loop3: rw=524288, sector=281, nr_sectors = 64 limit=128 [ 1982.759395][T32657] syz.3.8971: attempt to access beyond end of device [ 1982.759395][T32657] loop3: rw=524288, sector=617, nr_sectors = 168 limit=128 [ 1983.727163][T32657] syz.3.8971: attempt to access beyond end of device [ 1983.727163][T32657] loop3: rw=0, sector=281, nr_sectors = 8 limit=128 [ 1983.742408][T32657] syz.3.8971: attempt to access beyond end of device [ 1983.742408][T32657] loop3: rw=0, sector=281, nr_sectors = 8 limit=128 [ 1983.757160][T32661] syz.3.8971: attempt to access beyond end of device [ 1983.757160][T32661] loop3: rw=0, sector=281, nr_sectors = 8 limit=128 [ 1983.772223][T32661] syz.3.8971: attempt to access beyond end of device [ 1983.772223][T32661] loop3: rw=0, sector=281, nr_sectors = 8 limit=128 [ 1985.657738][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1988.929186][T32728] loop5: detected capacity change from 0 to 512 [ 1990.053380][T32728] EXT4-fs: Ignoring removed bh option [ 1990.106532][T32728] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1990.140543][T32728] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1990.454106][T32745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8992'. [ 1990.939713][T32728] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1990.992495][T32728] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1991.097716][T32728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1991.489940][T30323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1992.505972][T28918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1992.571022][T28918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1992.588464][T28918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1992.597680][T28918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1992.610205][T28918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1993.050592][T28918] Bluetooth: hci2: command 0x0406 tx timeout [ 1994.803322][T28918] Bluetooth: hci0: command tx timeout [ 1997.183733][T20193] Bluetooth: hci0: command tx timeout [ 1997.817137][T31084] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1999.370099][T16807] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.378405][T28918] Bluetooth: hci0: command tx timeout [ 1999.979568][ T324] loop3: detected capacity change from 0 to 4096 [ 2000.376204][T32752] lo speed is unknown, defaulting to 1000 [ 2001.780280][ T324] ntfs3(loop3): Failed to read $UpCase (-4). [ 2002.770063][T20193] Bluetooth: hci0: command tx timeout [ 2005.184351][T16807] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.055279][ T369] ptrace attach of "./syz-executor exec"[30323] was attempted by " [ 2007.461501][T16807] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.848725][ T382] loop3: detected capacity change from 0 to 2048 [ 2007.865850][ T382] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 2007.900062][ T382] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2007.988346][ T382] UDF-fs: Scanning with blocksize 512 failed [ 2008.012917][T16807] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.811316][ T382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2012.212857][T32752] chnl_net:caif_netlink_parms(): no params data found [ 2012.273031][T16807] bridge_slave_1: left allmulticast mode [ 2012.314441][T16807] bridge_slave_1: left promiscuous mode [ 2012.533975][T16807] bridge0: port 2(bridge_slave_1) entered disabled state [ 2014.062521][T16807] bridge_slave_0: left allmulticast mode [ 2014.072283][T16807] bridge_slave_0: left promiscuous mode [ 2014.083733][T16807] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.278850][ T427] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9045'. [ 2015.666760][ T435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9035'. [ 2016.521556][ T439] loop4: detected capacity change from 0 to 16 [ 2016.565261][ T439] erofs (device loop4): mounted with root inode @ nid 36. [ 2016.581828][ T439] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 2016.595876][ T439] bio_check_eod: 32 callbacks suppressed [ 2016.595895][ T439] syz.4.9038: attempt to access beyond end of device [ 2016.595895][ T439] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 2016.650794][ T439] erofs (device loop4): failed to decompress -5 in[4096, 0] out[4096] [ 2016.695402][ T439] erofs (device loop4): read error -117 @ 0 of nid 89 [ 2016.704421][ T30] audit: type=1800 audit(1759873958.538:591): pid=439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9038" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 2021.641514][T16807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2021.654038][T16807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2021.665924][T16807] bond0 (unregistering): Released all slaves [ 2021.805564][T32752] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.820281][T32752] bridge0: port 1(bridge_slave_0) entered disabled state [ 2021.827759][T32752] bridge_slave_0: entered allmulticast mode [ 2021.836887][T32752] bridge_slave_0: entered promiscuous mode [ 2021.846315][T32752] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.880611][T32752] bridge0: port 2(bridge_slave_1) entered disabled state [ 2021.889245][T32752] bridge_slave_1: entered allmulticast mode [ 2021.911203][T32752] bridge_slave_1: entered promiscuous mode [ 2021.996360][ T438] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 2023.168284][T32752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2023.212508][T32752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2030.450907][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2033.034857][T32752] team0: Port device team_slave_0 added [ 2033.073576][T32752] team0: Port device team_slave_1 added [ 2033.169572][T16807] hsr_slave_0: left promiscuous mode [ 2033.191920][T16807] hsr_slave_1: left promiscuous mode [ 2033.216174][T16807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2033.244847][T16807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2033.294272][T16807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2033.327344][T16807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2034.523814][T16807] veth1_macvtap: left promiscuous mode [ 2035.321792][T16807] veth0_macvtap: left promiscuous mode [ 2035.559258][T16807] veth1_vlan: left promiscuous mode [ 2035.753505][T16807] veth0_vlan: left promiscuous mode [ 2035.799291][ T568] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.9075'. [ 2039.441458][ T595] netlink: 'syz.5.9084': attribute type 32 has an invalid length. [ 2040.704669][ T610] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9087'. [ 2041.895343][ T615] loop4: detected capacity change from 0 to 8 [ 2041.917794][ T612] loop5: detected capacity change from 0 to 2048 [ 2041.958976][ T615] SQUASHFS error: zlib decompression failed, data probably corrupt [ 2041.994552][ T620] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2042.009001][ T615] SQUASHFS error: Failed to read block 0x9b: -5 [ 2042.025918][ T615] SQUASHFS error: Unable to read metadata cache entry [99] [ 2043.850459][ T615] SQUASHFS error: Unable to read inode 0x127 [ 2044.775192][ T630] loop3: detected capacity change from 0 to 1024 [ 2044.812480][ T630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2044.908024][ T30] audit: type=1800 audit(1759873986.738:592): pid=630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9093" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 2045.336824][ T642] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 2046.052770][ T642] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 2046.067634][ T642] EXT4-fs (loop3): This should not happen!! Data will be lost [ 2046.067634][ T642] [ 2046.077393][ T642] EXT4-fs (loop3): Total free blocks count 0 [ 2046.087682][ T642] EXT4-fs (loop3): Free/Dirty block details [ 2046.123931][ T642] EXT4-fs (loop3): free_blocks=68451041280 [ 2046.129843][ T642] EXT4-fs (loop3): dirty_blocks=16 [ 2046.135120][ T642] EXT4-fs (loop3): Block reservation details [ 2046.156967][ T642] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 2046.552992][T31857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2046.677580][ T653] loop5: detected capacity change from 0 to 16 [ 2046.702643][ T653] erofs (device loop5): mounted with root inode @ nid 36. [ 2047.693386][ T658] syz.5.9101: attempt to access beyond end of device [ 2047.693386][ T658] loop5: rw=524288, sector=256, nr_sectors = 8 limit=16 [ 2047.710559][ T658] syz.5.9101: attempt to access beyond end of device [ 2047.710559][ T658] loop5: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 2047.729215][ T658] syz.5.9101: attempt to access beyond end of device [ 2047.729215][ T658] loop5: rw=0, sector=256, nr_sectors = 8 limit=16 [ 2047.742713][ T658] erofs (device loop5): read error -5 @ 1 of nid 89 [ 2047.931030][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.980958][ T30] audit: type=1800 audit(1759873989.578:593): pid=658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9101" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 2050.233500][ T666] loop4: detected capacity change from 0 to 32768 [ 2050.280264][ T666] [ 2050.280264][ T666] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2050.280264][ T666] [ 2050.941232][ T37] [ 2050.941232][ T37] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2050.941232][ T37] [ 2051.024817][ T37] [ 2051.024817][ T37] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2051.024817][ T37] [ 2051.064220][T28916] [ 2051.064220][T28916] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2051.064220][T28916] [ 2051.104856][T28916] [ 2051.104856][T28916] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2051.104856][T28916] [ 2051.444412][ T111] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 2051.456610][ T111] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 2051.465027][ T111] CPU: 1 UID: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 2051.474150][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2051.484225][ T111] RIP: 0010:write_special_inodes+0xa9/0x170 [ 2051.490151][ T111] Code: 2e e8 4b 3b 17 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 13 3b 17 08 48 8d [ 2051.509768][ T111] RSP: 0018:ffffc90002727bc8 EFLAGS: 00010216 [ 2051.515840][ T111] RAX: 0000000000000006 RBX: ffff88802856aa00 RCX: ffffffff81f31b7e [ 2051.523809][ T111] RDX: 0000000000000000 RSI: ffffffff81f31b31 RDI: 0000000000000030 [ 2051.531779][ T111] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2051.539832][ T111] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff81f3f160 [ 2051.547887][ T111] R13: 0000000000000000 R14: ffff8880554b0000 R15: ffffc9000272a652 [ 2051.555860][ T111] FS: 0000000000000000(0000) GS:ffff888124ae0000(0000) knlGS:0000000000000000 [ 2051.564791][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2051.571473][ T111] CR2: 0000001b2d51cff8 CR3: 0000000055156000 CR4: 0000000000350ef0 [ 2051.579445][ T111] Call Trace: [ 2051.582723][ T111] [ 2051.585658][ T111] lmLogSync+0xd2/0x820 [ 2051.589819][ T111] ? __pfx_lmLogSync+0x10/0x10 [ 2051.594592][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2051.600247][ T111] ? find_held_lock+0x2b/0x80 [ 2051.604952][ T111] jfs_syncpt+0x89/0xa0 [ 2051.609113][ T111] txEnd+0x30a/0x5a0 [ 2051.613025][ T111] jfs_lazycommit+0x783/0xb30 [ 2051.617731][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 2051.622935][ T111] ? __pfx_default_wake_function+0x10/0x10 [ 2051.628755][ T111] ? lockdep_hardirqs_on+0x7c/0x110 [ 2051.633971][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2051.639626][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2051.645276][ T111] ? __kthread_parkme+0x19e/0x250 [ 2051.650342][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 2051.655570][ T111] kthread+0x3c5/0x780 [ 2051.659644][ T111] ? __pfx_kthread+0x10/0x10 [ 2051.664239][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2051.669891][ T111] ? rcu_is_watching+0x12/0xc0 [ 2051.674670][ T111] ? __pfx_kthread+0x10/0x10 [ 2051.679265][ T111] ret_from_fork+0x675/0x7d0 [ 2051.683983][ T111] ? __pfx_kthread+0x10/0x10 [ 2051.688585][ T111] ret_from_fork_asm+0x1a/0x30 [ 2051.693378][ T111] [ 2051.696389][ T111] Modules linked in: [ 2051.701883][ T111] ---[ end trace 0000000000000000 ]--- [ 2052.082638][ T111] RIP: 0010:write_special_inodes+0xa9/0x170 [ 2052.088649][ T111] Code: 2e e8 4b 3b 17 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 13 3b 17 08 48 8d [ 2052.233341][ T111] RSP: 0018:ffffc90002727bc8 EFLAGS: 00010216 [ 2052.239466][ T111] RAX: 0000000000000006 RBX: ffff88802856aa00 RCX: ffffffff81f31b7e [ 2052.246903][ T690] loop5: detected capacity change from 0 to 2048 [ 2052.248287][ T111] RDX: 0000000000000000 RSI: ffffffff81f31b31 RDI: 0000000000000030 [ 2052.263387][ T111] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2052.271431][ T111] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff81f3f160 [ 2052.279463][ T111] R13: 0000000000000000 R14: ffff8880554b0000 R15: ffffc9000272a652 [ 2052.288609][ T111] FS: 0000000000000000(0000) GS:ffff8881249e0000(0000) knlGS:0000000000000000 [ 2052.298239][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2052.305629][ T111] CR2: 0000001b32a10ff8 CR3: 000000002977a000 CR4: 0000000000350ef0 [ 2052.314765][ T111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2052.316619][ T690] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2052.334454][ T111] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2052.343578][ T111] Kernel panic - not syncing: Fatal exception [ 2052.349890][ T111] Kernel Offset: disabled [ 2052.354214][ T111] Rebooting in 86400 seconds..