last executing test programs: 8m16.075131541s ago: executing program 3 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x891a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x66, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000"/51], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) r7 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205648, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10820}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) 8m2.248139811s ago: executing program 3 (id=458): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000000010002", 0x7) r5 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) clock_getres(0x6, 0x0) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c9000101"], 0x18) brk(0x5d555ede6000) syz_clone(0xd8024a00, &(0x7f0000000080)="6ff7a4f4232d73565a09c11ecbad662bf0a28b", 0x13, 0x0, &(0x7f0000000400), &(0x7f0000000440)="16a33dbdf56c7934cdd41f6240c063e251306436") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80, &(0x7f0000000c40)=ANY=[], 0x1, 0x196, &(0x7f0000000200)="$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") socket$nl_route(0x10, 0x3, 0x0) 7m59.728918683s ago: executing program 3 (id=461): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x5529c70794973956, &(0x7f00000004c0)={[{@mb_optimize_scan}, {@auto_da_alloc}, {@dioread_nolock}, {@dax_never}, {@jqfmt_vfsv1}, {@oldalloc}, {@block_validity}, {@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff90}}, {@nomblk_io_submit}]}, 0x1, 0xb93, &(0x7f0000002080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x6}}, 0x24) sendmsg$inet(r3, 0x0, 0x0) recvfrom$rxrpc(r3, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60600) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 7m56.853345514s ago: executing program 3 (id=467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180)=0x4000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)=ANY=[@ANYBLOB="240000003a0007010000fbffffffffff027c0000040000000c000180060006"], 0x24}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) syz_emit_ethernet(0x26, &(0x7f00000000c0)=ANY=[], 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f00000001c0)=ANY=[@ANYBLOB='adinicb,iocharset=maciceland,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f76727300806f636861727365743d6d6163696e7569742c756e64656c6574652c696f636861727365743d69736f383835392d322c6164696e6963622c766f6c756d653d303030303030303030303030302c756d5b30495330303030303030303030303030303030303030303030302c6769643d666f726765742c756e686964652c00000070d3020e5538c1ffed98de950f03cee932a103c89869fc66fe435ca5cd6825cf"], 0x1, 0xc5a, &(0x7f00000036c0)="$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") 7m52.978289039s ago: executing program 3 (id=471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 7m40.315138061s ago: executing program 3 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd706b00dbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00k\x00'], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, 0x0}, 0x20) 7m24.050368122s ago: executing program 32 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd706b00dbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00k\x00'], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, 0x0}, 0x20) 15.863929229s ago: executing program 4 (id=1360): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) pwritev(r3, &(0x7f00000029c0), 0x0, 0x9, 0x5) write$binfmt_misc(r3, &(0x7f0000000040)="704dd199329082", 0x7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') syz_mount_image$fuse(0x0, &(0x7f000000a1c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0) fstat(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4500, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, r6, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000003c00), &(0x7f0000003c40)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000003c80)={0x3, 0x7f, {r0}, {0xffffffffffffffff}, 0x8000, 0x8001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) socket(0x10, 0x3, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22002, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) 14.242876069s ago: executing program 4 (id=1363): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000002700)=ANY=[@ANYBLOB="5b37182347bcffffffffffff88a800004305000086dd60f7537200140600ff02000000000000000000000000000100000000000000000000ffff0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000a89eb81a"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) utimes(&(0x7f0000000f80)='./file0\x00', 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) sendfile(r5, r5, 0x0, 0x1000000201005) 14.240915079s ago: executing program 2 (id=1364): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x5529c70794973956, &(0x7f00000004c0)={[{@mb_optimize_scan}, {@auto_da_alloc}, {@dioread_nolock}, {@dax_never}, {@jqfmt_vfsv1}, {@oldalloc}, {@block_validity}, {@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff90}}, {@nomblk_io_submit}]}, 0x1, 0xb93, &(0x7f0000002080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x6}}, 0x24) sendmsg$inet(r4, 0x0, 0x0) recvfrom$rxrpc(r4, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60600) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 13.549426646s ago: executing program 4 (id=1367): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x9, 0x9, 0x80000000, 0xff, 0x3ff]}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@cipso={0x86, 0x6, 0x1}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1=0xe0000029}, {@private}, {@local}, {@remote}, {@private}, {@private}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1162, &(0x7f0000002380)={0x0, 0x2fd9, 0x1046, 0x2}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2d, 0xfffffffffffffffa) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r4) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syncfs(0xffffffffffffffff) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x228083, 0x58, 0xc}, 0x18) 13.505110587s ago: executing program 1 (id=1369): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, 0x0, 0x0) rt_sigqueueinfo(r6, 0x1f, &(0x7f0000000200)={0x3a, 0x7fffffff, 0x9}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) sendmmsg$inet6(r7, &(0x7f0000003840)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c, &(0x7f0000000580)}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000740)="7d7cec", 0x3}], 0x1}}], 0x2, 0x0) 12.530752641s ago: executing program 2 (id=1370): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) setuid(0xee00) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000224000/0x1000)=nil) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYRES64=r6], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) 12.524741291s ago: executing program 4 (id=1371): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) r5 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000300)="bc501fb445e391ff88c04dde66c116232dd69191f1f6e8f7e21aba5c5f77750730b2ff3db3fb5a122dceadd2301938a4de43c254e39f", 0x36, 0x2}]) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r6, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa0100ff, 0x1}]}, @ssrr={0x89, 0xf, 0xce, [@local, @remote, @loopback]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3}}}}}}, 0x0) 11.319821311s ago: executing program 1 (id=1373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x5d) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg2\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0xc2c, &(0x7f0000002580)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x40) 9.954348475s ago: executing program 0 (id=1374): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 9.903832416s ago: executing program 4 (id=1375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = inotify_init() openat$autofs(0xffffffffffffff9c, 0x0, 0x40002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x4008000) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e21, 0x9, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 9.727503881s ago: executing program 5 (id=1376): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) r6 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000300)="bc501fb445e391ff88c04dde66c116232dd69191f1f6e8f7e21aba5c5f77750730b2ff3db3fb5a122dceadd2301938a4de43c254e39f", 0x36, 0x2, 0x0, 0x0, r4}]) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r7, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa0100ff, 0x1}]}, @ssrr={0x89, 0xf, 0xce, [@local, @remote, @loopback]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3}}}}}}, 0x0) 9.721328341s ago: executing program 2 (id=1377): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50) r3 = socket$inet6(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, 0x0) r4 = io_uring_setup(0x160f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085f, &(0x7f0000000100)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@abort}]}, 0x1, 0x548, &(0x7f00000008c0)="$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") r5 = open(&(0x7f0000000240)='.\x00', 0x10b800, 0xb9) ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f00000006c0)={0x8001, 0x1000, 0x1ffe, 0xfffffffffffffffd, 0x80000000, 0xfff, 0x2401}) openat(0xffffffffffffffff, 0x0, 0x309441, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000e40)={[{@grpquota}, {@nolazytime}, {@usrquota}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'inode_readahead_blks'}}, {@fowner_eq}, {@obj_type={'obj_type', 0x3d, '.('}}, {@audit}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfsroot}, {@obj_role}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x10) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="453902bf7d110b093ae53d1e99625209b35c96dd15", 0x15) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) 8.12758046s ago: executing program 5 (id=1378): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x20004010) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200010000000000000000000a0000fd400100"/48, @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) socket(0x1, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi0\x00', 0x440, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.872710766s ago: executing program 2 (id=1379): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x5529c70794973956, &(0x7f00000004c0)={[{@mb_optimize_scan}, {@auto_da_alloc}, {@dioread_nolock}, {@dax_never}, {@jqfmt_vfsv1}, {@oldalloc}, {@block_validity}, {@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff90}}, {@nomblk_io_submit}]}, 0x1, 0xb93, &(0x7f0000002080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x6}}, 0x24) sendmsg$inet(r4, 0x0, 0x0) recvfrom$rxrpc(r4, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60600) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 7.728796729s ago: executing program 5 (id=1380): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000700)={0x26000, 0x11e000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r3, &(0x7f0000000640)="6000000400142b40000000000000000000000000000b0001000000000000000000000200a52af8342c749670", 0x2c, 0x20024040, &(0x7f0000000200)={0xa, 0x0, 0x8000010, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) write$proc_mixer(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME'], 0x23) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000700)=@gcm_256={{0x304}, "53e08fcc3b9b6aa5", "90fea039d5907b9f82a063bb7ef1c21e0afde0683eebcfb10f75854b6dd8a1d1", "ebe986af", "bcac673a95b08f23"}, 0x38) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) recvmsg$can_bcm(r6, 0x0, 0x10150) syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x6, 0x2, 0x7, 0x8}, {0x2, 0xa, 0x1, 0x8}, {0x6, 0x6, 0x4, 0x6}]}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 7.722488499s ago: executing program 0 (id=1381): sched_setscheduler(0x0, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) 7.540321074s ago: executing program 1 (id=1382): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) r7 = dup(r5) inotify_rm_watch(r7, r6) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r9 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r10 = socket(0x10, 0x2, 0x0) write(r10, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r10, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180a0000000000000000000000000000850000006600000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 5.348641938s ago: executing program 4 (id=1383): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffff00000000ca789bf71fe7ca8700482f00fe800000000000000000000000000021ff02000000000000000000000000000104206558000000000003000900000800000086dd080088be00000004100000000100000000000000080022eb00000000200080100200000000000008000100000800655800000000f169e1955e3003f155934d0f926691b72818b9e1c37d93fbac3d796805cf"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x5, 0x15, 0x16, 0x3, 0x1, 0x0, 0x3, 0x56, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) io_setup(0x239f, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xffff) writev(r5, &(0x7f0000000080), 0x0) 5.245433691s ago: executing program 1 (id=1384): r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCCONS(r4, 0x541d) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) fsetxattr$security_ima(r2, 0x0, &(0x7f00000001c0)=@ng={0x4, 0x5}, 0x2, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 5.066371735s ago: executing program 0 (id=1385): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) r5 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000300)="bc501fb445e391ff88c04dde66c116232dd69191f1f6e8f7e21aba5c5f77750730b2ff3db3fb5a122dceadd2301938a4de43c254e39f", 0x36, 0x2}]) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r6, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa0100ff, 0x1}]}, @ssrr={0x89, 0xf, 0xce, [@local, @remote, @loopback]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3}}}}}}, 0x0) 3.731221658s ago: executing program 0 (id=1386): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x8f, &(0x7f0000000400)={@random="5b37182347bc", @random='a\t\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x59, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x5, {0xa, 0x6, "e397f7", 0x5, 0x6, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], "8fe12b53dd101f764f54c0f7d77cd260d9f95013058fa3490e3cf0ad09285407ec1814c1caae8bdb60"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000380)={0x6, 0x1c, 0x1, 0xb5d, 0x1a, "0300000001000000000000000000be00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x0, 0x0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x21, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x2300) 3.730938858s ago: executing program 1 (id=1387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f00000020c0)="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", 0x107}], 0x2}}], 0x1, 0x348640ea77fab084) r3 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000200)=""/273, 0x111, 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000023200011800e000100636f6e6e6c696d69740000000c00028008000140fffffffe140000001000010000001600000000000000000a00000000000000000000000000000000a57daf1c94b22a679709a8dd02bb36510fef96c088d55c18248f49e885ac3f4d3c0d85be70230fa5ca5efe857aa79e058fded3cf8d6cf7", @ANYRES32=r2], 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x4094) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(&(0x7f0000000300), 0xfffffffffffffffe, 0x0) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x3}}, 0x2e) getsockname(r5, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000400)='./bus\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0xe, &(0x7f00000008c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@discard}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x7, 0x448, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)=0x100000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000280)={0x8, 'veth0_vlan\x00', {'vlan0\x00'}, 0x2}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a, 0x3}) syz_open_dev$vcsn(&(0x7f0000000240), 0x8001, 0x105442) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x7) move_pages(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2) r8 = syz_open_procfs(0x0, &(0x7f00000013c0)='cmdline\x00') read$FUSE(r8, &(0x7f0000001400)={0x2020}, 0x2020) 3.567174152s ago: executing program 2 (id=1388): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r5 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000300)="bc501fb445e391ff88c04dde66c116232dd69191f1f6e8f7e21aba5c5f77750730b2ff3db3fb5a122dceadd2301938a4de43c254e39f", 0x36, 0x2, 0x0, 0x0, r4}]) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r6, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa0100ff, 0x1}]}, @ssrr={0x89, 0xf, 0xce, [@local, @remote, @loopback]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3}}}}}}, 0x0) 3.549858632s ago: executing program 5 (id=1389): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) r6 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000300)="bc501fb445e391ff88c04dde66c116232dd69191f1f6e8f7e21aba5c5f77750730b2ff3db3fb5a122dceadd2301938a4de43c254e39f", 0x36, 0x2, 0x0, 0x0, r4}]) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r7, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa0100ff, 0x1}]}, @ssrr={0x89, 0xf, 0xce, [@local, @remote, @loopback]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3}}}}}}, 0x0) 2.659980244s ago: executing program 5 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x5d) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg2\x00'}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x40) 2.116747098s ago: executing program 2 (id=1391): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x20004010) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200010000000000000000000a0000fd400100"/48, @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) socket(0x1, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi0\x00', 0x440, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.313476527s ago: executing program 0 (id=1392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x5d) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg2\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0xc2c, &(0x7f0000002580)="$eJzs3V9oXNl9B/DfmSutRto00e4m3qTNpgMpiVFq43+xtbgEOauoDTjeEFmh+xSN/tgZVh4ZSe560zaoLWmhL6H7UvpSRNOlhTz0qdvHKs0WEkqhhH1IHgqCJMs+9EEPgULLRuHOnJFGsmxr17b+7H4+MP7ee+d3R+fcM75zBTpzAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI+PwXLp06nQ66FQDAfroy/pVTZ33+A8D7ylW//wMAAAAAAAAAAAAAwGGXoohjkWLgtfU02Vpvq15uNG/dnhgd2323/hQpKlG06stH9fSZs+c+e/7CcCfvvf/D9rF4fvzqpdpz8zduLswuLs7O1Caajen5mdk9v8KD7r/TUOsA1G68eGvm2rXF2pmTZ7c9fXvwzb7Hjw1evHDi/HCndmJ0bGy8q6an913/9DvcbYbHY1FEPVK8PfhWqkdEJR78WNznvfOo9bc6MdTqxMToWKsjc416c6l8MlVyVSWi1rXTSOcY7cNYPJCRiOWy+WWDh8rujd+sL9Sn5mZrX64vLDWWGvPNVGm3tuxPLSoxnCJWImKt786X640iPhEpXjm1nqYiougch8+0Jgbfvz2Ve6w9QmU7a70RK5UjMGaHWF8UcSVS/OL14zFdHrP8iE9FfKnM1yJeLfNzEal8Y5yL+Pku7yOOpp4o4j8jxXxaTzOt80HnvHL5q7UvNq/Nd9V2zitH/vNhPx3yc1M1iphqnfHX07u/2AEAAAAAAAAAAAAAAADgYeuPIr4TKf7smT9ozSuO1rz0D10c/sALv9s9Z/zp+7xOWXsyIpYre5uT29uZLFxJlbRvs4bZqRpFfDPP//uTg24MAAAAAAAAAAAAAAAAAADA+1oRL0SKr504nlai+57ijeb12tX61Fz7rrCde/927pm+sbGxUUvtHMk5mXM550rO1ZxrOaOS9885knMy53LOlZyrOddyRpH3zzmSczLncs6VnKs513JGT94/50jOyZzLOVdyruZcy9m6aToAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9VJYr4ZaT49kvrKVJEjERMRjtX+w66dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqZqKOBkpVl+ottZXKhFXI+KXGxsbnUdErJf5oA66rwAAAAAAAAAAAAAAAAAAAHBopSI+GSme+r/1VIuI24Nv9j1+bPDihRPnh4soIpUl3fXPj1+9VHtu/sbNhdnFxdmZ2kSzMT0/M7vXH1e93Gjeuj0xOvZIOnNf/Y+4/f3V5+ZvvrzQuP71pV2fH6hemlpcWqhP7/509EclYrJ7y1CrwROjY61GzzXqzdauqXKXBlYiRvbaGQAAAAAAAAAAAAAAAAAAAA6NgVTEFyLFz/77XOrMG+9pz/n/tfZasVn76h9tfRfA3I7s6P7+gL0sp702dKg18b42MTo2Nt61uaf3ztKyTSkV8XSk+PQrH23Nh08xsOvc+LLug2XdjXO5bvA3yrrlbVXVoYnRsdqV+eaJS3Nz89P1pfrU3Gxt/GZ9es9fHAAAAAAAAAAAAAAAAAAAAAD3MJCKeCNS/M8//lfq3Hc+z//vaa91zf//ndYU+pZq6s254wVbc/s/2Jrb317+0MXhgU88c7ftj2L+f9mmlIr4VqQ4+8ZHW/fT78z/n9xRW9b9RfTFW898PNdVHivr6p3utF/xWmNu9lRZ+7eR4jff7tRGq/Z6rn1qq/Z0WdsfKf56fXvt13Pth7dqz5S1xyPF93+6e+1HtmrPlrU/ixT/8g+1Tu1AWfuHufbYVu3J6fm5mfsd1nL8vxsp/v7K76VOn+86/l3f/7C8IzfdMeb3Xn5Y4z/YtW05j+uf5/Gv32f8z0eK71Y/nuvax34qP/9E69+t8f90pPjJf2yvvZZrn9yqPb3Xbh20cvy/Eym+9zc/3uxzHv98ZLdGqHv8f71ne26+Sw5o/J/o2jaY2zX9Do/F+9Hiy994sT43N7tg4eEu9B+OZliw8O4WDvrMxH4oP///MlL8/7Eida5j8uf/B9prW9d///vNrc//izty0wF9/j/Zte1ivmrp7YmoLt242ft0RHXx5W+caNyoX5+9Pts8c/rUs8+eP33q9PnexzoXd1tLez527wXl+P8wUvzon360+XvM9uu/3a//B3bkpgMa/6e6+7TtumbPh+J9qRz/v4sUT3z+x5u/b97r+r/z+//xT27Pzf9/m2P7xksR+zf+H+7aNpjb1XiHxwIAAAAAAAAAAOAoGUhF/FWk+P0//e3UmUO0l7//m9mRmw7o7/+OdW2b2ad5DXs+yAAAh0h5/feRSPGvGz/YnMu9/fovfqtT2339dzeH4f7/0dUPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4ilIU8ceRYuC19bTaV663VS83mrduT4yO7b5bf4oUlSha9eWjevrM2XOfPX9huJP33v9h+1g8P371Uu25+Rs3F2YXF2dnahPNxvT8zOyeX+FB999pqHUAajdevDVz7dpi7czJs9uevj34Zt/jxwYvXjhxfrhTOzE6NjbeVdPT+65/+h3SXbY/FkX8IFK8PfhW+l5fRCUe/Fjc573zqPW3OjHU6sTE6FirI3ONenOpfDJVclUlota100jnGO3DWLxj3YM3ErFcNr9s8FDZvfGb9YX61Nxs7cv1haXGUmO+mSrt1pa71aISwyliJSLW+u586d4o4luR4pVT6+nf+iKKzo/7zJXxr5w6e/+2VR5iP9+Bsp213oiVyiEdsyOiL4r450jxi9ePx/f7Inqi/YhPRXypzNciXi3zcxGpfGOci/j5Lu8jjqaeKOJcpJhP6+n1vvJ80DmvXP5q7YvNa/NdtZ3zypH/fNhPh/zcVI0iftg646+nf/f/GgAAAAAAAAAAAAAAAOAQKWIlUnztxPHUmh+8Oae40bxeu1qfmmtP6+vM/evMmd7Y2NiopXaO5JzMuZxzJedqzrWcUcn75xzJOZlzOedKztWcazmjyPvnHMk5mXM550rO1ZxrOaMn759zJOdkTzz70588ubGc11dyruZcyxmHZO4eAAAAAAAAAAAAAAAAAADw3lKJonUX92+/tJ42+tr3l56Mdq66H+h73q8CAAD//54zdLM=") r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x40) 1.175108391s ago: executing program 5 (id=1393): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000300)='01234', 0x5) close(r0) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) close(0xffffffffffffffff) r2 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r2, &(0x7f00000006c0)='1843', 0x4) close(r2) r3 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff) write(r3, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') unlink(0x0) 1.064440583s ago: executing program 1 (id=1394): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x10bb41) splice(r0, 0x0, r0, &(0x7f0000000340)=0x2, 0xe, 0xf) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001c00)=""/4088, 0xff8}], 0x1) close(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) ioctl$USBDEVFS_RESET(r0, 0x5514) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$UI_GET_VERSION(r5, 0x8004552d, 0x0) r6 = socket(0x2, 0x400000000002, 0x0) setsockopt(r6, 0x0, 0x3, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0x8000000, 0x8, 0x9, 0xfb, 0x9, 0x8, 0x17, 0x0, 0x2e, 0x19}, {0x60000, 0x50000, 0x0, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x3, 0x3}, {0x50000, 0x9000, 0x0, 0x4, 0x3, 0x3, 0x2, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0x10000, 0xd, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x8000000, 0x58000, 0xc, 0xa3, 0xad, 0x8, 0x1, 0xf8, 0x8, 0x5}, {0x3000, 0x2, 0x4, 0x5, 0x8, 0x5, 0x9, 0x5, 0xf3, 0xc1, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x5, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x400}, {0x100000, 0x6}, 0x80000031, 0x0, 0x8000000, 0x2424, 0xe, 0x8000, 0x8080000, [0x6800000000000000, 0x400004, 0x61, 0x4]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0xd4438043e1ef7717) 0s ago: executing program 0 (id=1395): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x0, &(0x7f00000001c0)={0x1, 0x2, 0x10, 0x2}) fcntl$lock(r5, 0x6, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x1, 0x1, 0x2007, 0x1fd}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x2) r7 = fcntl$dupfd(r1, 0x0, r1) r8 = getpid() fcntl$setownex(r7, 0xf, &(0x7f0000000000)={0x1, r8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r7) r9 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0xc4c85513, &(0x7f0000000040)={0x1}) sendmsg$NL80211_CMD_GET_KEY(r7, 0x0, 0x41) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): [ 78.778941][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.797653][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.813187][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.847027][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.880039][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.921750][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.933624][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.943523][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.954134][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.964982][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.975697][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.988966][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.001045][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.010871][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.023243][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.033666][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.044142][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.054648][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.057702][ T4279] gadgetfs: bound to dummy_udc driver [ 79.065281][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.083110][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.105847][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.106645][ T4280] loop1: detected capacity change from 0 to 64 [ 79.123477][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 79.129635][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 79.129841][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.152386][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 79.159033][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 79.167311][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.181930][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.202503][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 79.219549][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.235008][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.248778][ T26] audit: type=1800 audit(1785810967.348:2): pid=4280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 79.277643][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.294060][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.450697][ T4276] gadgetfs: suspended from state 2 [ 79.453259][ T21] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 79.520304][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.542691][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.606321][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.619101][ T4287] loop3: detected capacity change from 0 to 512 [ 79.633696][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.656030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.673000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.693985][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.704251][ T4187] hfs: node 4:3 still has 1 user(s)! [ 79.725262][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.753651][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.766922][ T4287] EXT4-fs (loop3): Ignoring removed nobh option [ 79.780383][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.814525][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.817580][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.830544][ T4287] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.845809][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.879223][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.888982][ T4287] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.901190][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.055100][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.078373][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.126548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.215378][ T4287] EXT4-fs (loop3): 1 truncate cleaned up [ 80.777746][ T4296] syz.1.8 (4296) used greatest stack depth: 20016 bytes left [ 80.802150][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.812156][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.822141][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.832141][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.842141][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.852158][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.862141][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.872139][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.882150][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.892151][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.952334][ T4287] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 82.829843][ T4313] loop1: detected capacity change from 0 to 256 [ 82.961884][ T4310] ODEBUG: Out of memory. ODEBUG disabled [ 83.432001][ T4313] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 83.514040][ T4320] loop3: detected capacity change from 0 to 64 [ 84.252925][ T4327] device vlan0 entered promiscuous mode [ 84.978313][ T4336] No such timeout policy "syz1" [ 85.024379][ T4337] process 'syz.1.10' launched './file1' with NULL argv: empty string added [ 85.316514][ T4342] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 85.352481][ T4342] device syzkaller1 entered promiscuous mode [ 85.380534][ T4342] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 85.428283][ T4342] xt_CONNSECMARK: invalid mode: 254 [ 85.669932][ T4354] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 87.164140][ T1110] cfg80211: failed to load regulatory.db [ 87.581996][ T4380] misc userio: Invalid payload size [ 87.595825][ T4380] netlink: 120 bytes leftover after parsing attributes in process `syz.0.23'. [ 88.594571][ T4385] device wlan0 entered promiscuous mode [ 88.600622][ T4385] batman_adv: batadv0: Adding interface: wlan0 [ 88.631153][ T4391] loop1: detected capacity change from 0 to 128 [ 88.806324][ T4385] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.544699][ T4283] udevd[4283]: incorrect ext4 checksum on /dev/loop1 [ 89.552964][ T4385] batman_adv: batadv0: Interface activated: wlan0 [ 89.560182][ T4391] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 90.231450][ T4400] ipt_REJECT: ECHOREPLY no longer supported. [ 90.262707][ T4400] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.677952][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 92.103545][ T4404] team0: Device wg0 is of different type [ 92.306139][ T4404] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 92.562220][ T4424] loop4: detected capacity change from 0 to 64 [ 92.581137][ T4421] loop3: detected capacity change from 0 to 2048 [ 92.605446][ T4425] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 92.651550][ T4425] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 93.181921][ T4421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.311217][ T4425] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 93.724805][ T4434] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 94.053172][ T4441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 94.121734][ T4425] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 94.201928][ T4434] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 94.743187][ T4447] autofs4:pid:4447:autofs_fill_super: called with bogus options [ 94.778587][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.795939][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.805259][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.560136][ T4454] sched: RT throttling activated [ 97.110091][ T4449] Zero length message leads to an empty skb [ 99.565088][ T4473] loop3: detected capacity change from 0 to 1024 [ 100.009864][ T4473] ======================================================= [ 100.009864][ T4473] WARNING: The mand mount option has been deprecated and [ 100.009864][ T4473] and is ignored by this kernel. Remove the mand [ 100.009864][ T4473] option from the mount to silence this warning. [ 100.009864][ T4473] ======================================================= [ 100.226095][ T4477] loop0: detected capacity change from 0 to 32768 [ 100.288751][ T4473] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 100.307840][ T4473] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.579030][ T4477] XFS (loop0): Mounting V5 Filesystem [ 101.348334][ T4477] XFS (loop0): Ending clean mount [ 101.364079][ T4477] XFS (loop0): Quotacheck needed: Please wait. [ 101.510256][ T4511] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.45: lblock 0 mapped to illegal pblock 0 (length 6) [ 101.903537][ T4477] XFS (loop0): Quotacheck: Done. [ 101.925162][ T4511] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 101.937990][ T4511] EXT4-fs (loop3): This should not happen!! Data will be lost [ 101.937990][ T4511] [ 101.961624][ T4191] XFS (loop0): Unmounting Filesystem [ 102.145807][ T4256] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:6: bg 0: block 112: padding at end of block bitmap is not set [ 102.362354][ T4256] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 117 [ 102.485499][ T4256] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.485499][ T4256] [ 102.598799][ T4515] device syzkaller0 entered promiscuous mode [ 102.684090][ T4517] loop4: detected capacity change from 0 to 1024 [ 102.708211][ T4519] fuse: Bad value for 'fd' [ 102.838671][ T4517] EXT4-fs (loop4): Invalid want_extra_isize 7 [ 103.036409][ T4522] block device autoloading is deprecated and will be removed. [ 104.837038][ T4544] loop3: detected capacity change from 0 to 128 [ 104.848609][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 105.096253][ T4543] loop4: detected capacity change from 0 to 32768 [ 108.913152][ T4566] loop1: detected capacity change from 0 to 4096 [ 108.992368][ T4566] EXT4-fs (loop1): Invalid log cluster size: 50331654 [ 109.030335][ T4528] team0: Port device team_slave_0 removed [ 109.128020][ T4576] loop3: detected capacity change from 0 to 512 [ 109.291964][ T4576] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 109.312375][ T4576] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.942627][ T4598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.74'. [ 114.046158][ T4619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.78'. [ 115.353294][ T4626] loop0: detected capacity change from 0 to 32768 [ 116.555372][ T4631] loop4: detected capacity change from 0 to 1024 [ 116.582792][ T4628] loop2: detected capacity change from 0 to 4096 [ 116.638742][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 116.657760][ T4633] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.665363][ T4633] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.709045][ T4628] EXT4-fs (loop2): Invalid log cluster size: 50331654 [ 116.756694][ T4626] XFS (loop0): Mounting V5 Filesystem [ 116.759276][ T4631] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 117.925955][ T4626] XFS (loop0): Ending clean mount [ 117.934293][ T4626] XFS (loop0): Quotacheck needed: Please wait. [ 119.469526][ T4626] XFS (loop0): Quotacheck: Done. [ 119.505726][ T4663] device syzkaller0 entered promiscuous mode [ 119.519466][ T4191] XFS (loop0): Unmounting Filesystem [ 119.525623][ T4660] loop2: detected capacity change from 0 to 8 [ 119.679893][ T4670] loop4: detected capacity change from 0 to 1024 [ 119.815642][ T4670] EXT4-fs (loop4): Invalid want_extra_isize 7 [ 121.599457][ T4689] loop4: detected capacity change from 0 to 512 [ 121.633452][ T4689] EXT4-fs (loop4): Ignoring removed nobh option [ 121.639920][ T4689] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.463901][ T4689] EXT4-fs (loop4): 1 truncate cleaned up [ 122.469876][ T4689] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 122.733531][ T4697] fuse: Bad value for 'fd' [ 123.376775][ T4702] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.178459][ T4697] CIFS: Attempting to mount \\127.0.0.1\share [ 124.211788][ T4697] CIFS: VFS: Error connecting to socket. Aborting operation. [ 124.317571][ T4697] CIFS: VFS: cifs_mount failed w/return code = -4 [ 125.063646][ T4709] loop0: detected capacity change from 0 to 4096 [ 125.717457][ T4713] loop4: detected capacity change from 0 to 4096 [ 126.076853][ T4713] EXT4-fs (loop4): Invalid log cluster size: 50331654 [ 126.156247][ T4719] loop3: detected capacity change from 0 to 1024 [ 126.355660][ T4719] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 130.370429][ T4751] tipc: Started in network mode [ 130.375794][ T4751] tipc: Node identity 4, cluster identity 4711 [ 130.382052][ T4751] tipc: Node number set to 4 [ 131.553676][ T4762] loop0: detected capacity change from 0 to 16 [ 132.424296][ T4762] erofs: (device loop0): mounted with root inode @ nid 36. [ 132.775029][ T4762] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.859396][ T4763] loop3: detected capacity change from 0 to 4096 [ 132.964761][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.971275][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.211288][ T4762] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 133.230092][ T4779] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 133.252353][ T4779] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 133.342593][ T4762] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 133.621567][ T4762] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 135.997795][ T4806] Mass Storage Function, version: 2009/09/11 [ 136.004936][ T4806] LUN: removable file: (no medium) [ 136.023429][ T4806] LUN: removable file: (no medium) [ 137.769523][ T4817] loop4: detected capacity change from 0 to 4096 [ 138.010116][ T4825] loop0: detected capacity change from 0 to 16 [ 138.159370][ T4825] erofs: (device loop0): mounted with root inode @ nid 36. [ 138.216286][ T4825] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.298713][ T4825] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 138.341562][ T4826] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.463314][ T4826] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 138.568333][ T4827] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.707829][ T4827] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 138.967712][ T4813] loop3: detected capacity change from 0 to 32768 [ 139.342645][ T4834] loop0: detected capacity change from 0 to 4096 [ 139.360943][ T4834] EXT4-fs (loop0): Invalid log cluster size: 50331654 [ 140.960582][ T4843] loop2: detected capacity change from 0 to 8192 [ 141.036481][ T4852] loop3: detected capacity change from 0 to 16 [ 141.078638][ T4843] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 141.116382][ T4852] erofs: (device loop3): mounted with root inode @ nid 36. [ 141.189753][ T4843] REISERFS (device loop2): using ordered data mode [ 141.263726][ T4843] reiserfs: using flush barriers [ 141.279500][ T4843] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.286109][ T4852] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 141.337851][ T4843] REISERFS (device loop2): checking transaction log (loop2) [ 141.371023][ T4843] REISERFS (device loop2): Using r5 hash to sort names [ 141.387279][ T4855] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 141.403283][ T4843] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 141.414482][ T4852] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 141.465034][ T4855] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 141.508269][ T4856] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 141.526080][ T4856] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 141.925653][ T4859] loop1: detected capacity change from 0 to 4096 [ 142.304601][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 142.808182][ T4871] tmpfs: Bad value for 'mpol' [ 143.310954][ T4873] loop3: detected capacity change from 0 to 16 [ 143.371530][ T4865] netlink: 'syz.4.140': attribute type 29 has an invalid length. [ 143.431242][ T4865] netlink: 'syz.4.140': attribute type 29 has an invalid length. [ 143.467273][ T4862] netlink: 'syz.4.140': attribute type 29 has an invalid length. [ 143.512346][ T4873] erofs: (device loop3): mounted with root inode @ nid 36. [ 144.028839][ T4873] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 144.262192][ T4876] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 144.292205][ T4873] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 144.312208][ T4876] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 144.342693][ T4881] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 144.363982][ T4881] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 145.101842][ T4887] loop1: detected capacity change from 0 to 256 [ 145.315268][ T4887] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 145.458496][ T4887] attempt to access beyond end of device [ 145.458496][ T4887] loop1: rw=16777216, want=5559, limit=256 [ 145.543084][ T4887] attempt to access beyond end of device [ 145.543084][ T4887] loop1: rw=16777216, want=8631, limit=256 [ 145.548148][ T26] audit: type=1800 audit(1785811033.508:3): pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.144" name="file1" dev="loop1" ino=1048593 res=0 errno=0 [ 145.797765][ T4887] attempt to access beyond end of device [ 145.797765][ T4887] loop1: rw=16777216, want=19735, limit=256 [ 145.860750][ T4887] attempt to access beyond end of device [ 145.860750][ T4887] loop1: rw=16777216, want=32943, limit=256 [ 146.026388][ T4890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'. [ 146.256936][ T4892] loop1: detected capacity change from 0 to 4096 [ 146.299858][ T4892] EXT4-fs (loop1): Invalid log cluster size: 50331654 [ 146.878935][ T4896] loop3: detected capacity change from 0 to 1024 [ 147.490040][ T4896] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 147.684161][ T4900] loop2: detected capacity change from 0 to 16 [ 147.760518][ T4900] erofs: (device loop2): mounted with root inode @ nid 36. [ 147.889632][ T4900] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.901012][ T4904] loop4: detected capacity change from 0 to 16 [ 147.921959][ T4900] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 147.943388][ T4907] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.966606][ T4904] erofs: (device loop4): mounted with root inode @ nid 36. [ 148.002389][ T4907] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 148.051806][ T4900] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 148.092432][ T4900] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 148.205105][ T4904] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 148.247813][ T4904] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 148.284166][ T4909] loop3: detected capacity change from 0 to 32768 [ 148.358859][ T4911] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 148.392322][ T4911] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 148.451941][ T4915] loop2: detected capacity change from 0 to 512 [ 148.468228][ T4909] XFS (loop3): Mounting V5 Filesystem [ 148.490271][ T4904] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 148.512321][ T4904] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 148.571740][ T4909] XFS (loop3): Ending clean mount [ 148.584877][ T4909] XFS (loop3): Quotacheck needed: Please wait. [ 148.686592][ T4915] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 148.838854][ T4915] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.058085][ T4909] XFS (loop3): Quotacheck: Done. [ 149.865095][ T26] audit: type=1800 audit(1785811037.968:4): pid=4932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.150" name=9FE23491237C08822DEC110911E893D0A8C4F677747ABC360934B82910FF85BFD995083BBA2987A67399EAC427D145D595A40B9F6FF14AC488EC130FB3850A27AF9544AE15A7E454DEA05918B41243513F dev="loop3" ino=4429 res=0 errno=0 [ 150.558769][ T4940] loop4: detected capacity change from 0 to 16 [ 150.611680][ T4190] XFS (loop3): Unmounting Filesystem [ 150.759565][ T4940] erofs: (device loop4): mounted with root inode @ nid 36. [ 152.444542][ T4940] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 152.502944][ T4949] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 152.542207][ T4940] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 152.571665][ T4949] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 152.610707][ T4952] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 152.638301][ T4952] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 152.768147][ T4955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.159'. [ 154.134896][ T4969] loop0: detected capacity change from 0 to 512 [ 155.818723][ T4969] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 155.833404][ T4978] loop1: detected capacity change from 0 to 32768 [ 155.848954][ T4969] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.270023][ T4978] XFS (loop1): Mounting V5 Filesystem [ 158.138539][ T4978] XFS (loop1): Ending clean mount [ 158.148170][ T4978] XFS (loop1): Quotacheck needed: Please wait. [ 158.257234][ T4978] XFS (loop1): Quotacheck: Done. [ 159.000060][ T26] audit: type=1800 audit(1785811046.838:5): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.167" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 159.195181][ T4187] XFS (loop1): Unmounting Filesystem [ 161.387153][ T5023] loop1: detected capacity change from 0 to 16 [ 161.568227][ T5023] erofs: (device loop1): mounted with root inode @ nid 36. [ 161.692428][ T5023] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 161.747223][ T5023] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 161.780332][ T5030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.176'. [ 161.839011][ T5028] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 161.918421][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 162.572665][ T5037] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 163.562575][ T5028] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 163.966659][ T5032] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.989762][ T5032] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 164.140249][ T5044] loop4: detected capacity change from 0 to 512 [ 165.050316][ T5044] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 165.238308][ T5053] loop3: detected capacity change from 0 to 256 [ 165.260937][ T5044] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.071524][ T5053] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 168.431176][ T5076] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 169.072228][ T5085] loop2: detected capacity change from 0 to 128 [ 170.363199][ T5085] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.399267][ T5085] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.464647][ T5092] loop4: detected capacity change from 0 to 16 [ 171.234596][ T5097] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 171.277445][ T5092] erofs: (device loop4): mounted with root inode @ nid 36. [ 173.314595][ T5092] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.332578][ T5092] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 173.455057][ T5092] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.485838][ T5092] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 173.544833][ T5092] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.562344][ T5092] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 174.339963][ T5119] loop1: detected capacity change from 0 to 512 [ 176.311897][ T5119] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 176.355960][ T5119] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.593687][ T5140] loop4: detected capacity change from 0 to 4096 [ 177.570898][ T5142] loop0: detected capacity change from 0 to 1024 [ 177.632691][ T5142] EXT4-fs (loop0): Invalid want_extra_isize 7 [ 177.928265][ T5151] loop4: detected capacity change from 0 to 4096 [ 178.218454][ T5156] loop1: detected capacity change from 0 to 64 [ 180.426655][ T5166] loop4: detected capacity change from 0 to 512 [ 180.802394][ T5166] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 181.041436][ T5166] EXT4-fs (loop4): Ignoring removed orlov option [ 181.338939][ T5166] EXT4-fs (loop4): DAX unsupported by block device. [ 181.386337][ T5178] loop1: detected capacity change from 0 to 16 [ 181.726961][ T5178] erofs: (device loop1): mounted with root inode @ nid 36. [ 182.701025][ T5178] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 182.958281][ T5188] device syzkaller0 entered promiscuous mode [ 183.018127][ T5191] loop0: detected capacity change from 0 to 512 [ 183.138835][ T5178] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 183.311805][ T5189] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 183.705395][ T5191] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 183.729425][ T5189] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 183.814185][ T5191] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.985321][ T5200] loop2: detected capacity change from 0 to 4096 [ 185.094159][ T5213] loop3: detected capacity change from 0 to 1024 [ 185.140910][ T5215] loop1: detected capacity change from 0 to 4096 [ 185.266773][ T5213] EXT4-fs (loop3): Invalid want_extra_isize 7 [ 187.245928][ T5223] loop0: detected capacity change from 0 to 4096 [ 189.573536][ T5248] loop4: detected capacity change from 0 to 16 [ 189.779289][ T5248] erofs: (device loop4): mounted with root inode @ nid 36. [ 189.870562][ T5248] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 189.901553][ T5248] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 189.967659][ T5253] device syzkaller0 entered promiscuous mode [ 190.031158][ T5248] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 190.281034][ T5248] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 190.484674][ T5258] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 190.879713][ T5258] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 191.138825][ T5261] loop4: detected capacity change from 0 to 4096 [ 191.714206][ T5269] loop0: detected capacity change from 0 to 256 [ 191.920983][ T5269] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 192.020326][ T5269] attempt to access beyond end of device [ 192.020326][ T5269] loop0: rw=16777216, want=3159, limit=256 [ 192.075365][ T5269] attempt to access beyond end of device [ 192.075365][ T5269] loop0: rw=16777216, want=6271, limit=256 [ 192.240150][ T5269] attempt to access beyond end of device [ 192.240150][ T5269] loop0: rw=16777216, want=12135, limit=256 [ 192.397154][ T5269] attempt to access beyond end of device [ 192.397154][ T5269] loop0: rw=16777216, want=18015, limit=256 [ 192.422096][ T5269] attempt to access beyond end of device [ 192.422096][ T5269] loop0: rw=16777216, want=21543, limit=256 [ 192.443204][ T5269] attempt to access beyond end of device [ 192.443204][ T5269] loop0: rw=16777216, want=23735, limit=256 [ 192.463907][ T5269] attempt to access beyond end of device [ 192.463907][ T5269] loop0: rw=16777216, want=25991, limit=256 [ 192.477818][ T26] audit: type=1800 audit(1785811080.108:6): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.232" name="file1" dev="loop0" ino=1048608 res=0 errno=0 [ 192.507394][ T5269] attempt to access beyond end of device [ 192.507394][ T5269] loop0: rw=16777216, want=30711, limit=256 [ 192.527031][ T5269] attempt to access beyond end of device [ 192.527031][ T5269] loop0: rw=16777216, want=32943, limit=256 [ 193.945276][ T5281] loop0: detected capacity change from 0 to 4096 [ 193.956316][ T5290] loop4: detected capacity change from 0 to 16 [ 193.967628][ T5290] erofs: (device loop4): mounted with root inode @ nid 36. [ 193.973879][ T5288] batman_adv: batadv0: Adding interface: macvtap1 [ 194.617136][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.646355][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.667785][ T5288] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.177913][ T5288] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 195.256285][ T5290] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 195.301780][ T5290] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 195.359255][ T5290] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 195.386738][ T5290] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 195.412801][ T5301] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 195.456637][ T5301] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 195.472388][ T5288] batman_adv: batadv0: Removing interface: macvtap1 [ 196.652311][ T4232] Bluetooth: hci3: command 0x0406 tx timeout [ 196.658408][ T4232] Bluetooth: hci2: command 0x0406 tx timeout [ 196.722163][ T4232] Bluetooth: hci1: command 0x0406 tx timeout [ 196.769077][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 196.793998][ T4232] Bluetooth: hci4: command 0x0406 tx timeout [ 197.210305][ T5317] loop0: detected capacity change from 0 to 4096 [ 198.635682][ T5340] loop1: detected capacity change from 0 to 16 [ 199.027025][ T5340] erofs: (device loop1): mounted with root inode @ nid 36. [ 199.146679][ T5340] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 200.082655][ T5340] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 200.133428][ T5352] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 200.223641][ T5352] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 200.235683][ T5355] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 200.245790][ T5355] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 200.392511][ T5358] loop2: detected capacity change from 0 to 64 [ 201.098456][ T5362] loop3: detected capacity change from 0 to 256 [ 201.154365][ T5361] device syzkaller0 entered promiscuous mode [ 201.229050][ T5362] FAT-fs (loop3): Directory bread(block 64) failed [ 201.246949][ T5362] FAT-fs (loop3): Directory bread(block 65) failed [ 201.263384][ T5362] FAT-fs (loop3): Directory bread(block 66) failed [ 201.270664][ T5362] FAT-fs (loop3): Directory bread(block 67) failed [ 201.289075][ T5362] FAT-fs (loop3): Directory bread(block 68) failed [ 201.340815][ T5362] FAT-fs (loop3): Directory bread(block 69) failed [ 201.349094][ T5362] FAT-fs (loop3): Directory bread(block 70) failed [ 201.356604][ T5362] FAT-fs (loop3): Directory bread(block 71) failed [ 201.365469][ T5362] FAT-fs (loop3): Directory bread(block 72) failed [ 201.372381][ T5362] FAT-fs (loop3): Directory bread(block 73) failed [ 201.378813][ T5364] loop1: detected capacity change from 0 to 4096 [ 201.410708][ T5366] loop0: detected capacity change from 0 to 256 [ 201.531959][ T5370] loop4: detected capacity change from 0 to 4096 [ 202.565819][ T5366] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 203.349424][ T5385] loop1: detected capacity change from 0 to 2048 [ 203.556148][ T5387] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 205.229014][ T5397] loop4: detected capacity change from 0 to 16 [ 205.977640][ T5397] erofs: (device loop4): mounted with root inode @ nid 36. [ 206.432558][ T5397] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 206.463314][ T5397] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 206.502455][ T5397] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 206.512177][ T5397] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 206.522164][ T5397] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 206.531718][ T5397] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 206.562732][ T5410] device syzkaller0 entered promiscuous mode [ 208.049123][ T5428] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 208.314475][ T5426] loop3: detected capacity change from 0 to 4096 [ 208.896959][ T5420] loop4: detected capacity change from 0 to 4096 [ 212.782557][ T5459] loop3: detected capacity change from 0 to 16 [ 215.419404][ T5459] erofs: (device loop3): mounted with root inode @ nid 36. [ 216.157118][ T5459] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 216.262194][ T5459] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 216.294216][ T5487] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 216.342611][ T5487] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 217.202852][ T5459] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 217.262267][ T5459] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 219.246451][ T5504] loop4: detected capacity change from 0 to 4096 [ 221.448041][ T5521] loop3: detected capacity change from 0 to 256 [ 221.702293][ T5521] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 221.945109][ T5521] attempt to access beyond end of device [ 221.945109][ T5521] loop3: rw=16777216, want=2607, limit=256 [ 221.964186][ T5521] attempt to access beyond end of device [ 221.964186][ T5521] loop3: rw=16777216, want=4671, limit=256 [ 222.057148][ T5521] attempt to access beyond end of device [ 222.057148][ T5521] loop3: rw=16777216, want=6967, limit=256 [ 222.192368][ T5521] attempt to access beyond end of device [ 222.192368][ T5521] loop3: rw=16777216, want=10391, limit=256 [ 222.279543][ T5521] attempt to access beyond end of device [ 222.279543][ T5521] loop3: rw=16777216, want=14935, limit=256 [ 222.303469][ T5521] attempt to access beyond end of device [ 222.303469][ T5521] loop3: rw=16777216, want=17999, limit=256 [ 222.329263][ T5521] attempt to access beyond end of device [ 222.329263][ T5521] loop3: rw=16777216, want=20775, limit=256 [ 222.342329][ T26] audit: type=1800 audit(1785811110.008:7): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.299" name="file1" dev="loop3" ino=1048611 res=0 errno=0 [ 222.365814][ T5521] attempt to access beyond end of device [ 222.365814][ T5521] loop3: rw=16777216, want=23247, limit=256 [ 222.394809][ T5521] attempt to access beyond end of device [ 222.394809][ T5521] loop3: rw=16777216, want=27583, limit=256 [ 222.428568][ T5521] attempt to access beyond end of device [ 222.428568][ T5521] loop3: rw=16777216, want=32943, limit=256 [ 222.624960][ T5524] loop0: detected capacity change from 0 to 512 [ 222.652381][ T5526] loop4: detected capacity change from 0 to 512 [ 222.709989][ T5524] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.301: iget: bad i_size value: 38620345925642 [ 222.729462][ T5524] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.301: couldn't read orphan inode 15 (err -117) [ 222.753139][ T5524] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.849737][ T5526] EXT4-fs error (device loop4): ext4_fill_super:4872: inode #2: comm syz.4.302: inode has both inline data and extents flags [ 222.892576][ T5526] EXT4-fs (loop4): get root inode failed [ 222.898714][ T5526] EXT4-fs (loop4): mount failed [ 222.985632][ T5536] device syzkaller0 entered promiscuous mode [ 223.016440][ T5524] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.301: bg 0: block 5: invalid block bitmap [ 223.055835][ T5538] loop3: detected capacity change from 0 to 16 [ 223.092879][ T5524] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 988 with error 28 [ 223.093694][ T5534] EXT4-fs (loop0): shut down requested (1) [ 223.114724][ T5524] EXT4-fs (loop0): This should not happen!! Data will be lost [ 223.114724][ T5524] [ 223.125876][ T5526] fuse: Unknown parameter '0x0000000000000005' [ 223.169247][ T5538] erofs: (device loop3): mounted with root inode @ nid 36. [ 223.188075][ T5524] EXT4-fs (loop0): Total free blocks count 0 [ 223.197877][ T5538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 223.252886][ T5524] EXT4-fs (loop0): Free/Dirty block details [ 223.265455][ T5524] EXT4-fs (loop0): free_blocks=0 [ 223.319134][ T5524] EXT4-fs (loop0): dirty_blocks=992 [ 223.324503][ T5524] EXT4-fs (loop0): Block reservation details [ 223.330688][ T5524] EXT4-fs (loop0): i_reserved_data_blocks=992 [ 223.362010][ T5538] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 224.299160][ T5542] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 224.425761][ T5542] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 224.585970][ T5545] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 224.714069][ T5545] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 226.780043][ T5549] loop4: detected capacity change from 0 to 256 [ 227.005704][ T5549] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.167941][ T5549] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 228.100776][ T5549] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 230.291827][ T5583] device syzkaller0 entered promiscuous mode [ 231.463933][ T5586] loop2: detected capacity change from 0 to 256 [ 231.485651][ T5587] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 231.587897][ T5586] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 231.651439][ T5586] attempt to access beyond end of device [ 231.651439][ T5586] loop2: rw=16777216, want=4007, limit=256 [ 231.665022][ T5586] attempt to access beyond end of device [ 231.665022][ T5586] loop2: rw=16777216, want=7263, limit=256 [ 231.698405][ T5586] attempt to access beyond end of device [ 231.698405][ T5586] loop2: rw=16777216, want=12959, limit=256 [ 231.729779][ T5586] attempt to access beyond end of device [ 231.729779][ T5586] loop2: rw=16777216, want=16591, limit=256 [ 231.751047][ T5586] attempt to access beyond end of device [ 231.751047][ T5586] loop2: rw=16777216, want=18647, limit=256 [ 231.772327][ T5586] attempt to access beyond end of device [ 231.772327][ T5586] loop2: rw=16777216, want=20703, limit=256 [ 231.793571][ T5586] attempt to access beyond end of device [ 231.793571][ T5586] loop2: rw=16777216, want=22767, limit=256 [ 231.820113][ T5586] attempt to access beyond end of device [ 231.820113][ T5586] loop2: rw=16777216, want=25783, limit=256 [ 231.849399][ T5586] attempt to access beyond end of device [ 231.849399][ T5586] loop2: rw=16777216, want=29879, limit=256 [ 231.871958][ T5586] attempt to access beyond end of device [ 231.871958][ T5586] loop2: rw=16777216, want=32943, limit=256 [ 231.925859][ T26] audit: type=1800 audit(1785811119.748:8): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.315" name="file1" dev="loop2" ino=1048612 res=0 errno=0 [ 232.138849][ T5593] loop1: detected capacity change from 0 to 16 [ 232.865091][ T5593] erofs: (device loop1): mounted with root inode @ nid 36. [ 233.028122][ T5594] loop4: detected capacity change from 0 to 4096 [ 233.079584][ T5602] loop3: detected capacity change from 0 to 16 [ 233.099156][ T5593] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 233.201430][ T5593] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 233.299034][ T5603] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 233.308666][ T5603] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 233.397982][ T5602] erofs: (device loop3): mounted with root inode @ nid 36. [ 233.406044][ T5593] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 233.426264][ T5593] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 233.828779][ T5608] loop2: detected capacity change from 0 to 2048 [ 234.135856][ T5602] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 234.977546][ T5611] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 235.149014][ T5602] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 235.460031][ T5611] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 236.632309][ T5621] loop1: detected capacity change from 0 to 1024 [ 237.270126][ T5629] loop4: detected capacity change from 0 to 16 [ 237.480891][ T5631] 9pnet_virtio: no channels available for device syz [ 237.708471][ T26] audit: type=1800 audit(1785811125.668:9): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.327" name="file0" dev="loop1" ino=18 res=0 errno=0 [ 237.840571][ T5629] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 238.760084][ T5646] Device name cannot be null; rc = [-22] [ 238.822805][ T5646] overlayfs: overlapping lowerdir path [ 238.910998][ T5648] overlayfs: overlapping lowerdir path [ 239.114724][ T5642] device syzkaller0 entered promiscuous mode [ 240.453607][ T5657] loop2: detected capacity change from 0 to 16 [ 240.537484][ T5657] erofs: (device loop2): mounted with root inode @ nid 36. [ 240.675623][ T5657] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 240.708167][ T5661] loop4: detected capacity change from 0 to 4096 [ 240.727506][ T5657] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 240.733684][ T5662] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 240.775514][ T5662] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 240.790955][ T5657] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 240.801258][ T5657] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 241.913889][ T5670] loop1: detected capacity change from 0 to 16 [ 241.925170][ T5670] erofs: (device loop1): mounted with root inode @ nid 36. [ 242.034981][ T5671] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 242.351945][ T5670] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 242.377638][ T5673] loop3: detected capacity change from 0 to 512 [ 242.498779][ T5670] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 242.538254][ T5676] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 242.657900][ T5676] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 242.666762][ T5677] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 242.746875][ T5677] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 243.386640][ T5687] Invalid ELF header magic: != ELF [ 244.288793][ T5673] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.341: iget: bad i_size value: 38620345925642 [ 244.321932][ T5692] device syzkaller0 entered promiscuous mode [ 244.374115][ T5673] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.341: couldn't read orphan inode 15 (err -117) [ 244.548731][ T5673] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 249.643001][ T5711] loop3: detected capacity change from 0 to 16 [ 249.828545][ T5711] erofs: (device loop3): mounted with root inode @ nid 36. [ 250.364999][ T5711] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 250.398326][ T5711] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 250.408074][ T5711] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 250.517521][ T5719] netlink: 'syz.0.350': attribute type 5 has an invalid length. [ 250.539700][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.547464][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.532277][ T5719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.631032][ T5711] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 251.722464][ T5721] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 251.735484][ T5725] ip6t_srh: unknown srh match flags FF3F [ 251.804145][ T5721] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 255.999729][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.016941][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.707499][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 256.719203][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 256.726885][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.736979][ T4202] Workqueue: hci3 hci_rx_work [ 256.742301][ T4202] Call Trace: [ 256.745724][ T4202] [ 256.748680][ T4202] dump_stack_lvl+0x188/0x250 [ 256.753447][ T4202] ? show_regs_print_info+0x20/0x20 [ 256.758681][ T4202] ? load_image+0x410/0x410 [ 256.763244][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 256.768409][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 256.773104][ T4202] ? kthread+0x42e/0x520 [ 256.777369][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 256.782590][ T4202] kobject_add_internal+0x5ba/0xcd0 [ 256.787826][ T4202] kobject_add+0x160/0x230 [ 256.792282][ T4202] ? kobject_init+0x1c0/0x1c0 [ 256.796997][ T4202] ? __raw_spin_lock_init+0x41/0x100 [ 256.802505][ T4202] ? klist_children_get+0x50/0x50 [ 256.807729][ T4202] ? get_device_parent+0x121/0x3e0 [ 256.812867][ T4202] device_add+0x470/0x1050 [ 256.817302][ T4202] ? device_initialize+0x2a5/0x4d0 [ 256.822638][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 256.827614][ T4202] le_conn_complete_evt+0xc2e/0x14d0 [ 256.832932][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 256.838070][ T4202] ? __mutex_trylock_common+0x15c/0x260 [ 256.843640][ T4202] hci_le_meta_evt+0x285/0x3ca0 [ 256.848530][ T4202] ? hci_event_packet+0x363/0x1310 [ 256.853669][ T4202] ? __lock_acquire+0x7b50/0x7b50 [ 256.858737][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 256.865000][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 256.870659][ T4202] ? mark_lock+0x94/0x320 [ 256.875239][ T4202] ? mutex_unlock+0x10/0x10 [ 256.879771][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 256.885950][ T4202] ? lock_chain_count+0x20/0x20 [ 256.890822][ T4202] ? __rwlock_init+0x140/0x140 [ 256.895736][ T4202] hci_event_packet+0xe0b/0x1310 [ 256.900815][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 256.905781][ T4202] ? rcu_lock_release+0x20/0x20 [ 256.910765][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 256.916075][ T4202] hci_rx_work+0x255/0xa10 [ 256.920607][ T4202] process_one_work+0x867/0xff0 [ 256.925510][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 256.931172][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 256.936497][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 256.941551][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 256.947233][ T4202] ? wq_worker_running+0x97/0x170 [ 256.952397][ T4202] worker_thread+0xad7/0x12a0 [ 256.957209][ T4202] kthread+0x42e/0x520 [ 256.961299][ T4202] ? rcu_lock_release+0x20/0x20 [ 256.966181][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 256.970880][ T4202] ret_from_fork+0x1f/0x30 [ 256.975853][ T4202] [ 256.990223][ T4202] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 257.004985][ T4202] Bluetooth: hci3: failed to register connection device [ 257.180509][ T5747] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 257.305077][ T5743] loop1: detected capacity change from 0 to 16 [ 257.366987][ T5745] loop4: detected capacity change from 0 to 4096 [ 257.484003][ T5754] overlayfs: failed to clone upperpath [ 258.054781][ T5753] device syzkaller0 entered promiscuous mode [ 258.132303][ T5743] erofs: (device loop1): mounted with root inode @ nid 36. [ 258.314678][ T5743] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 258.381925][ T5743] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 258.475572][ T5758] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 258.547383][ T5758] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 258.561680][ T5762] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 259.413985][ T5762] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 260.941447][ T5774] loop4: detected capacity change from 0 to 256 [ 261.472627][ T5777] Invalid ELF header magic: != ELF [ 262.908085][ T5784] loop3: detected capacity change from 0 to 2048 [ 262.931008][ T5785] tmpfs: Unknown parameter 'nr_blhcks' [ 263.581054][ T5793] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 263.919170][ T4235] Bluetooth: hci3: command 0x0406 tx timeout [ 263.941559][ T5790] loop4: detected capacity change from 0 to 128 [ 264.016617][ T5790] FAT-fs (loop4): bogus number of FAT structure [ 264.033471][ T5790] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 264.082336][ T5790] FAT-fs (loop4): Can't find a valid FAT filesystem [ 265.195597][ T5816] loop0: detected capacity change from 0 to 16 [ 266.100204][ T5816] erofs: (device loop0): mounted with root inode @ nid 36. [ 266.235999][ T5816] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 266.305181][ T5816] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 266.353697][ T5824] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 266.417761][ T5824] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 266.450208][ T5826] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 266.502617][ T5826] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 266.854947][ T5831] MTRR 1 not used [ 270.856583][ T1318] block nbd3: Attempted send on invalid socket [ 270.864680][ T1318] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.880329][ T5877] input: syz0 as /devices/virtual/input/input7 [ 271.736106][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.745636][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.785385][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.809763][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.955313][ T5917] MTRR 1 not used [ 275.174528][ T5923] overlayfs: conflicting lowerdir path [ 275.312554][ T5925] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 277.518663][ T5925] cramfs: wrong magic [ 282.430070][ T5950] loop3: detected capacity change from 0 to 32768 [ 283.424814][ T5950] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 284.443210][ T26] audit: type=1800 audit(1785811172.388:10): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.410" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 284.667817][ T5950] syz.3.410 (5950) used greatest stack depth: 19232 bytes left [ 285.048986][ T5967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.145260][ T5967] loop2: detected capacity change from 0 to 1024 [ 285.251037][ T5967] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 285.580998][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 286.124887][ T5978] loop0: detected capacity change from 0 to 256 [ 287.358834][ T5978] exfat: Deprecated parameter 'utf8' [ 287.365353][ T5978] exfat: Deprecated parameter 'utf8' [ 289.011045][ T5978] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 289.549670][ T5985] loop1: detected capacity change from 0 to 512 [ 289.829231][ T5985] EXT4-fs (loop1): Ignoring removed bh option [ 290.148521][ T5985] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.422: corrupted in-inode xattr [ 290.346833][ T5985] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.422: couldn't read orphan inode 15 (err -117) [ 290.448634][ T5987] loop2: detected capacity change from 0 to 1024 [ 290.585475][ T5985] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 291.711133][ T5991] loop3: detected capacity change from 0 to 512 [ 291.822810][ T5991] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 292.168479][ T5993] 9pnet_virtio: no channels available for device syz [ 292.265921][ T5991] EXT4-fs (loop3): Unrecognized mount option "fscontext=system_u" or missing value [ 293.234896][ T5991] loop3: detected capacity change from 0 to 2048 [ 294.815370][ T6006] loop2: detected capacity change from 0 to 512 [ 295.755746][ T6006] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x00000000000007ff,auto_da_alloc,nogrpid,nouid32,,errors=continue. Quota mode: writeback. [ 295.813180][ T6006] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.036282][ T6008] loop0: detected capacity change from 0 to 4096 [ 298.057007][ T6038] loop2: detected capacity change from 0 to 512 [ 298.073084][ T6008] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 298.246575][ T6038] EXT4-fs (loop2): Ignoring removed bh option [ 298.446089][ T6038] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.434: corrupted in-inode xattr [ 298.502853][ T6038] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.434: couldn't read orphan inode 15 (err -117) [ 298.529506][ T6038] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 303.694010][ T6067] loop1: detected capacity change from 0 to 1024 [ 303.763690][ T6067] EXT4-fs (loop1): Ignoring removed orlov option [ 304.781230][ T6067] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000004,jqfmt=vfsold,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none. [ 305.891549][ T6084] loop4: detected capacity change from 0 to 4096 [ 309.540977][ T4235] Bluetooth: hci0: command 0x0405 tx timeout [ 311.667778][ T6128] loop2: detected capacity change from 0 to 512 [ 311.815512][ T6128] EXT4-fs (loop2): Ignoring removed nobh option [ 311.902153][ T6128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 312.359835][ T6131] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 312.409709][ T6136] loop3: detected capacity change from 0 to 16 [ 312.628159][ T4195] Bluetooth: hci4: hcon ffff88807926e000 sent 1 < count 257 [ 312.656087][ T6137] loop0: detected capacity change from 0 to 16 [ 312.699793][ T6128] EXT4-fs (loop2): 1 truncate cleaned up [ 312.726688][ T6128] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 313.470085][ T6136] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 313.528970][ T6137] erofs: (device loop0): mounted with root inode @ nid 36. [ 314.877365][ T6137] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 315.052244][ T6144] loop3: detected capacity change from 0 to 4096 [ 315.085381][ T6137] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 315.105966][ T6148] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 315.301325][ T6148] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 317.285568][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.293341][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.613969][ T6166] loop3: detected capacity change from 0 to 40427 [ 317.937445][ T6166] F2FS-fs (loop3): invalid crc value [ 317.968297][ T6166] F2FS-fs (loop3): Found nat_bits in checkpoint [ 318.020106][ T6166] F2FS-fs (loop3): Start checkpoint disabled! [ 318.067002][ T6166] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 318.740088][ T6175] loop4: detected capacity change from 0 to 128 [ 319.620918][ T6175] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 319.765936][ T6175] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.819401][ T6182] loop0: detected capacity change from 0 to 16 [ 320.046209][ T6182] erofs: (device loop0): mounted with root inode @ nid 36. [ 320.322335][ T6184] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 321.886987][ T6182] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 321.922273][ T6182] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 322.142809][ T6182] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 322.231002][ T6193] netlink: 32 bytes leftover after parsing attributes in process `syz.1.473'. [ 322.613894][ T5194] attempt to access beyond end of device [ 322.613894][ T5194] loop3: rw=2049, want=40976, limit=40427 [ 323.492490][ T6182] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 325.084698][ T6204] loop0: detected capacity change from 0 to 16 [ 325.209915][ T6204] erofs: (device loop0): mounted with root inode @ nid 36. [ 326.380444][ T6204] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 326.739051][ T6219] 9pnet: Insufficient options for proto=fd [ 327.920995][ T6204] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 327.922318][ T6215] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 327.984317][ T6215] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 331.808400][ T6237] loop1: detected capacity change from 0 to 1024 [ 332.224152][ T6247] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 334.182642][ T6257] 9pnet_virtio: no channels available for device syz [ 336.794974][ T6276] loop0: detected capacity change from 0 to 512 [ 337.439866][ T6276] EXT4-fs (loop0): Ignoring removed nobh option [ 337.496978][ T6276] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 337.878066][ T6276] EXT4-fs (loop0): 1 truncate cleaned up [ 337.963815][ T6276] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 340.699144][ T6281] se_device not configured yet, cannot port link [ 342.410182][ T6295] comedi comedi1: 8255: I/O port conflict (0x1000000,4) [ 342.420598][ T6295] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 342.427704][ T6295] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 342.434654][ T6295] comedi comedi1: 8255: I/O port conflict (0xf,4) [ 342.441652][ T6295] comedi comedi1: 8255: I/O port conflict (0xffe,4) [ 342.449024][ T6295] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 342.456075][ T6295] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 342.463215][ T6295] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 342.477992][ T6295] comedi comedi1: 8255: I/O port conflict (0xffff,4) [ 342.485186][ T6295] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 342.492134][ T6295] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 342.499057][ T6295] comedi comedi1: 8255: I/O port conflict (0xf0,4) [ 342.507619][ T6295] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 342.514806][ T6295] comedi comedi1: 8255: I/O port conflict (0x3ff,4) [ 342.575030][ T6295] comedi comedi1: 8255: I/O port conflict (0x10000,4) [ 342.582104][ T6295] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 342.588867][ T6295] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 342.595663][ T6295] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 346.888959][ T6326] loop4: detected capacity change from 0 to 1764 [ 355.710546][ T5447] Bluetooth: hci5: command 0x0409 tx timeout [ 355.999820][ T6379] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 356.342211][ T4468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.560361][ T6369] loop4: detected capacity change from 0 to 4096 [ 356.678663][ T4468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.751777][ T6355] chnl_net:caif_netlink_parms(): no params data found [ 357.967815][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 359.275939][ T4468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.002162][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 360.842456][ T4468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.136335][ T6432] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6432 comm: syz.4.529) [ 361.150729][ T6432] tmpfs: Bad value for 'mpol' [ 362.242915][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 362.589256][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.622334][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.833831][ T6355] device bridge_slave_0 entered promiscuous mode [ 362.926648][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.064761][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.073064][ T6355] device bridge_slave_1 entered promiscuous mode [ 363.868213][ T6355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.910470][ T6452] loop0: detected capacity change from 0 to 4096 [ 363.979964][ T6355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.180259][ T6355] team0: Port device team_slave_0 added [ 364.665306][ T6355] team0: Port device team_slave_1 added [ 366.311281][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.339392][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.391242][ T6479] loop0: detected capacity change from 0 to 64 [ 366.563751][ T6355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.590577][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.603833][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.636062][ T6355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.881867][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.541'. [ 368.726768][ T6355] device hsr_slave_0 entered promiscuous mode [ 369.014590][ T6355] device hsr_slave_1 entered promiscuous mode [ 370.202896][ T6355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.228524][ T6355] Cannot create hsr debugfs directory [ 375.407446][ T6355] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 375.446258][ T6355] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 375.892980][ T6355] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 376.088781][ T6355] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 377.270299][ T6575] loop4: detected capacity change from 0 to 4096 [ 378.733379][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.739864][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.866750][ T6355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.897956][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.751965][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.823533][ T6604] loop4: detected capacity change from 0 to 4096 [ 380.836518][ T6355] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.848767][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.859123][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.868222][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.875380][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.949534][ T6355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.960311][ T6355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.100629][ T6613] loop1: detected capacity change from 0 to 512 [ 381.445234][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 381.748750][ T6613] EXT4-fs (loop1): Ignoring removed nobh option [ 382.697007][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.706559][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.715565][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.722831][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.747434][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 382.766273][ T6613] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 382.819193][ T6613] EXT4-fs (loop1): 1 truncate cleaned up [ 382.977210][ T6613] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 383.016791][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.799921][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.883731][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 384.402384][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.602819][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.621847][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.631221][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.640556][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 384.659213][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.670421][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.686086][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.106292][ T6355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.155310][ T6644] loop1: detected capacity change from 0 to 16 [ 385.203270][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.226901][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.271581][ T6644] erofs: (device loop1): mounted with root inode @ nid 36. [ 386.383137][ T6655] loop4: detected capacity change from 0 to 512 [ 386.390953][ T6644] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 386.466233][ T6655] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 386.491105][ T6644] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 386.511839][ T6655] EXT4-fs (loop4): Unrecognized mount option "fscontext=system_u" or missing value [ 386.530802][ T6654] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 386.640733][ T6654] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 387.103435][ T6668] loop4: detected capacity change from 0 to 2048 [ 387.789441][ T4468] device hsr_slave_0 left promiscuous mode [ 388.638303][ T6675] loop1: detected capacity change from 0 to 4096 [ 388.707277][ T4468] device hsr_slave_1 left promiscuous mode [ 388.723256][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.760756][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.861150][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.868889][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.917338][ T4468] device bridge_slave_1 left promiscuous mode [ 388.957235][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.991039][ T4468] device bridge_slave_0 left promiscuous mode [ 390.405519][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.462021][ T4468] device veth1_macvtap left promiscuous mode [ 390.482083][ T4468] device veth0_macvtap left promiscuous mode [ 390.750783][ T4468] device veth1_vlan left promiscuous mode [ 390.763414][ T4468] device veth0_vlan left promiscuous mode [ 391.519484][ T6703] loop1: detected capacity change from 0 to 4096 [ 391.878564][ T4468] team0 (unregistering): Port device team_slave_1 removed [ 391.896687][ T4468] team0 (unregistering): Port device team_slave_0 removed [ 391.990169][ T4468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.026273][ T4468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.095167][ T4468] bond0 (unregistering): Released all slaves [ 393.336389][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 393.346419][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 393.502340][ T6355] device veth0_vlan entered promiscuous mode [ 393.702874][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 393.792554][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 393.920675][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 393.935122][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 394.860795][ T6355] device veth1_vlan entered promiscuous mode [ 395.047107][ T6730] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 396.135729][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.234593][ T6739] loop0: detected capacity change from 0 to 4096 [ 396.255200][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.497188][ T6355] device veth0_macvtap entered promiscuous mode [ 396.566699][ T6355] device veth1_macvtap entered promiscuous mode [ 396.741399][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.781398][ T26] audit: type=1326 audit(1785811284.880:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.0.598" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea726019 code=0x7ffc0000 [ 396.830400][ T26] audit: type=1326 audit(1785811284.890:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.0.598" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea726019 code=0x7ffc0000 [ 396.872486][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.960431][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.984773][ T26] audit: type=1326 audit(1785811284.920:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.0.598" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f13ea726019 code=0x7ffc0000 [ 397.063385][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.073484][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.084731][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.097691][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.106788][ T26] audit: type=1326 audit(1785811284.920:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.0.598" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea726019 code=0x7ffc0000 [ 397.132061][ T26] audit: type=1326 audit(1785811284.920:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.0.598" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea726019 code=0x7ffc0000 [ 397.139305][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 397.190627][ T26] audit: type=1326 audit(1785811284.920:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.0.598" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13ea726019 code=0x7ffc0000 [ 397.401018][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 397.522956][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.678856][ T26] audit: type=1326 audit(1785811284.920:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.0.598" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea726019 code=0x7ffc0000 [ 397.783939][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.802251][ T26] audit: type=1326 audit(1785811284.920:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.0.598" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea726019 code=0x7ffc0000 [ 397.814882][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.839839][ T26] audit: type=1326 audit(1785811284.920:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.0.598" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f13ea726019 code=0x7ffc0000 [ 397.930043][ T26] audit: type=1326 audit(1785811284.920:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.0.598" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea726019 code=0x7ffc0000 [ 397.956610][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.158284][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.201878][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.213457][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.287613][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.331844][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.364377][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.464451][ T6355] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.668570][ T6355] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.720190][ T6355] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.754247][ T6355] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.954202][ T6775] loop4: detected capacity change from 0 to 16 [ 399.045014][ T6775] erofs: (device loop4): mounted with root inode @ nid 36. [ 399.096024][ T6355] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 399.157256][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.336994][ T6775] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 399.389982][ T6775] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 399.409257][ T6775] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 399.425249][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.459342][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.501318][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.509085][ T6775] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 399.560959][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.634836][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.696520][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 402.425882][ T4271] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 402.669979][ T4271] usb 2-1: Using ep0 maxpacket: 16 [ 402.801057][ T4271] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 402.937237][ T4271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.574116][ T4271] usb 2-1: config 0 has no interface number 0 [ 404.670726][ T4271] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 404.729436][ T4271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.803071][ T4271] usb 2-1: Product: syz [ 404.816389][ T6841] overlayfs: missing 'lowerdir' [ 404.862544][ T4271] usb 2-1: Manufacturer: syz [ 405.036438][ T4271] usb 2-1: SerialNumber: syz [ 405.614877][ T4271] usb 2-1: config 0 descriptor?? [ 406.097999][ T4271] usb 2-1: can't set config #0, error -71 [ 406.491322][ T4271] usb 2-1: USB disconnect, device number 2 [ 407.683980][ T6861] loop1: detected capacity change from 0 to 256 [ 407.756008][ T6863] device syzkaller0 entered promiscuous mode [ 407.779283][ T6863] tipc: Enabling of bearer rejected, failed to enable media [ 407.833283][ T6861] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.907618][ T6861] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 407.918753][ T6859] loop5: detected capacity change from 0 to 4096 [ 407.963017][ T6861] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 408.096846][ T6868] overlayfs: failed to clone upperpath [ 412.409123][ T6902] loop1: detected capacity change from 0 to 512 [ 412.999082][ T6904] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 413.225770][ T6913] gadgetfs: bound to dummy_udc driver [ 413.903440][ T6902] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 413.942775][ T6920] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 414.693114][ T6902] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 414.786706][ T6902] EXT4-fs (loop1): 1 truncate cleaned up [ 414.799269][ T6902] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 414.876521][ T6931] tipc: Enabling of bearer rejected, failed to enable media [ 415.296559][ T6933] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.211794][ T6923] loop4: detected capacity change from 0 to 4096 [ 420.255412][ T6975] loop1: detected capacity change from 0 to 512 [ 420.675595][ T6975] EXT4-fs (loop1): Ignoring removed oldalloc option [ 420.827066][ T6975] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 421.085140][ T6979] device syzkaller0 entered promiscuous mode [ 421.094613][ T6979] tipc: Enabling of bearer rejected, failed to enable media [ 421.248396][ T6975] EXT4-fs (loop1): 1 truncate cleaned up [ 421.263908][ T6975] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue. Quota mode: none. [ 422.169944][ T6984] loop5: detected capacity change from 0 to 128 [ 422.700618][ T6997] gadgetfs: bound to dummy_udc driver [ 423.379045][ T6984] FAT-fs (loop5): bogus number of FAT structure [ 423.424054][ T6984] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 423.434096][ T6984] FAT-fs (loop5): Can't find a valid FAT filesystem [ 428.877241][ T5927] Bluetooth: hci0: command 0x0c1a tx timeout [ 430.194761][ T7076] loop5: detected capacity change from 0 to 512 [ 430.350278][ T7076] EXT4-fs (loop5): Ignoring removed nobh option [ 430.373808][ T7076] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 430.439051][ T7076] EXT4-fs (loop5): 1 truncate cleaned up [ 430.485472][ T7076] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 431.590301][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 434.741183][ T7120] device syzkaller0 entered promiscuous mode [ 436.938725][ T6606] Bluetooth: hci5: link tx timeout [ 436.944463][ T6606] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 436.987448][ T7135] loop5: detected capacity change from 0 to 1024 [ 437.114602][ T7135] EXT4-fs (loop5): test_dummy_encryption requires encrypt feature [ 438.167054][ T7150] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 438.425235][ T7150] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 438.434996][ T7150] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 438.464054][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 438.464144][ T26] audit: type=1800 audit(1785811582.266:32): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.686" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 440.262379][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.275400][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 442.007229][ T7191] 9pnet: Insufficient options for proto=fd [ 443.931452][ T7206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.700'. [ 444.540040][ T7207] ceph: No mds server is up or the cluster is laggy [ 448.216725][ T5447] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 450.884502][ T7270] device syzkaller0 entered promiscuous mode [ 456.911945][ T7316] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 457.376937][ T7328] loop5: detected capacity change from 0 to 128 [ 457.954865][ T7334] device syzkaller0 entered promiscuous mode [ 458.608212][ T7328] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 459.767645][ T7328] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 460.760812][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 468.634354][ T26] audit: type=1326 audit(1785811612.736:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 469.792509][ T26] audit: type=1326 audit(1785811612.736:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 470.023956][ T26] audit: type=1326 audit(1785811612.816:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 470.048141][ T26] audit: type=1326 audit(1785811612.816:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 470.072219][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.080931][ T26] audit: type=1326 audit(1785811612.816:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 470.105034][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.111979][ T26] audit: type=1326 audit(1785811612.866:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 470.135952][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.142250][ T26] audit: type=1326 audit(1785811612.866:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 470.166293][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.195482][ T26] audit: type=1326 audit(1785811612.866:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 470.219572][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.069321][ T26] audit: type=1326 audit(1785811612.886:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 472.278264][ T26] audit: type=1326 audit(1785811612.886:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 472.302455][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.362980][ T4232] libceph: connect (1)[c::]:6789 error -101 [ 472.508901][ T7453] ceph: No mds server is up or the cluster is laggy [ 472.529011][ T4232] libceph: mon0 (1)[c::]:6789 connect error [ 473.438900][ T4271] libceph: connect (1)[c::]:6789 error -101 [ 473.650640][ T4271] libceph: mon0 (1)[c::]:6789 connect error [ 481.050960][ T7546] loop4: detected capacity change from 0 to 512 [ 481.148870][ T7546] EXT4-fs (loop4): Ignoring removed nobh option [ 481.168775][ T7546] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 481.295593][ T7546] EXT4-fs (loop4): 1 truncate cleaned up [ 481.325012][ T7546] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 482.426737][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 487.737283][ T7628] loop4: detected capacity change from 0 to 64 [ 488.941406][ T7636] loop1: detected capacity change from 0 to 512 [ 489.192073][ T7636] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 489.206910][ T7636] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.966885][ T7654] loop4: detected capacity change from 0 to 512 [ 491.105803][ T7654] EXT4-fs (loop4): Ignoring removed nobh option [ 491.128489][ T7654] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 491.293844][ T7654] EXT4-fs (loop4): 1 truncate cleaned up [ 491.408217][ T7654] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 495.671746][ T7711] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 495.682069][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.728306][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.737486][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.957451][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.965187][ T7710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.973488][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.980894][ T7710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.218751][ T7710] team0: Port device bridge0 added [ 496.893627][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.953335][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.853996][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.338317][ T7764] loop1: detected capacity change from 0 to 512 [ 503.365307][ T7764] EXT4-fs (loop1): Ignoring removed nobh option [ 503.392457][ T7764] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 503.614171][ T7764] EXT4-fs (loop1): 1 truncate cleaned up [ 503.626354][ T7764] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 506.886712][ T7805] loop1: detected capacity change from 0 to 512 [ 506.913317][ T7806] loop4: detected capacity change from 0 to 64 [ 506.964589][ T7805] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 507.211700][ T7805] EXT4-fs (loop1): Unrecognized mount option "fscontext=system_u" or missing value [ 509.552179][ T7825] device syzkaller0 entered promiscuous mode [ 510.912473][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 510.912490][ T26] audit: type=1800 audit(1785811655.018:54): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.830" name="pnp_string" dev="configfs" ino=42432 res=0 errno=0 [ 516.285483][ T7897] netlink: 'syz.4.842': attribute type 27 has an invalid length. [ 516.303873][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 516.324151][ T7897] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 517.999107][ T7924] ceph: No mds server is up or the cluster is laggy [ 519.605182][ T7941] device syzkaller0 entered promiscuous mode [ 523.154301][ T7977] netlink: 'syz.5.855': attribute type 1 has an invalid length. [ 523.222055][ T7977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 523.782530][ T7993] netlink: 'syz.5.859': attribute type 2 has an invalid length. [ 524.198512][ T8001] sctp: [Deprecated]: syz.1.860 (pid 8001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.198512][ T8001] Use struct sctp_sack_info instead [ 526.226710][ T8021] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 526.429741][ T8021] IPVS: Error connecting to the multicast addr [ 530.800832][ T8045] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 530.842052][ T8045] VFS: Can't find a romfs filesystem on dev nullb0. [ 530.842052][ T8045] [ 536.131963][ T8087] capability: warning: `syz.0.881' uses deprecated v2 capabilities in a way that may be insecure [ 536.280372][ T8093] loop4: detected capacity change from 0 to 4096 [ 536.337822][ T8087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.881'. [ 537.094360][ T8087] device veth0_to_bond entered promiscuous mode [ 537.473176][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.480709][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.535811][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.543443][ T8106] bridge0: port 2(bridge_slave_1) entered listening state [ 537.551505][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.558932][ T8106] bridge0: port 1(bridge_slave_0) entered listening state [ 538.163069][ T8106] team0: Port device bridge0 added [ 538.270729][ T144] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 540.802770][ T8129] netlink: 14 bytes leftover after parsing attributes in process `syz.0.890'. [ 542.012078][ T8159] loop4: detected capacity change from 0 to 512 [ 542.136842][ T8159] EXT4-fs (loop4): Ignoring removed nobh option [ 542.143341][ T8159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 542.408655][ T8159] EXT4-fs (loop4): 1 truncate cleaned up [ 542.434498][ T8159] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 546.193341][ T8208] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by ""[8208] [ 546.220917][ T8208] netlink: 'syz.4.906': attribute type 29 has an invalid length. [ 546.233396][ T8208] netlink: 'syz.4.906': attribute type 29 has an invalid length. [ 546.251640][ T8208] netlink: 'syz.4.906': attribute type 29 has an invalid length. [ 546.274265][ T8208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.000852][ T8228] loop4: detected capacity change from 0 to 512 [ 549.290826][ T8228] EXT4-fs (loop4): Ignoring removed nobh option [ 549.430815][ T8228] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 549.771148][ T8228] EXT4-fs (loop4): 1 truncate cleaned up [ 549.852359][ T8228] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 552.805855][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 552.813912][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 553.457429][ T8263] loop4: detected capacity change from 0 to 512 [ 553.504445][ T8263] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 553.529770][ T8263] EXT4-fs (loop4): 1 truncate cleaned up [ 553.536426][ T8263] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 556.423071][ T8292] loop1: detected capacity change from 0 to 4096 [ 560.004330][ T4658] Bluetooth: hci5: command 0x0406 tx timeout [ 562.890055][ T8374] syz.2.936 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 563.545174][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.701797][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.937'. [ 567.264360][ T8408] device syzkaller0 entered promiscuous mode [ 567.327285][ T8408] tipc: Started in network mode [ 567.353973][ T8408] tipc: Node identity , cluster identity 4711 [ 567.360305][ T8408] tipc: Failed to obtain node identity [ 567.919303][ T8408] tipc: Enabling of bearer rejected, failed to enable media [ 568.154669][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.161971][ C0] bridge0: topology change detected, propagating [ 568.169201][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.176502][ C0] bridge0: topology change detected, propagating [ 568.179830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 568.450995][ T8427] loop4: detected capacity change from 0 to 4096 [ 568.561853][ T8429] fuse: Bad value for 'fd' [ 569.358694][ T8427] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 573.000451][ T8467] device syzkaller0 entered promiscuous mode [ 573.020382][ T8467] tipc: Started in network mode [ 573.123572][ T8467] tipc: Node identity , cluster identity 4711 [ 573.130072][ T8467] tipc: Failed to obtain node identity [ 573.138243][ T8467] tipc: Enabling of bearer rejected, failed to enable media [ 580.009392][ T8517] loop4: detected capacity change from 0 to 256 [ 581.767997][ T8526] device syzkaller0 entered promiscuous mode [ 582.657702][ T8526] tipc: Started in network mode [ 582.662741][ T8526] tipc: Node identity , cluster identity 4711 [ 582.694574][ T8517] FAT-fs (loop4): Directory bread(block 64) failed [ 582.701314][ T8517] FAT-fs (loop4): Directory bread(block 65) failed [ 582.833223][ T8517] FAT-fs (loop4): Directory bread(block 66) failed [ 582.839874][ T8517] FAT-fs (loop4): Directory bread(block 67) failed [ 582.881503][ T8517] FAT-fs (loop4): Directory bread(block 68) failed [ 582.901753][ T8517] FAT-fs (loop4): Directory bread(block 69) failed [ 582.911972][ T8517] FAT-fs (loop4): Directory bread(block 70) failed [ 582.931665][ T8517] FAT-fs (loop4): Directory bread(block 71) failed [ 582.953883][ T8517] FAT-fs (loop4): Directory bread(block 72) failed [ 582.960477][ T8517] FAT-fs (loop4): Directory bread(block 73) failed [ 582.968880][ T8526] tipc: Failed to obtain node identity [ 582.983467][ T8526] tipc: Enabling of bearer rejected, failed to enable media [ 583.672376][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 583.681933][ T8542] netlink: 'syz.1.982': attribute type 10 has an invalid length. [ 583.689907][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 583.723025][ T8542] device geneve2 entered promiscuous mode [ 584.622080][ T8547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 590.152818][ T4282] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 590.412873][ T4282] usb 6-1: Using ep0 maxpacket: 8 [ 590.533041][ T4282] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.603710][ T4282] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.755605][ T4282] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.905466][ T4282] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.124163][ T4282] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.259084][ T4282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.159614][ T4282] usb 6-1: usb_control_msg returned -32 [ 592.271960][ T4282] usbtmc 6-1:16.0: can't read capabilities [ 593.519535][ T4231] usb 6-1: USB disconnect, device number 2 [ 598.279610][ T8620] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 605.691936][ T8680] device bridge1 entered promiscuous mode [ 607.628160][ T8688] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1019'. [ 608.167115][ T8700] hub 8-0:1.0: USB hub found [ 608.176924][ T8700] hub 8-0:1.0: 1 port detected [ 613.015720][ T8726] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 613.057978][ T8726] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 613.069580][ T8726] netlink: 'syz.1.1028': attribute type 2 has an invalid length. [ 616.546518][ T8758] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1034'. [ 621.252297][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 621.261885][ T8798] netlink: 'syz.2.1046': attribute type 10 has an invalid length. [ 621.269858][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 621.282686][ T8798] device geneve2 entered promiscuous mode [ 621.282790][ T8796] loop1: detected capacity change from 0 to 512 [ 621.468418][ T8796] EXT4-fs (loop1): Ignoring removed nobh option [ 621.477774][ T8796] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 621.970242][ T8796] EXT4-fs (loop1): 1 truncate cleaned up [ 621.976338][ T8796] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 624.927041][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.064502][ T8829] NILFS (nullb0): couldn't find nilfs on the device [ 631.266928][ T8863] befs: (nullb0): invalid magic header [ 632.810892][ T8884] IPVS: set_ctl: invalid protocol: 115 172.20.20.39:20002 [ 633.898143][ T8905] loop1: detected capacity change from 0 to 512 [ 634.952292][ T8905] EXT4-fs (loop1): Ignoring removed nobh option [ 635.170545][ T8905] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 635.189398][ T8905] EXT4-fs (loop1): 1 truncate cleaned up [ 635.196669][ T8905] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 635.934176][ T8919] loop4: detected capacity change from 0 to 256 [ 635.981895][ T8919] FAT-fs (loop4): Unrecognized mount option "uU 鎰#M Di 9!;lN9A\>{CJdV0" or missing value [ 637.978131][ T8938] loop1: detected capacity change from 0 to 512 [ 638.214236][ T8938] EXT4-fs (loop1): Ignoring removed nobh option [ 638.842712][ T8938] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 638.912254][ T8938] EXT4-fs (loop1): 1 truncate cleaned up [ 638.969714][ T8938] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 640.535298][ T8960] loop4: detected capacity change from 0 to 512 [ 640.693644][ T8960] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.1087: inode has both inline data and extents flags [ 640.763804][ T8960] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1087: couldn't read orphan inode 15 (err -117) [ 640.834756][ T8960] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 645.348765][ T8996] dlm: dev_write: no op 0 74000000000000 [ 645.827618][ T9003] IPVS: set_ctl: invalid protocol: 115 172.20.20.39:20002 [ 647.895775][ T9022] loop4: detected capacity change from 0 to 4096 [ 648.548002][ T9030] tipc: Started in network mode [ 648.553552][ T9030] tipc: Node identity 4, cluster identity 4711 [ 648.560003][ T9030] tipc: Node number set to 4 [ 652.446445][ T9062] binder_alloc: 9056: binder_alloc_buf, no vma [ 654.882623][ T9076] loop1: detected capacity change from 0 to 4096 [ 662.492897][ T9134] loop1: detected capacity change from 0 to 4096 [ 664.774432][ T9139] mmap: syz.5.1130 (9139) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 665.525537][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'. [ 669.572635][ T9182] tmpfs: Unknown parameter '' [ 671.456058][ T9201] vivid-000: ================= START STATUS ================= [ 671.466069][ T9201] vivid-000: Radio HW Seek Mode: Bounded [ 671.472596][ T9201] vivid-000: Radio Programmable HW Seek: false [ 671.479062][ T9201] vivid-000: RDS Rx I/O Mode: Block I/O [ 671.484866][ T9201] vivid-000: Generate RBDS Instead of RDS: false [ 671.491512][ T9201] vivid-000: RDS Reception: true [ 671.496777][ T9201] vivid-000: RDS Program Type: 0 inactive [ 671.503162][ T9201] vivid-000: RDS PS Name: inactive [ 671.508798][ T9201] vivid-000: RDS Radio Text: inactive [ 671.514666][ T9201] vivid-000: RDS Traffic Announcement: false inactive [ 671.521761][ T9201] vivid-000: RDS Traffic Program: false inactive [ 671.528434][ T9201] vivid-000: RDS Music: false inactive [ 671.534170][ T9201] vivid-000: ================== END STATUS ================== [ 685.667958][ T9311] loop4: detected capacity change from 0 to 512 [ 685.699101][ T9315] loop1: detected capacity change from 0 to 512 [ 685.710913][ T9311] EXT4-fs (loop4): Ignoring removed nobh option [ 685.726585][ T9311] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 685.979025][ T9315] EXT4-fs (loop1): Ignoring removed nobh option [ 685.994744][ T9315] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 686.786881][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.861132][ T9311] EXT4-fs (loop4): 1 truncate cleaned up [ 686.895252][ T9315] EXT4-fs (loop1): 1 truncate cleaned up [ 687.476503][ T9315] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 687.508878][ T9311] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 689.172594][ T9336] loop4: detected capacity change from 0 to 131072 [ 689.865773][ T9336] F2FS-fs (loop4): invalid crc value [ 689.979428][ T9336] F2FS-fs (loop4): Found nat_bits in checkpoint [ 691.018923][ T9336] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 691.061830][ T9357] netlink: 'syz.0.1183': attribute type 1 has an invalid length. [ 691.142129][ T9336] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 692.261539][ T9364] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 697.997865][ T9415] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 698.005209][ T9415] PKCS7: Only support pkcs7_signedData type [ 700.239602][ T9432] loop4: detected capacity change from 0 to 512 [ 700.260584][ T9431] loop1: detected capacity change from 0 to 512 [ 700.286153][ T9431] EXT4-fs (loop1): Ignoring removed nobh option [ 700.319264][ T9432] EXT4-fs (loop4): Ignoring removed nobh option [ 700.326014][ T9431] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 700.348447][ T9432] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 700.405190][ T9431] EXT4-fs (loop1): 1 truncate cleaned up [ 700.411014][ T9431] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 700.440348][ T9432] EXT4-fs (loop4): 1 truncate cleaned up [ 700.454706][ T9432] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 702.441842][ T9461] loop4: detected capacity change from 0 to 2048 [ 703.168638][ T9461] UDF-fs: bad mount option "wg2" or missing value [ 704.191126][ T9470] using random self ethernet address [ 704.273279][ T9470] using random host ethernet address [ 705.837814][ T9481] device bridge1 entered promiscuous mode [ 705.878116][ T9481] team0: Port device bridge1 added [ 706.548865][ T9483] ubi0: attaching mtd0 [ 706.555699][ T9483] ubi0: scanning is finished [ 706.560413][ T9483] ubi0: empty MTD device detected [ 706.676717][ T9483] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 706.684499][ T9483] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 706.691795][ T9483] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 706.698902][ T9483] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 706.706349][ T9483] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 706.713344][ T9483] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 706.721461][ T9483] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 894772540 [ 706.731712][ T9483] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 706.751723][ T9487] ubi0: background thread "ubi_bgt0d" started, PID 9487 [ 708.994726][ T9496] loop1: detected capacity change from 0 to 512 [ 709.044950][ T9496] EXT4-fs (loop1): Ignoring removed nobh option [ 709.062737][ T9496] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 709.148819][ T9496] EXT4-fs (loop1): 1 truncate cleaned up [ 709.154648][ T9496] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 713.200852][ T9533] loop4: detected capacity change from 0 to 4096 [ 721.284320][ T9603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 721.565447][ T9607] loop1: detected capacity change from 0 to 512 [ 721.647842][ T9607] EXT4-fs (loop1): Ignoring removed nobh option [ 721.730843][ T9607] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 721.849441][ T9607] EXT4-fs (loop1): 1 truncate cleaned up [ 721.861880][ T9607] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 723.435077][ T9616] loop1: detected capacity change from 0 to 131072 [ 723.661844][ T9616] F2FS-fs (loop1): invalid crc value [ 723.896242][ T9616] F2FS-fs (loop1): Found nat_bits in checkpoint [ 723.941036][ T9616] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 723.954872][ T9616] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 724.329816][ T9631] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 728.782245][ T9660] loop4: detected capacity change from 0 to 2048 [ 728.841936][ T9660] UDF-fs: bad mount option "wg2" or missing value [ 731.697258][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 731.707293][ T9677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1262'. [ 731.716352][ T9677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1262'. [ 733.789111][ T9696] "syz.2.1268" (9696) uses obsolete ecb(arc4) skcipher [ 734.340640][ T9705] futex_wake_op: syz.4.1271 tries to shift op by 144; fix this program [ 736.542946][ T9713] loop1: detected capacity change from 0 to 4096 [ 736.609826][ T9719] loop4: detected capacity change from 0 to 512 [ 736.818434][ T9719] EXT4-fs (loop4): Ignoring removed nobh option [ 736.824816][ T9719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 737.110474][ T9719] EXT4-fs (loop4): 1 truncate cleaned up [ 737.116935][ T9719] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 738.023472][ T9732] loop1: detected capacity change from 0 to 4096 [ 738.320760][ T9718] smc: net device gretap0 applied user defined pnetid SYZ2 [ 738.353344][ T9715] netlink: 860 bytes leftover after parsing attributes in process `syz.5.1273'. [ 739.657126][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 739.830297][ T9722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 740.075705][ T9751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1279'. [ 741.045484][ T9770] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 741.056811][ T9770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 744.501566][ T9779] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551612) [ 744.663652][ T9779] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 745.486838][ T4658] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 746.303041][ T4658] usb 2-1: Using ep0 maxpacket: 16 [ 746.446330][ T26] audit: type=1326 audit(1785812141.652:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.1288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 746.651396][ T9782] netlink: 'syz.1.1288': attribute type 10 has an invalid length. [ 746.736251][ T9782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1288'. [ 746.756036][ T9782] device dummy0 entered promiscuous mode [ 746.762882][ T26] audit: type=1326 audit(1785812141.652:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.1288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 746.788318][ T26] audit: type=1326 audit(1785812141.652:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.1288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 746.814248][ T26] audit: type=1326 audit(1785812141.855:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.1288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 746.838746][ T26] audit: type=1326 audit(1785812141.855:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.1288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 746.866266][ T26] audit: type=1326 audit(1785812141.901:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.1288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 746.912036][ T26] audit: type=1326 audit(1785812141.901:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.1288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 746.952262][ T26] audit: type=1326 audit(1785812141.901:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.1288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 747.014715][ T26] audit: type=1326 audit(1785812141.919:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.1288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 747.125660][ T4658] usb 2-1: unable to get BOS descriptor or descriptor too short [ 747.275135][ T4658] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 747.282879][ T4658] usb 2-1: can't read configurations, error -71 [ 747.290652][ T26] audit: type=1326 audit(1785812141.919:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.1288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af30a1019 code=0x7ffc0000 [ 747.782870][ T9805] loop4: detected capacity change from 0 to 2048 [ 748.404147][ T9805] UDF-fs: bad mount option "wg2" or missing value [ 749.163929][ T9811] loop1: detected capacity change from 0 to 4096 [ 749.706448][ T9814] loop4: detected capacity change from 0 to 4096 [ 749.912192][ T9811] ntfs: volume version 3.1. [ 752.171628][ T9844] loop1: detected capacity change from 0 to 512 [ 752.932986][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.144449][ T9844] EXT4-fs (loop1): Ignoring removed nobh option [ 753.151482][ T9844] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 753.265980][ T9844] EXT4-fs (loop1): 1 truncate cleaned up [ 753.291018][ T9844] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 753.857505][ T9860] fuse: Unknown parameter '0x0000000000000003' [ 760.449070][ T9912] loop1: detected capacity change from 0 to 512 [ 760.651335][ T9912] EXT4-fs (loop1): Ignoring removed nobh option [ 760.732133][ T9912] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 761.584247][ T9912] EXT4-fs (loop1): 1 truncate cleaned up [ 761.590052][ T9912] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 761.715992][ T9923] loop4: detected capacity change from 0 to 4096 [ 763.046808][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 763.046826][ T26] audit: type=1800 audit(1785812156.968:74): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1327" name="idVendor" dev="configfs" ino=49196 res=0 errno=0 [ 763.178460][ T26] audit: type=1800 audit(1785812157.005:75): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1327" name="serialnumber" dev="configfs" ino=49199 res=0 errno=0 [ 763.205069][ T26] audit: type=1800 audit(1785812157.005:76): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1327" name="manufacturer" dev="configfs" ino=49200 res=0 errno=0 [ 763.266282][ T26] audit: type=1800 audit(1785812157.005:77): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1327" name="product" dev="configfs" ino=49201 res=0 errno=0 [ 763.309544][ T9939] loop4: detected capacity change from 0 to 4096 [ 764.598146][ T26] audit: type=1800 audit(1785812157.005:78): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1327" name="configuration" dev="configfs" ino=49203 res=0 errno=0 [ 764.618965][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.727404][ T9952] serio: Serial port ptm0 [ 766.544928][ T9958] hub 8-0:1.0: USB hub found [ 766.562296][ T9958] hub 8-0:1.0: 1 port detected [ 767.238791][ T9960] fuse: Unknown parameter '0x0000000000000003' [ 767.251524][ T9957] overlayfs: missing 'lowerdir' [ 767.687535][ T9977] loop1: detected capacity change from 0 to 4096 [ 770.187802][T10006] loop1: detected capacity change from 0 to 4096 [ 774.375462][T10040] sctp: [Deprecated]: syz.0.1354 (pid 10040) Use of int in max_burst socket option deprecated. [ 774.375462][T10040] Use struct sctp_assoc_value instead [ 775.264673][T10041] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1354'. [ 775.990812][T10051] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1356'. [ 778.979553][T10059] loop1: detected capacity change from 0 to 4096 [ 781.571530][T10091] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1369'. [ 782.159659][ T1318] block nbd0: Attempted send on invalid socket [ 782.166053][ T1318] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 784.295714][T10119] loop4: detected capacity change from 0 to 32768 [ 785.988624][T10119] XFS (loop4): Mounting V5 Filesystem [ 786.145432][T10119] XFS (loop4): Ending clean mount [ 786.174369][T10119] XFS (loop4): Quotacheck needed: Please wait. [ 786.275227][T10145] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 788.444817][T10119] XFS (loop4): Quotacheck: Done. [ 788.530815][ T4188] XFS (loop4): Unmounting Filesystem [ 790.444345][T10169] loop1: detected capacity change from 0 to 4096 [ 791.531248][T10179] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 791.808847][T10184] loop4: detected capacity change from 0 to 512 [ 793.415907][T10195] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 794.109508][T10192] [ 794.111896][T10192] ====================================================== [ 794.118981][T10192] WARNING: possible circular locking dependency detected [ 794.126031][T10192] syzkaller #0 Not tainted [ 794.130466][T10192] ------------------------------------------------------ [ 794.137505][T10192] syz.5.1393/10192 is trying to acquire lock: [ 794.143596][T10192] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 794.154973][T10192] [ 794.154973][T10192] but task is already holding lock: [ 794.162473][T10192] ffff888053504b70 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0 [ 794.173295][T10192] [ 794.173295][T10192] which lock already depends on the new lock. [ 794.173295][T10192] [ 794.183722][T10192] [ 794.183722][T10192] the existing dependency chain (in reverse order) is: [ 794.192759][T10192] [ 794.192759][T10192] -> #2 (&sb->s_type->i_mutex_key#25){++++}-{3:3}: [ 794.201487][T10192] down_write+0x38/0x60 [ 794.206324][T10192] configfs_depend_item_unlocked+0x14f/0x430 [ 794.212851][T10192] usbg_make_tpg+0x1f3/0x580 [ 794.218050][T10192] target_fabric_make_tpg+0xa0/0x6d0 [ 794.224009][T10192] configfs_mkdir+0x511/0x9e0 [ 794.229236][T10192] vfs_mkdir+0x386/0x570 [ 794.234038][T10192] do_mkdirat+0x1dd/0x5c0 [ 794.238911][T10192] __x64_sys_mkdir+0x6a/0x80 [ 794.244042][T10192] do_syscall_64+0x4c/0xa0 [ 794.249029][T10192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 794.255986][T10192] [ 794.255986][T10192] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 794.263657][T10192] __mutex_lock_common+0x1e5/0x2400 [ 794.269499][T10192] mutex_lock_nested+0x17/0x20 [ 794.274806][T10192] tcm_set_name+0x26/0x90 [ 794.279697][T10192] function_make+0x195/0x350 [ 794.284908][T10192] configfs_mkdir+0x511/0x9e0 [ 794.290223][T10192] vfs_mkdir+0x386/0x570 [ 794.295015][T10192] do_mkdirat+0x1dd/0x5c0 [ 794.299885][T10192] __x64_sys_mkdir+0x6a/0x80 [ 794.305012][T10192] do_syscall_64+0x4c/0xa0 [ 794.310006][T10192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 794.316583][T10192] [ 794.316583][T10192] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 794.324853][T10192] __lock_acquire+0x2c66/0x7b50 [ 794.330341][T10192] lock_acquire+0x19e/0x400 [ 794.335383][T10192] __mutex_lock_common+0x1e5/0x2400 [ 794.341121][T10192] mutex_lock_nested+0x17/0x20 [ 794.346422][T10192] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 794.353202][T10192] configfs_symlink+0x5a4/0x13b0 [ 794.358672][T10192] vfs_symlink+0x245/0x3d0 [ 794.363636][T10192] do_symlinkat+0x1ab/0x6b0 [ 794.368699][T10192] __x64_sys_symlink+0x7a/0x90 [ 794.374002][T10192] do_syscall_64+0x4c/0xa0 [ 794.378961][T10192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 794.385394][T10192] [ 794.385394][T10192] other info that might help us debug this: [ 794.385394][T10192] [ 794.395642][T10192] Chain exists of: [ 794.395642][T10192] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#25 [ 794.395642][T10192] [ 794.410348][T10192] Possible unsafe locking scenario: [ 794.410348][T10192] [ 794.417811][T10192] CPU0 CPU1 [ 794.423183][T10192] ---- ---- [ 794.428554][T10192] lock(&sb->s_type->i_mutex_key#25); [ 794.434034][T10192] lock(&opts->dep_lock); [ 794.440987][T10192] lock(&sb->s_type->i_mutex_key#25); [ 794.448981][T10192] lock(gadget_subsys.su_mutex); [ 794.454038][T10192] [ 794.454038][T10192] *** DEADLOCK *** [ 794.454038][T10192] [ 794.462187][T10192] 2 locks held by syz.5.1393/10192: [ 794.467824][T10192] #0: ffff888146162460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 794.477200][T10192] #1: ffff888053504b70 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0 [ 794.488202][T10192] [ 794.488202][T10192] stack backtrace: [ 794.494102][T10192] CPU: 0 PID: 10192 Comm: syz.5.1393 Not tainted syzkaller #0 [ 794.501575][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.511640][T10192] Call Trace: [ 794.514938][T10192] [ 794.517986][T10192] dump_stack_lvl+0x188/0x250 [ 794.522756][T10192] ? load_image+0x410/0x410 [ 794.527329][T10192] ? show_regs_print_info+0x20/0x20 [ 794.532556][T10192] ? print_circular_bug+0x12b/0x1a0 [ 794.537774][T10192] check_noncircular+0x296/0x330 [ 794.542731][T10192] ? add_chain_block+0x9b0/0x9b0 [ 794.547678][T10192] ? lockdep_lock+0xf1/0x1f0 [ 794.552289][T10192] ? mark_lock+0x94/0x320 [ 794.556631][T10192] ? _find_first_zero_bit+0xd1/0xf0 [ 794.561940][T10192] __lock_acquire+0x2c66/0x7b50 [ 794.566837][T10192] ? stack_trace_save+0xf0/0xf0 [ 794.571790][T10192] ? arch_stack_walk+0xf2/0x140 [ 794.576748][T10192] ? verify_lock_unused+0x140/0x140 [ 794.582005][T10192] ? kmem_cache_free+0x8f/0x210 [ 794.586961][T10192] ? stack_trace_save+0xa6/0xf0 [ 794.591824][T10192] ? mark_lock+0x94/0x320 [ 794.596173][T10192] lock_acquire+0x19e/0x400 [ 794.600699][T10192] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 794.607050][T10192] ? __might_sleep+0xf0/0xf0 [ 794.611732][T10192] ? read_lock_is_recursive+0x10/0x10 [ 794.617132][T10192] ? verify_lock_unused+0x140/0x140 [ 794.622436][T10192] __mutex_lock_common+0x1e5/0x2400 [ 794.627657][T10192] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 794.634033][T10192] ? lock_chain_count+0x20/0x20 [ 794.638990][T10192] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 794.645517][T10192] ? mutex_lock_io_nested+0x60/0x60 [ 794.650739][T10192] ? rwsem_write_trylock+0x135/0x1c0 [ 794.656048][T10192] ? clear_nonspinnable+0x60/0x60 [ 794.661092][T10192] mutex_lock_nested+0x17/0x20 [ 794.665882][T10192] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 794.672056][T10192] ? inode_permission+0xef/0x480 [ 794.677013][T10192] ? bpf_lsm_inode_permission+0x5/0x10 [ 794.682572][T10192] ? security_inode_permission+0xac/0xf0 [ 794.688285][T10192] configfs_symlink+0x5a4/0x13b0 [ 794.693251][T10192] ? end_current_label_crit_section+0x14b/0x170 [ 794.699742][T10192] ? common_perm+0x15d/0x1b0 [ 794.704440][T10192] ? from_kgid+0x14f/0x6a0 [ 794.708930][T10192] ? apparmor_path_symlink+0x1ac/0x230 [ 794.714407][T10192] ? lookup_one_qstr_excl+0x11c/0x240 [ 794.719799][T10192] ? detach_groups+0x370/0x370 [ 794.724608][T10192] ? inode_permission+0xef/0x480 [ 794.729651][T10192] ? bpf_lsm_inode_symlink+0x5/0x10 [ 794.734875][T10192] ? security_inode_symlink+0xb2/0x100 [ 794.740351][T10192] vfs_symlink+0x245/0x3d0 [ 794.744788][T10192] do_symlinkat+0x1ab/0x6b0 [ 794.749483][T10192] ? vfs_symlink+0x3d0/0x3d0 [ 794.754091][T10192] ? getname_flags+0x1f9/0x4f0 [ 794.758894][T10192] __x64_sys_symlink+0x7a/0x90 [ 794.763676][T10192] do_syscall_64+0x4c/0xa0 [ 794.768201][T10192] ? clear_bhb_loop+0x30/0x80 [ 794.772896][T10192] ? clear_bhb_loop+0x30/0x80 [ 794.777611][T10192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 794.783533][T10192] RIP: 0033:0x7f1e0dc30019 [ 794.788023][T10192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.807683][T10192] RSP: 002b:00007f1e0be88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 794.816171][T10192] RAX: ffffffffffffffda RBX: 00007f1e0deb7fa0 RCX: 00007f1e0dc30019 [ 794.824159][T10192] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000200000000800 [ 794.832150][T10192] RBP: 00007f1e0dcc700c R08: 0000000000000000 R09: 0000000000000000 [ 794.840164][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.848150][T10192] R13: 00007f1e0deb8038 R14: 00007f1e0deb7fa0 R15: 00007ffc71fd4718 [ 794.856164][T10192] [ 795.366001][T10204] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.