last executing test programs: 8m5.369279271s ago: executing program 3 (id=463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 8m3.348106434s ago: executing program 3 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 8m2.143090571s ago: executing program 3 (id=470): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6) 8m1.598710995s ago: executing program 3 (id=474): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 8m0.772850761s ago: executing program 3 (id=476): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x60}}, 0x0) 8m0.298902709s ago: executing program 3 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r3, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 7m59.792054231s ago: executing program 32 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r3, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 7m45.967873175s ago: executing program 1 (id=506): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000005680)="$eJzs3X1oVecdB/BzTaKhFpPV1alY6RSqdGVTW5DNUeNLZjvfkhq0NTXGaWudrViZW9qJCwliOi2NSh2jrjhkRVtWApO+iFPXoUM2psikszLnim44ahZ1gh2Tjdx7n+u955rk1nVNXz6fknvuc3/nec5zD+eP+731OTcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKIoSm289OevImvqxM8fNeeA/j7y669ljk5aNPnL25/N3TCuqWv1U3fSGlrq5UzqaKxfPP3p1/aEoSqT6pfsvnHzfA4/OWTizNAxYX53alpd3ecjk4+lUo2/Oi539cv8WRVFUEhugKL2tLMpqJ+IHiFblD9it6k1X3lxWM/XtxssXJg6vHbU3/63TqbS3J9Bb0tfVmWvXUkXysU9sj0w769JL5Fyiqf7xC+4jeRMAwAcypiq5yXwcTX/EzbQb4/VYuyLWbo21wyeE1uzGjUiN27ered4er/fSPCtSUaFfl/OM1dPnP9OuivePtWNR4wPMM3fXdKQp7WqeK2P13ponAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMfJu5PmXZgy/cXLfSfV7hiy4a+z+mxcv+9UbfVLd+2sPrHujf61ddMbWurmTulorlw8/+jV9YeiqDzZL5Hqnnhj08Kn+tbNfHDzQ2srZ0w49FpRetywLc7aOfpjePLVsij6VlblTBj23IAoqsotJJvRj/MLy5JP7g8FAAAAPk2GJB/7ZNqpOFiS004k02Qi+V+QCovVm668uaxm6tuNly9MHF47au+Nj1fVxXgV1x0v0y6/9pfICsYh/sbHu1YPu67KG6d78RHjef7YtHdmnBlRf27rlfNNTWsv7h534K73tkw93/zNd/av6Hf/cyPy8n959/k/nDn5HwAAgP+F/B8fp3s95f+3ZlfOaPvDvT/6/biv/31o9cZ3m/YmVg09vmLkd+ZNPPXa869fzcv/t+ccMi//hxmH/N8nurH8DwAAAB9n/+/8X5E3Tvd6yv/PHDwxdM+ogzWN0furyv6VOLhk36nnvtZ8ec29216oPDvrsf55+X9MYfm/OHva4cXfhQkvL4uiMYWfVAAAACBH+P/u175aCHk99c1BPK+/PP7FnRdLZxYvKf7yrl3bnl5TevcdA5fWLn5l9EtDnjg8/9nVefm/orD8X/LRvF0AAACgAIs23L100D/mjd+2pH32rVePVg66Z/vRO25un7G6Zv2kFbec/kpe/q8qLP/36523AwAAAFzHsfmPLFrxt9071v16xOQxpe9PGTn7e3WX9hwe++9RNR0vjP/GW3n5v76w/H9Tepte+ZDqdCj8K4QtZVFU2vlkZarwm6h1YqYAAAAAfEhCTm/44eylDZuf2fbPizV3vtJ8y8utf374C+V3bpz2s+9vOT63adO+vPy/svv7/4c7HYT1/zn3/8tb/59VSN31b4IbAwAAAPBZlL+eP9weP/XLBV39/n6h6/8fe3r4o1u/+5Olv7itfHfitpNPfumJ5ocrfzpwYHvL6JHNRYNL8vJ/Y2H5vyh7+2H+/h8AAADcgE/a7/89lDdO93q6//+0BesOL2gf+/kDLe3Pjxn02znFDy7Y+af2m/c/Oax9/7nzLcPy8n9rYfk/bPtnv70D4fw0l0XR4M4n6bsJ7grTXR4rtJVkFVInPtZjTuiRLrT1yyokrYz1GFcWRV/sfNIYK3wuFFpjhY4B6cL2WOFIKKSvh0zh1VjhQLjStg5ITzdeeD0U0gss2sIKiv6ZJRGxHpe66tFZuG6Pk5mDAwAAfKaE8JzOsiW5zSgeZdsSPe1wU0879Olph6KediiO7RDfsavXo/rcQnj9L6dXv/f48l/WTmi4Z+7kPcOOP37f2bE/+PbaX83uv6XxxKUpTXn5f3th+T+cir6pTVfr/6Ow/j/9u4aZ9f/1oVAeK7SFQlX8jgFV4RipsLshHKO8Kt2jY3CmAAAAAJ9q4XuBol6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBf9u49Sq6qThTw7nd30uk0OI6AykSdJEZMdydBlICLPERUjHQYZFTGPEg65NEkIQ8kwYWBsBwUdQLBxDvDXQS4WYCixDgEERgSlcC9RHnNMAzyFLiBUSFc3nCZ3NV9aleqzulKV0wa0tzv+6NrV/3289Sja59zah8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/w+BDv7LgilOeuWnkC3936imNC59+bsxlB3/kiPqb5h48/PUtd8+6fcrxZ10w5eSJO1YeO+Mrd7/591tDaO8uV5EUr/j5RVOX1U6Z9KWLv3zOsZ8/auum2ly9uXgY2PWnMnfn/Njqk4NCuKEihOp0YGRjEqjJ3W+M9b2vMYQDwq5AvkTHgKREuuFwW0MI68KuQL6qGxtCaCwInHTvL2/9blfikoYQhoYQ6tJtPFyXtNGQDgyrTQID0oEF1UnglZ2JfODnlUkA9lp8M+Rf9BvaizM091yuxOuvZp917O2VHl5VTDSXzven8X3cqQK16Qfa9+ppy1RHn8i8PTZ7t/WDd1tmO6/ytBV+kcp9Q9m5K1QXKmd2zJq+tHNJfKQytLRUlaqpj57nh5//+ow9Sfeb12HsQPM+eR1W7dh+59mNn7pu9aD1r64ce+WWve3mQwWbtDDd1+pC7jXXb57HaJzPk37w9st8SxriS1cI4V9vqNv26hcuf/nTa7ZcPem8v13zzIjTW9veuO+F6yctWLXg+v/+i8z8v3n38//4co63lUW5Y6tvNCVz8/hIY0w815TMzQEAAKDf6A97Tac+NOvF4b/5xD9PvvHR7YOO/5tFqw/+de2Wdz34VOX4Z285ecT81zLz/yHlHf+Ph/wbC0e7OYRx3YmVg0M4qPvxJHBN7M6pg0P4QHeqvTgwPhXYHMLB3YkR+apSJepjiSGpwPamXGBcKrA1BtpTgfUxsCoVOD8GNqQCM2JgcyowIQbCnOJxfKQpN46yAw0xMC3ZiBviWQgvNMXWUtvqd/mqAAAA9pHc7LCm+G7BuQ57myFOLzc09JYhnoFdMkNdqob0DDY/rSpZQ3VvNVT2VkN+3Ct2P/xMzRW91Zw5DaOiOMPSb/7h/rFfXDW3euj22sNemnfczN8d8/41O1s++uPanT8cd9fahsz8v2338/+6HjpSkTn+H8Lk7r8xd2Uu0pmPT2svygAAAADshdETP/ZPl733l9fdcuLnfzv4jiOv2PjDqbVjv/XK0nt+uGLCudt+dEFm/j+uvPP/4z6RqoLMYVvcDTFvcAhtxYGk2qOygeSo98BcAAAAAPqD/PH4/LHwObnb5BTt9Hw6m799D/PHA//jesw//pC/fmzDf8z99k8nTjli7TmPzd9+1+EfrWn7m+cf/tIF86Z947JvZub/7eWd/z+g+DbpxNbYi9WDQ6gvCNwee9kV6DYkBh47pjiQG//WuAEujFXlTkzIV3VhLDEtBtpSgXWlStydL3FQcSD3ZOUbX5kfx5xciYIAAAAAvOXi7oB4XD6e/3/fgg/PPmpb3aG3rKr46V/uuKZz4vVtNc+M/VXT61/4whNff63xzMz8f9qenf/fPQ/OnN7fOTCE1uoQqtI/DNg2IFkYMAYaK3KJWwYkdVWlqzp3QAhHdw0sXdXjufX/q9NrDN7bkFQVAwd98Ornh3UlrmwIobUwcP8pl3+sK7EkFcg3/sWGEP6qa7Tpxq+vTxqvSTe+tj6EQwsC+apOrQ+hq7HadFW/rMtdxyBd1XV1IbyrIJCv6oi6EJYFAPqp+K90ZuGDi5ctnze9s7NjUR8m4j78hjBrTmdHy4wFnTPrSvRpZqrPRcsYnZsdU8nlkFLiEkWr7lk7tJx0/neCbYV9ye3Hz5w4mLsfvwvVdI9zdE3R3THpIX/4Q9kmQsE3qbdryAMKK9n1JGbqj/lrw8BQv3Rxx6KWs6YvWbJoVPK33Oyjk79xUMm2GpXeVgN66tt+8PIYXlhJ65LTF7YuXrZ85JzTp5/WcVrH/NFtYw5vO3LMqCM+3to1qrbkby9DHd5T1amh7rz8rR/qIdUFlbwVnxoSEhL9LfE/zjj95DuOnPOpE+5d+oGj1oybcPaNh89qXXPb9ZPWT3ts8I9GXZKZ/y/c/fw/furET/7c+gyljv83x8P8yeO7DvNPi4F15R7/by51ND9/YsCQVGBFDKxwmB8AAIB3hrg7Mu52jHutH6q74qrDL3329C2jJn7tzOaRv57wwXEHfvqML99x3H/+3/d/7xN//N+Z+f+K8n7/v4/W/88vXf+5Usv8j4gl2kqt/59e5j+//v+KUuv/p5f5z6//v+5tWP9/aT6Q2iQvWP8fAAB4J3jr1v/vdXn/9AUCMhl6Xd4/fYGATIZel/Ev9wIBe7z+/5PHXPv0B97/TPvPrr/j8ekXn3HOx9fUD9uxrL7l9m//+y9u/MqpgzLz/1Xlzf8t3A8AAAD7j2uPffLfjr3q+7ec3Pjsj2sWzT7/5vNuahz2WsWsjfMnDJh8zez/ysz/15U3/3/r1/8Lpc7/H1Iq0F5qYUDr/wEAANBPlVr/b/tP6i+9sHHHuk0bXv/ske9+/Tt3fOdrry34wQ8+89H3zV48adyEmzPz/w3lzf/jaReVRbljb95oSta0C+k17Z5ryv9kAAAAAPqHytDSUlNm3qKVUcf/+W3GpUB3ly504nE//WT70HffPufaKa3/cN99Ha2H3NnUsH7+zi+d8PTyp05YeWVm/r+5vPl/0e8yqnZsv/Psxk9d98bqQetfXTn2yi27jv8DAAAAfafc/RIAAAAAAAAAAAAAAMDb770Lxoy/t+Xxd1+0evn5zdddcfmbm1q3fPUfL6na/uHZf7hg7uiGzO//w+TucqV+/x+v+xd/X/AXRbljq72v/5e7f9LxP1nWvWThtqYQPlQYmHfevANC7tr8wwsDt351xHu6EuelS9z8yISnuhJT04HPjDzw5a7E0anAtLhI4sHpQLyq4suDUoG4vOJ96UDcHhvSgdpc4FuDknFUpLfVM43JtqpIb6sHG0MYXBDIb6sbGpM2KtIDvCQVyA/wjHQgDvALuUBlulc/GZj0KgYaY9HLBia9AgBgvxW/BdaEWXM6O9riV/h4e0h18W1UtGTZudlqq8psPi5NtuqetUPLSVelv4vuutZ4TajrGsKozNfVwiwV3aPcN7X0sun+osSQe1vtra82XW3pETUkI2qZsaBzZk2vAx/Te5bR1b1mGZWZ7BRmqezepGXUUkZfyhhRmdumjC7H+5WhpaUqlWtsDDaHIr29Isr9vX5Pa/6VekV0+cSXb/rD41ubPn3Ye9pPO/+eyvff+6sDr3jxQ688dN1hm/7bR9b++urM/L+5vPl/XeG4Xs5dDGBFvLLeUYNDmFbmiAAAAOCdb/b8Ry6+4FcXbX+sfdhTC1ovuvWBZT9YXt10zfnHPnjzmS+d8r2pexu/9skTfvvAb3+0cdj4WxaOGfDEWVdedtw9d92xetvxb95w2P8ZOePRzPx/SHnz/7hjLHcoONnbsTle/3/l4BC6L63fnASuicM9dXAIH+hOtccSyQX1PxdLtCWBa+IOkxGxxLT24qrqY2BDKrC9KRfYnApsjYHcXoqrQ25XzkVNIXysOzW5uMTCWKI5FTghBoakAi0x0JYKDIqBcanAHwflAu2pwJ0xEOYUb6ufDcptKwAAgD2Rm2fVFN8N6XnehureMlT0lmFAbxkqe8tQ11uGUqOI9zfGDDWFx+NzGeJDNelaG1K1ZDLEi+Hvcb8yGcLdxTnTBTNN588kaS7OGTN8+x8f/OT0lx6+YemP3hh+4rmf/PH3tm16be4Tp40cPO3VsfNGfPuPmfl/W3nz/wHFt0nrW+P8f9f1/5LA7bF7q+Op40Ni4LFjigO5HQNb42T3wnxV7bkSuUn7hbHEuBgYkgosjIFxqcC0ybnAuvcUB3Iz7XzjK/ONz8mVKAgAAADAWy7uIIi7aeL8/9K/mz353O+0dqyc9dWnps0Y+ukDL33fpcfcNOk3c9cedOCpd14zLzP/H1fe/D+2N7CwsfNjb54cFMINFbt6kw+MbEwCcT9GY/x5/PsaQzigYAdHvkTHgKREbarhcFtD8gv12nRVNzYkawzE+yfd+8tbv9uVuKQhhKEFe1/ybTxcl7TRkA4Mq00CA9KBBdVJIO75yQd+XpkEYK/l9wrGF1TuVJe85p7LlXj9vVOuCZoeXmYfaA/5evrNVV+pSz+Q26eat2dPW6Y6+kTm7bHZu60/vtuavdsKv0jlvqHs3BWqC5UzO2ZNX9q5JD5S+EvWjD56nnv6Jevu0vvgdbjiz+9t7+rSHWhLfXy09Vyu59dhRayuasf2O89u/NR1qwetf3Xl2Cu3lN2NEuIm/cuvjR/2UMHm7Wt1Ifea63efJ+0+T/rjv4EhnrYQwqbnvlF/5okn/tsB/7Rw0/cf/a/mV7/1zTs2blzW1HJz1ZpJF3722sz8v728+X916rbba3FjLh4cwocLNu62uPknDk4+BwsCyafku7KB5JD7E00lPzkBAABgX8vv7sjvL5iTu01OCE/Pk7P52/cwf9xfMa7H/OX2+4TP3/0vf7vid6u/uGX9AxW/+f3GK04YM3XhYwvvu3jiP/+v31/16I2Z+f+03c//61PddPzf8X/6iOP/Pdrfd0XXpx9YsVe7ojPV0Scc/+/R/v5uc/y/R47/O/7fE8f/e+H4f4/296ct8y1poS9dIYSnn/2XC//hgmUnPfTqu4+4+IE/PTjx7IobOv9j+kPPdLzx0Vdm3XpoZv6/sLz5v/X/el60L7/+37RS6/8tLLX+3wrr/wEAAH2qxEJz6XleZvW+TIb06n2ZDL0uENjrEoPW/9vj9f82nFz9+1/P/ffvf+6+pw+vnHr/f46eP++m4UcdM+KqNU+t+NcX2lsy8/8V5c3/48thYGHr/WX9vyGTS1S1KgYWWhgQAACA/VGpHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vcaceedL33lh+2G3Lrlt5cnj/3r1qV//7NEH/+zKnZ/YHL7x4vKX7ply/FkXTDl54o6Vx874yt1v/v3WEOZ0l6tIilf8/KKpy2qnTPrSxV8+59jPH7V1U12u3prc7XuLcsdW32gKYV3BI40x8VxT151dgZOO/8my6q7EtqYQPlQYmHfevAO6EuubQhheGLj1qyPe05U4L13i5kcmPNWVmJoOfGbkgS93JY7OBSrS3b10UNLdinR3vzsohMEFgXx35w4qrirfxnG5QGW6jasakzZioDEW/UFj0kYMdMYSc+pDaK0OoSpd1f+sS6qqSlf1i7qkqqp0VefUhXB0CKE6XdUjtUlV1emR31WbVBUDB33w6ueHdSXW1YbQWhi4/5TLP9aVOCMVyDd+Ym0If9X1kkk3vrEmabwm3fglNSEcGkKoTZd4sTopUZsu8Xh1CO8qCOQbn10dwrLAO0L88JlZ+ODiZcvnTe/s7FjUh4naXFsNYdaczo6WGQs6Z9al+lRKRUF657nZeGWZY3/4+a/P6Lpddc/aoeWkq3Plarq7PLqm6O6YfdX7ij7qfezXgMJKdj0fmfpj/towMNQvXdyxqOWs6UuWLBqV/C03++jkb1UummyrUftqW5Xrz91WwwsraV1y+sLWxcuWj5xz+vTTOk7rmD+6bczhbUeOGXXEx1u7RtWW/N0XQ708G6/q46EeUl1QyVvxASAhIdHfEpVFn25t+/u/7MwX/V0drQl13R/QmWlFYZaK7lHui0GP3318Xw46MyXJjGhUZuKQyTK69yxjMpOJXVkakizd3+syk8PCmiq7N2m8XxlaWkr+p2suvlu4+f7Uw+YtV9x05aYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAAP//CAsM0g==") open$dir(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) link(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x3000}) open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000002480)={{r1}, 0x0, 0x0, @unused, @subvolid=0x3}) r2 = open$dir(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000000)={0x50d000, 0x0, '\x00', 0x1, 0x0}) 7m44.340362126s ago: executing program 1 (id=511): creat(&(0x7f0000000300)='./file0\x00', 0x28) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x161) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0xc0842, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r1], 0x14}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800010000000009000000b7080000000000007baa00fe000000"], 0x0, 0x9}, 0x94) 7m40.703507109s ago: executing program 1 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x1) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) 7m38.242598407s ago: executing program 1 (id=527): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier}, {@nogrpid}, {@nobarrier}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x501, &(0x7f0000001240)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) 7m37.448592921s ago: executing program 1 (id=529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x11}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 7m36.944998372s ago: executing program 1 (id=530): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0x4e, 0x0) 7m36.285544615s ago: executing program 33 (id=530): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0x4e, 0x0) 6m59.050801637s ago: executing program 5 (id=642): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x1) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6m57.470391865s ago: executing program 5 (id=647): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 6m56.974656045s ago: executing program 5 (id=650): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000300000018180000", @ANYRES32, @ANYBLOB="0000000000852000000200000068599f93f0ffffff18ea000600000000000000000d07000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m56.29086872s ago: executing program 5 (id=652): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x14) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x101101, 0x13b) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x80000000000, 0x8005, 0x0, 0x0, 0x11, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0) 6m52.357266737s ago: executing program 5 (id=670): recvmsg(0xffffffffffffffff, 0x0, 0xd5fd0b91d26aad26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) 6m50.616078788s ago: executing program 5 (id=667): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6m49.658974844s ago: executing program 34 (id=667): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 11.730970965s ago: executing program 2 (id=1938): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 10.2998529s ago: executing program 2 (id=1949): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 9.997268784s ago: executing program 0 (id=1943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={0x0, 0x2cc}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f00000000c0)) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 6.920026482s ago: executing program 6 (id=1946): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 6.720284779s ago: executing program 0 (id=1948): mq_open(0x0, 0x40, 0x110, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000180)={[{@noquota}, {@acl}]}, 0x1, 0x7c1, &(0x7f0000000600)="$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") 5.538680194s ago: executing program 6 (id=1950): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 5.538513834s ago: executing program 2 (id=1951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x10, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) 4.659870274s ago: executing program 6 (id=1952): setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x8, 0x207, 0x1ffd, 0x2}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.544167203s ago: executing program 4 (id=1953): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x0, 0x9, 0x200, 0x3d, 0x3, 0xccf9, &(0x7f00000000c0)="afbbce"}) 3.092206871s ago: executing program 4 (id=1954): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151d"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.055636994s ago: executing program 6 (id=1955): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x2) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xfffffffd, 0x2) r1 = socket(0x2, 0xa, 0x0) getpeername$inet6(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x36, 0x0, 0x0) 2.814755093s ago: executing program 4 (id=1956): add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) setresgid(0x0, 0x0, 0xee01) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x1, 0x3}) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.655757516s ago: executing program 4 (id=1957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video4linux(&(0x7f0000000ec0), 0xb0, 0x2100) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) 2.594733261s ago: executing program 0 (id=1958): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 2.470215521s ago: executing program 0 (id=1960): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0xa, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) 2.469947011s ago: executing program 2 (id=1961): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 1.498557349s ago: executing program 0 (id=1962): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 1.4983921s ago: executing program 6 (id=1963): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.49827652s ago: executing program 4 (id=1964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc, 0x1}, &(0x7f00000007c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x6000, @fd_index, 0x7, 0x0, 0x0, 0x1e, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.444854704s ago: executing program 2 (id=1965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000062c0)={0x0, 0x0, &(0x7f0000006280)={&(0x7f0000006180)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 12.419349ms ago: executing program 0 (id=1966): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) r4 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r4, &(0x7f0000000100)="0919fd8c762ac2452bc4a5d49629b0de25edd9130a", 0x15) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588df"], 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[@ANYBLOB="002cfc6e39d8103f53fb9e060873d3fd301967bff9f467a35212694a1f8573587381db5da0ca22d70f405022b29b866fb2097025caa4691db023fd13f4095d70c25ee32a36476f58b6bcf903ee9ed414a2e73032509b4af56a34ce09d40eaac091975b3a5b620edb9a05e9d689ca0aff01000000000000a2e69ef77e18121654ebbf85f6bf4daecd7c1946753e024993c38013afeeb5755ee900"/164], 0x9e, 0x0) 11.826949ms ago: executing program 2 (id=1967): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) pipe(&(0x7f0000000480)) gettid() recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 11.260919ms ago: executing program 4 (id=1968): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x14}}, 0x4000054) 0s ago: executing program 6 (id=1969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c00000400000014000180080016000000030006000600800a0000080002"], 0x1034}}, 0x0) kernel console output (not intermixed with test programs): 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.370865][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 321.370875][ T28] audit: type=1800 audit(1755802040.233:127): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.735" name="bus" dev="ramfs" ino=19698 res=0 errno=0 [ 321.418116][ T5852] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 321.441234][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 321.475141][ T5852] usb 7-1: SerialNumber: syz [ 321.780574][ T8836] loop2: detected capacity change from 0 to 16 [ 321.798895][ T8836] erofs: (device loop2): mounted with root inode @ nid 36. [ 321.821388][ T5852] usb 7-1: 0:2 : does not exist [ 321.989865][ T5852] usb 7-1: USB disconnect, device number 3 [ 322.838499][ T8847] loop4: detected capacity change from 0 to 512 [ 323.026044][ T8851] loop2: detected capacity change from 0 to 2048 [ 323.058715][ T8851] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 323.143906][ T8851] UDF-fs: Scanning with blocksize 512 failed [ 323.196507][ T8851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.287000][ T5852] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 323.484139][ T5852] usb 1-1: Using ep0 maxpacket: 32 [ 323.522714][ T5852] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 323.582192][ T5852] usb 1-1: config 0 has no interface number 0 [ 323.726379][ T5852] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 323.797506][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.858137][ T5852] usb 1-1: Product: syz [ 323.878353][ T5852] usb 1-1: Manufacturer: syz [ 323.883123][ T5852] usb 1-1: SerialNumber: syz [ 323.914501][ T5852] usb 1-1: config 0 descriptor?? [ 323.930534][ T5852] smsc95xx v2.0.0 [ 324.349771][ T5852] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 324.713937][ T5852] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 325.390898][ T5870] IPVS: starting estimator thread 0... [ 325.493942][ T8870] IPVS: using max 23 ests per chain, 55200 per kthread [ 325.830614][ T8876] syzkaller0: create flow: hash 1075714433 index 1 [ 325.890574][ T7965] syzkaller0: tun_net_xmit 76 [ 325.927882][ T5853] syzkaller0: tun_net_xmit 76 [ 325.941233][ T7965] syzkaller0: tun_net_xmit 48 [ 326.234145][ T8877] syzkaller0: delete flow: hash 1075714433 index 1 [ 326.671522][ T5852] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 326.687561][ T5852] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 326.738360][ T5852] usb 1-1: USB disconnect, device number 6 [ 331.243974][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 332.416211][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.759'. [ 332.442707][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 332.589763][ T8899] loop2: detected capacity change from 0 to 8192 [ 332.620849][ T8911] loop6: detected capacity change from 0 to 128 [ 332.703383][ T8906] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 332.811365][ T8911] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.831709][ T8911] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.958492][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 333.677560][ T8910] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 333.749681][ T8910] bond0 (unregistering): Released all slaves [ 333.950195][ T8915] overlayfs: failed to get inode (-116) [ 333.995164][ T8915] overlayfs: failed to look up (bus) for ino (-116) [ 334.137901][ T8917] loop4: detected capacity change from 0 to 128 [ 334.197218][ T8917] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.294152][ T8917] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.507424][ T8596] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 335.631893][ T8930] netlink: zone id is out of range [ 335.637346][ T8930] netlink: zone id is out of range [ 335.642659][ T8930] netlink: zone id is out of range [ 335.649190][ T8930] netlink: zone id is out of range [ 335.655358][ T8930] netlink: zone id is out of range [ 335.662381][ T8930] netlink: zone id is out of range [ 335.672658][ T8930] netlink: zone id is out of range [ 335.690138][ T8930] netlink: zone id is out of range [ 335.706644][ T8930] netlink: zone id is out of range [ 335.722742][ T8930] netlink: zone id is out of range [ 336.064813][ T8938] netlink: 44 bytes leftover after parsing attributes in process `syz.2.768'. [ 336.509860][ T7695] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.357738][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.780'. [ 341.444368][ T967] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 341.671438][ T967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.729739][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 341.764835][ T967] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.914852][ T967] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 341.934935][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.960630][ T967] usb 1-1: Product: syz [ 341.978088][ T967] usb 1-1: Manufacturer: syz [ 342.006167][ T967] usb 1-1: SerialNumber: syz [ 342.021163][ T967] usb 1-1: config 0 descriptor?? [ 342.035731][ T8988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 342.049688][ T967] usb 1-1: ucan: probing device on interface #0 [ 342.056603][ T967] usb 1-1: ucan: invalid EP count (1) [ 342.062746][ T967] usb 1-1: ucan: probe failed; try to update the device firmware [ 343.322189][ T9006] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 343.350342][ T9006] CIFS mount error: No usable UNC path provided in device string! [ 343.350342][ T9006] [ 343.361698][ T9006] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 343.602040][ T6035] usb 1-1: USB disconnect, device number 7 [ 344.873570][ T9012] loop4: detected capacity change from 0 to 16 [ 344.911750][ T9012] erofs: (device loop4): mounted with root inode @ nid 36. [ 346.008884][ T9030] netlink: 'syz.4.790': attribute type 2 has an invalid length. [ 346.090797][ T9032] xt_recent: Unsupported userspace flags (000000de) [ 348.475962][ T9059] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 349.538551][ T9057] loop0: detected capacity change from 0 to 16 [ 349.548657][ T9057] erofs: (device loop0): mounted with root inode @ nid 36. [ 355.051890][ T9117] batadv_slave_0: entered promiscuous mode [ 355.712906][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 355.808063][ T9116] batadv_slave_0: left promiscuous mode [ 355.933084][ T9125] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 356.169625][ T9134] bridge1: entered allmulticast mode [ 356.196042][ T9138] loop4: detected capacity change from 0 to 64 [ 356.440144][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.829'. [ 356.619886][ T5852] IPVS: starting estimator thread 0... [ 356.728178][ T9150] IPVS: using max 21 ests per chain, 50400 per kthread [ 357.780130][ T9162] loop6: detected capacity change from 0 to 1024 [ 357.812047][ T9162] EXT4-fs: Ignoring removed orlov option [ 357.870244][ T9162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.136638][ T8596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.391348][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'. [ 360.091755][ T9192] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 360.456043][ T9199] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 360.810996][ T9199] bond0 (unregistering): Released all slaves [ 362.277677][ T9220] syzkaller0: create flow: hash 1075714433 index 1 [ 363.240748][ T6810] syzkaller0: tun_net_xmit 76 [ 363.265894][ T6810] syzkaller0: tun_net_xmit 48 [ 363.270925][ T5852] syzkaller0: tun_net_xmit 76 [ 363.286512][ T9220] syzkaller0: delete flow: hash 1075714433 index 1 [ 363.591445][ T9224] loop6: detected capacity change from 0 to 16 [ 363.615569][ T9224] erofs: (device loop6): mounted with root inode @ nid 36. [ 363.678782][ T9232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.729224][ T9234] netlink: 'syz.4.853': attribute type 10 has an invalid length. [ 366.745162][ T9234] macvlan0: entered promiscuous mode [ 366.770439][ T9234] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 367.806198][ T9244] overlayfs: failed to get inode (-116) [ 367.813279][ T9244] overlayfs: failed to look up (bus) for ino (-116) [ 368.385536][ T9235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.419117][ T9235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.440408][ T9235] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 368.458680][ T9235] bond0 (unregistering): Released all slaves [ 368.565619][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.860'. [ 368.731754][ T9257] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 369.294476][ T9261] ptrace attach of "./syz-executor exec"[9262] was attempted by "./syz-executor exec"[9261] [ 369.590130][ T9252] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 369.648450][ T9252] bond1 (unregistering): Released all slaves [ 369.933918][ T967] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 370.461418][ T9278] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 370.470328][ T9278] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 370.478314][ T9278] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 370.495237][ T9278] Error parsing options; rc = [-22] [ 370.535794][ T967] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 370.558337][ T967] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 370.579626][ T967] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 370.597420][ T967] usb 1-1: config 220 has no interface number 2 [ 370.607224][ T967] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 370.623295][ T967] usb 1-1: config 220 interface 0 has no altsetting 0 [ 370.631482][ T967] usb 1-1: config 220 interface 76 has no altsetting 0 [ 370.639520][ T967] usb 1-1: config 220 interface 1 has no altsetting 0 [ 370.650411][ T967] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 370.662272][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.672997][ T967] usb 1-1: Product: syz [ 370.682890][ T967] usb 1-1: Manufacturer: syz [ 370.690511][ T967] usb 1-1: SerialNumber: syz [ 370.922214][ T967] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 371.070226][ T967] usb 1-1: No valid video chain found. [ 371.079952][ T967] usb 1-1: selecting invalid altsetting 0 [ 371.163569][ T9290] IPVS: Error joining to the multicast group [ 371.737261][ T967] usb 1-1: selecting invalid altsetting 0 [ 371.753840][ T967] usbtest: probe of 1-1:220.1 failed with error -22 [ 371.770369][ T967] usb 1-1: USB disconnect, device number 8 [ 372.884188][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.878'. [ 372.917078][ T9308] loop4: detected capacity change from 0 to 512 [ 372.926809][ T9308] FAT-fs (loop4): bogus sectors per cluster 69 [ 372.933193][ T9308] FAT-fs (loop4): Can't find a valid FAT filesystem [ 373.017621][ T9303] bond1 (unregistering): Released all slaves [ 374.687700][ T9325] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 374.704372][ T9323] IPVS: stopping backup sync thread 9325 ... [ 374.923116][ T5799] Bluetooth: hci3: link tx timeout [ 374.939502][ T5799] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.970590][ T5799] Bluetooth: hci3: link tx timeout [ 374.992137][ T5799] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 375.016681][ T5799] Bluetooth: hci3: link tx timeout [ 375.030021][ T5799] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 375.475355][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.889'. [ 376.231182][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 376.330085][ T967] kernel write not supported for file [eventfd] (pid: 967 comm: kworker/0:3) [ 376.348736][ T9350] bond0 (unregistering): Released all slaves [ 376.580258][ T9359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.893'. [ 377.074159][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 379.230652][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.237344][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.395199][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.904'. [ 380.611818][ T9398] bond1 (unregistering): Released all slaves [ 381.686794][ T9414] net_ratelimit: 23 callbacks suppressed [ 381.686833][ T9414] dccp_close: ABORT with 32 bytes unread [ 382.518248][ T9435] loop2: detected capacity change from 0 to 512 [ 382.547160][ T9435] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 382.589816][ T9435] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #17: comm syz.2.913: iget: bad i_size value: -6917529027641081756 [ 382.611162][ T9435] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.913: couldn't read orphan inode 17 (err -117) [ 382.644344][ T9435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.739890][ T9438] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 382.824730][ T9435] Quota error (device loop2): write_blk: dquota write failed [ 382.864538][ T9435] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 382.889339][ T9442] Quota error (device loop2): do_check_range: Getting block 144 out of range 0-5 [ 382.925869][ T9435] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.913: Failed to acquire dquot type 0 [ 383.263272][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.094699][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 385.113117][ T9449] bond0 (unregistering): Released all slaves [ 385.440187][ T9465] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 386.916291][ T9482] kvm: pic: non byte read [ 386.934160][ T9482] kvm: pic: non byte read [ 386.952696][ T9482] kvm: pic: single mode not supported [ 386.952720][ T9482] kvm: pic: level sensitive irq not supported [ 386.965652][ T9482] kvm: pic: non byte read [ 387.000019][ T9482] kvm: pic: non byte read [ 387.023327][ T9482] kvm: pic: non byte read [ 387.042040][ T9482] kvm: pic: single mode not supported [ 387.042062][ T9482] kvm: pic: level sensitive irq not supported [ 387.063297][ T9482] kvm: pic: non byte read [ 387.109044][ T9482] kvm: pic: non byte read [ 387.148145][ T9482] kvm: pic: non byte read [ 387.152994][ T9482] kvm: pic: single mode not supported [ 387.153006][ T9482] kvm: pic: level sensitive irq not supported [ 387.176994][ T9482] kvm: pic: non byte read [ 387.984178][ T9505] loop0: detected capacity change from 0 to 512 [ 388.029490][ T9505] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 388.040167][ T9505] EXT4-fs warning (device loop0): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 388.091220][ T9505] EXT4-fs (loop0): mount failed [ 388.730989][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.932'. [ 388.806300][ T9512] bond1 (unregistering): Released all slaves [ 390.618153][ T9532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.626451][ T9532] IPv6: NLM_F_CREATE should be set when creating new route [ 390.644917][ T9532] lo: entered allmulticast mode [ 390.738161][ T9532] tunl0: entered allmulticast mode [ 390.768378][ T9532] gre0: entered allmulticast mode [ 390.846886][ T9532] gretap0: entered allmulticast mode [ 390.927157][ T9532] erspan0: entered allmulticast mode [ 390.970872][ T9532] ip_vti0: entered allmulticast mode [ 391.017522][ T9532] ip6_vti0: entered allmulticast mode [ 391.075995][ T9532] sit0: entered allmulticast mode [ 391.175721][ T9532] ip6tnl0: entered allmulticast mode [ 391.232880][ T9532] ip6gre0: entered allmulticast mode [ 391.717948][ T9532] syz_tun: entered allmulticast mode [ 392.048494][ T9532] ip6gretap0: entered allmulticast mode [ 392.410277][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.418212][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.427282][ T9532] bridge0: entered allmulticast mode [ 392.449833][ T9532] vcan0: entered allmulticast mode [ 392.455131][ T9546] loop2: detected capacity change from 0 to 512 [ 392.477317][ T9546] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 392.499736][ T9546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 392.508762][ T9546] System zones: 1-12 [ 392.509956][ T9532] team0: entered allmulticast mode [ 392.519813][ T9546] EXT4-fs (loop2): 1 truncate cleaned up [ 392.529713][ T9546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.543878][ T9532] team_slave_0: entered allmulticast mode [ 392.552168][ T9532] team_slave_1: entered allmulticast mode [ 392.592432][ T9532] dummy0: entered allmulticast mode [ 392.604868][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.629070][ T9532] nlmon0: entered allmulticast mode [ 392.646676][ T9532] caif0: entered allmulticast mode [ 392.653388][ T9532] batadv0: entered allmulticast mode [ 392.677691][ T9532] vxcan0: entered allmulticast mode [ 392.691292][ T9532] vxcan1: entered allmulticast mode [ 392.702143][ T9532] veth0: entered allmulticast mode [ 392.736567][ T9532] wg0: entered allmulticast mode [ 392.753046][ T9532] wg1: entered allmulticast mode [ 392.769552][ T9532] wg2: entered allmulticast mode [ 392.785022][ T9532] veth0_to_bridge: entered allmulticast mode [ 392.814312][ T9532] veth1_to_bridge: entered allmulticast mode [ 392.845386][ T9532] veth0_to_bond: entered allmulticast mode [ 392.853263][ T9532] bond_slave_0: entered allmulticast mode [ 392.871156][ T9532] veth1_to_bond: entered allmulticast mode [ 392.882749][ T9532] bond_slave_1: entered allmulticast mode [ 392.898043][ T9532] veth0_to_team: entered allmulticast mode [ 392.936849][ T9532] veth1_to_team: entered allmulticast mode [ 392.965683][ T9532] veth0_to_batadv: entered allmulticast mode [ 392.977538][ T9532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.995431][ T9532] batadv_slave_0: entered allmulticast mode [ 393.016028][ T9532] veth1_to_batadv: entered allmulticast mode [ 393.036313][ T9532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.045002][ T9532] batadv_slave_1: entered allmulticast mode [ 393.065865][ T9532] xfrm0: entered allmulticast mode [ 393.085544][ T9532] veth0_to_hsr: entered allmulticast mode [ 393.106949][ T9532] hsr_slave_0: entered allmulticast mode [ 393.122908][ T9532] veth1_to_hsr: entered allmulticast mode [ 393.144390][ T9532] hsr_slave_1: entered allmulticast mode [ 393.160123][ T9532] hsr0: entered allmulticast mode [ 393.180127][ T9532] veth1_vlan: entered allmulticast mode [ 393.200945][ T9532] veth0_vlan: entered allmulticast mode [ 393.235353][ T9532] vlan0: entered allmulticast mode [ 393.240986][ T9532] vlan1: entered allmulticast mode [ 393.255150][ T9532] macvlan0: left promiscuous mode [ 393.260518][ T9532] macvlan0: entered allmulticast mode [ 393.268200][ T9532] macvlan1: entered allmulticast mode [ 393.279725][ T9532] ipvlan0: entered allmulticast mode [ 393.292131][ T9532] ipvlan1: entered allmulticast mode [ 393.299327][ T9532] veth1_macvtap: entered allmulticast mode [ 393.320699][ T9532] veth0_macvtap: entered allmulticast mode [ 393.341728][ T9532] macvtap0: entered allmulticast mode [ 393.362729][ T9532] macsec0: entered allmulticast mode [ 393.382533][ T9532] geneve0: entered allmulticast mode [ 393.404984][ T9532] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.414594][ T9532] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.423978][ T9532] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.433148][ T9532] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.444119][ T9532] geneve1: entered allmulticast mode [ 393.463438][ T9532] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 393.482374][ T9532] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 393.500812][ T9532] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 393.518659][ T9532] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 393.540963][ T9532] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 393.560711][ T9532] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 393.581606][ T9532] bond1: left promiscuous mode [ 393.586900][ T9532] bridge1: left promiscuous mode [ 393.603895][ T9532] ip6gretap1: entered allmulticast mode [ 393.614230][ T9532] sit1: entered allmulticast mode [ 393.647148][ T9549] bridge0: entered allmulticast mode [ 393.664366][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.944'. [ 393.677275][ T9552] bridge_slave_1: left allmulticast mode [ 393.694414][ T28] audit: type=1800 audit(1755802112.553:128): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.940" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 393.704607][ T9552] bridge_slave_1: left promiscuous mode [ 393.722899][ T9538] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 393.744003][ T9552] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.752682][ T9538] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 393.771124][ T9552] bridge_slave_0: left allmulticast mode [ 393.783360][ T9538] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 393.796841][ T9552] bridge_slave_0: left promiscuous mode [ 393.802903][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.880538][ T9552] bridge0 (unregistering): left allmulticast mode [ 394.056991][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 394.070546][ T9553] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 394.846098][ T9573] loop2: detected capacity change from 0 to 8 [ 394.865039][ T9573] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 395.180715][ T9578] cramfs: Error -5 while decompressing! [ 395.187254][ T9578] cramfs: ffffffff96fd82c8(26)->ffff88805772b000(4096) [ 395.195688][ T9578] cramfs: Error -3 while decompressing! [ 395.202114][ T9578] cramfs: ffffffff96fd82e2(26)->ffff888057584000(4096) [ 395.209876][ T9578] cramfs: Error -3 while decompressing! [ 395.216021][ T9578] cramfs: ffffffff96fd82fc(16)->ffff888057585000(4096) [ 395.223370][ T9578] cramfs: Error -5 while decompressing! [ 395.231940][ T9578] cramfs: ffffffff96fd82c8(26)->ffff88805772b000(4096) [ 395.289339][ T28] audit: type=1800 audit(1755802114.103:129): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.950" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 395.311403][ T5839] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 395.587172][ T5839] usb 7-1: Using ep0 maxpacket: 16 [ 395.609874][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.889166][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.935414][ T5839] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.965026][ T5839] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.978986][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.990621][ T5839] usb 7-1: config 0 descriptor?? [ 396.524270][ T9591] loop2: detected capacity change from 0 to 2048 [ 396.980247][ T9591] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.364996][ T9593] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 397.401273][ T9593] loop4: detected capacity change from 0 to 512 [ 397.506240][ T5839] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 397.522281][ T9593] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 397.558208][ T5839] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 397.591819][ T9593] EXT4-fs (loop4): 1 truncate cleaned up [ 397.594194][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 397.601991][ T5839] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 397.630154][ T9593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.649583][ T5839] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 397.672382][ T5839] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 397.674779][ T9593] ext4: Unknown parameter 'ì¥YðÌÚ„yµ²Fm¤ïŠ©«±ZÉ1Ø(O[½Å [ 397.674779][ T9593] ^¥Æ+EïóªØ]0rQ#Íó{ØÌŽÎcÄpç6;æ°:ªPŸrïfè˜l¿íÐIG>Žá¦?Ï…-H"’&Fþ)ð!Iˆ|.z' [ 397.697491][ T5839] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 397.716569][ T5839] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 397.735510][ T5839] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 397.753276][ T5839] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 397.776943][ T5839] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 397.808217][ T5839] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 397.834571][ T5839] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 397.852906][ T5839] microsoft 0003:045E:07DA.0005: no inputs found [ 397.860331][ T5839] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 397.881941][ T5839] usb 7-1: USB disconnect, device number 4 [ 398.371688][ T967] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 398.906988][ T9601] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 398.950383][ T9601] EXT4-fs (loop4): Remounting filesystem read-only [ 399.012850][ T967] usb 5-1: unable to get BOS descriptor or descriptor too short [ 399.036855][ T967] usb 5-1: not running at top speed; connect to a high speed hub [ 399.048134][ T9621] loop6: detected capacity change from 0 to 2048 [ 399.054948][ T967] usb 5-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 399.055017][ T967] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 399.082884][ T967] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.097897][ T967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.106638][ T967] usb 5-1: Product: syz [ 399.111044][ T967] usb 5-1: Manufacturer: syz [ 399.122303][ T967] usb 5-1: SerialNumber: syz [ 399.167420][ T9621] loop6: p1 < > p3 [ 399.173618][ T9621] loop6: p3 size 134217728 extends beyond EOD, truncated [ 399.309842][ T9628] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 400.283683][ T967] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 400.299471][ T967] usb 5-1: unit 5 not found! [ 400.317774][ T967] usb 5-1: USB disconnect, device number 3 [ 400.452406][ T9633] team0: Port device team_slave_0 removed [ 400.471305][ T9633] team0: Port device team_slave_1 removed [ 400.481343][ T9633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.490135][ T9633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.500229][ T9633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.509025][ T9633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.523440][ T9633] bond1: (slave gretap1): Releasing active interface [ 400.657007][ T9642] mmap: syz.2.971 (9642): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 400.704441][ T9640] Device name cannot be null; rc = [-22] [ 400.871130][ T7695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.954522][ T6035] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 401.014381][ T5839] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 401.083697][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.974'. [ 401.105516][ T9649] loop4: detected capacity change from 0 to 2048 [ 401.114951][ T9649] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 401.125396][ T9649] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 401.136937][ T9649] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 401.147580][ T9649] EXT4-fs (loop4): group descriptors corrupted! [ 401.184242][ T6035] usb 1-1: Using ep0 maxpacket: 8 [ 401.197310][ T5839] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 401.197739][ T6035] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 401.218506][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.231529][ T6035] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.254033][ T6035] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.264853][ T5839] usb 3-1: config 0 descriptor?? [ 401.280550][ T6035] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 401.291834][ T6035] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.320862][ T6035] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 401.340783][ T6035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.561662][ T6035] usb 1-1: GET_CAPABILITIES returned 0 [ 401.567793][ T6035] usbtmc 1-1:16.0: can't read capabilities [ 401.674415][ T5839] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 401.685115][ T5839] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 401.697023][ T5839] asix: probe of 3-1:0.0 failed with error -32 [ 401.769279][ T6035] usb 1-1: USB disconnect, device number 9 [ 402.535052][ T9665] loop0: detected capacity change from 0 to 1764 [ 404.182244][ T6035] usb 3-1: USB disconnect, device number 7 [ 404.342891][ T9680] dvmrp0: entered allmulticast mode [ 404.357590][ T9680] dvmrp0: left allmulticast mode [ 406.334690][ T9703] loop6: detected capacity change from 0 to 2048 [ 406.385607][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 406.400197][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.992'. [ 406.680232][ T9703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.224691][ T28] audit: type=1800 audit(1755802126.083:130): pid=9712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.990" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 407.473961][ T5871] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 408.143768][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 408.179833][ T5871] usb 1-1: config 1 has an invalid interface number: 48 but max is 0 [ 408.210184][ T5871] usb 1-1: config 1 has no interface number 0 [ 408.223393][ T5871] usb 1-1: config 1 interface 48 has no altsetting 0 [ 408.251340][ T5871] usb 1-1: New USB device found, idVendor=42c6, idProduct=160a, bcdDevice= 7.e1 [ 408.331189][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.408120][ T5871] usb 1-1: Product: syz [ 408.450193][ T5871] usb 1-1: Manufacturer: syz [ 408.499646][ T5871] usb 1-1: SerialNumber: syz [ 408.602362][ T5871] usb-storage 1-1:1.48: USB Mass Storage device detected [ 409.117990][ T9726] syz.4.998[9726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.118236][ T9726] syz.4.998[9726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.341873][ T5852] usb 1-1: USB disconnect, device number 10 [ 409.675015][ T9745] netlink: 'syz.4.1004': attribute type 11 has an invalid length. [ 410.542761][ T9758] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1007'. [ 410.555284][ T9757] loop4: detected capacity change from 0 to 128 [ 410.812107][ T9757] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 410.950729][ T9757] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.491398][ T7695] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.864436][ T5852] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 412.112748][ T5852] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.232516][ T5852] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 412.340043][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.480918][ T5852] usb 7-1: config 0 descriptor?? [ 412.506413][ T5852] pwc: Askey VC010 type 2 USB webcam detected. [ 412.657626][ T9786] loop4: detected capacity change from 0 to 1024 [ 412.814655][ T9789] hfsplus: request for non-existent node 33423360 in B*Tree [ 412.833540][ T9789] hfsplus: request for non-existent node 33423360 in B*Tree [ 412.864979][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 412.879181][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 412.899716][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 412.907580][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 412.922373][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 412.931086][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 412.963023][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 412.978568][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.026516][ T9789] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.040329][ T9789] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.054007][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.073762][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.103847][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.111635][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.138084][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.142517][ T5852] pwc: recv_control_msg error -32 req 02 val 2700 [ 413.153466][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.153978][ T5852] pwc: recv_control_msg error -32 req 02 val 2c00 [ 413.176328][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.187772][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.196450][ T5852] pwc: recv_control_msg error -32 req 04 val 1000 [ 413.205135][ T5852] pwc: recv_control_msg error -32 req 04 val 1300 [ 413.222740][ T5852] pwc: recv_control_msg error -32 req 04 val 1400 [ 413.232855][ T5852] pwc: recv_control_msg error -32 req 02 val 2000 [ 413.251343][ T5852] pwc: recv_control_msg error -32 req 02 val 2100 [ 413.264601][ T5852] pwc: recv_control_msg error -32 req 04 val 1500 [ 413.282237][ T5852] pwc: recv_control_msg error -32 req 02 val 2500 [ 413.475219][ T9797] loop4: detected capacity change from 0 to 4096 [ 413.492175][ T9797] EXT4-fs (loop4): Test dummy encryption mode enabled [ 413.495808][ T5852] pwc: recv_control_msg error -71 req 02 val 2600 [ 413.508538][ T5852] pwc: recv_control_msg error -71 req 02 val 2900 [ 413.519503][ T9797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.532625][ T5852] pwc: recv_control_msg error -71 req 02 val 2800 [ 413.544123][ T5852] pwc: recv_control_msg error -71 req 04 val 1100 [ 413.553559][ T5852] pwc: recv_control_msg error -71 req 04 val 1200 [ 413.570495][ T5852] pwc: Registered as video103. [ 413.577692][ T5852] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 413.595079][ T5852] usb 7-1: USB disconnect, device number 5 [ 413.773247][ T28] audit: type=1326 audit(1755802132.633:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 413.808703][ T28] audit: type=1326 audit(1755802132.643:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 413.832744][ T28] audit: type=1326 audit(1755802132.653:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 413.856948][ T28] audit: type=1326 audit(1755802132.653:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 413.893280][ T28] audit: type=1326 audit(1755802132.673:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 413.917361][ T28] audit: type=1326 audit(1755802132.673:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 413.950588][ T28] audit: type=1326 audit(1755802132.673:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 413.953529][ T7695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.589529][ T9819] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1026'. [ 414.678364][ T9818] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1026'. [ 416.871842][ T9846] loop4: detected capacity change from 0 to 512 [ 417.025586][ T9846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 417.061814][ T9846] ext4 filesystem being mounted at /130/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.222731][ T9846] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.1034: directory missing '..' [ 417.301799][ T7695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 417.385936][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 417.713893][ T5832] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 417.964682][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 417.976079][ T5832] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 417.985822][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.994183][ T5832] usb 5-1: Product: syz [ 417.998658][ T5832] usb 5-1: Manufacturer: syz [ 418.010535][ T5832] usb 5-1: SerialNumber: syz [ 418.024881][ T5832] usb 5-1: config 0 descriptor?? [ 418.057697][ T9861] lo speed is unknown, defaulting to 1000 [ 418.074435][ T9861] lo speed is unknown, defaulting to 1000 [ 418.083013][ T9861] lo speed is unknown, defaulting to 1000 [ 418.145329][ T9861] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 418.240636][ T9861] lo speed is unknown, defaulting to 1000 [ 418.252700][ T9861] lo speed is unknown, defaulting to 1000 [ 418.255857][ T5832] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 418.272910][ T9861] lo speed is unknown, defaulting to 1000 [ 418.292682][ T9861] lo speed is unknown, defaulting to 1000 [ 418.648814][ T9871] netlink: 'syz.0.1041': attribute type 10 has an invalid length. [ 418.753890][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.762202][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.768544][ T9871] team0: Port device dummy0 added [ 418.778768][ T9873] netlink: 'syz.0.1041': attribute type 10 has an invalid length. [ 419.393888][ T6035] IPVS: starting estimator thread 0... [ 419.452316][ T9873] team0: Port device dummy0 removed [ 419.484066][ T9874] IPVS: using max 34 ests per chain, 81600 per kthread [ 419.647071][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 419.674354][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 419.793953][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.801795][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.823926][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.831367][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.978855][ T5832] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 421.012211][ T5832] usb 5-1: USB disconnect, device number 4 [ 421.863931][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.871593][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.913881][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.921624][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.530558][ T9929] loop4: detected capacity change from 0 to 128 [ 423.540011][ T9922] kernel profiling enabled (shift: 6) [ 423.548492][ T9929] EXT4-fs (loop4): Test dummy encryption mode enabled [ 423.562222][ T9929] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 423.943878][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.951477][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.353025][ T9929] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 424.586696][ T7695] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 424.750280][ T9950] bridge2: entered allmulticast mode [ 424.759760][ T9948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1062'. [ 424.983878][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.991379][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.182255][ T9959] netlink: 'syz.4.1065': attribute type 1 has an invalid length. [ 425.753728][ T9959] bond0: entered promiscuous mode [ 425.762233][ T9959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.845022][ T9957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.904488][ T9957] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 425.960646][ T9957] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 425.977714][ T9957] bond0: (slave ip6gre1): making interface the new active one [ 425.988280][ T9957] ip6gre1: entered promiscuous mode [ 425.995435][ T9957] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 426.023887][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.031584][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.188981][ T9973] netlink: 'syz.4.1069': attribute type 5 has an invalid length. [ 427.063843][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.071755][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.771116][ T9984] picdev_write: 1 callbacks suppressed [ 427.771127][ T9984] kvm: pic: non byte write [ 427.842424][ T9989] loop6: detected capacity change from 0 to 2048 [ 427.911110][ T9989] loop6: p1 < > p3 [ 427.926572][ T9989] loop6: p3 size 134217728 extends beyond EOD, truncated [ 428.102725][ T9989] kvm: emulating exchange as write [ 428.108288][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.108516][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.276749][T10004] syzkaller0: entered promiscuous mode [ 428.293753][T10004] syzkaller0: entered allmulticast mode [ 428.435877][T10008] loop4: detected capacity change from 0 to 512 [ 428.454883][T10008] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1080: casefold flag without casefold feature [ 428.469221][T10008] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1080: couldn't read orphan inode 15 (err -117) [ 428.482973][T10008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.542724][T10008] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.1080: Invalid inode table block 0 in block_group 0 [ 428.673512][T10008] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 428.684793][T10008] EXT4-fs error (device loop4): ext4_setent:3695: inode #2: comm syz.4.1080: mark_inode_dirty error [ 428.712683][ T7956] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm kworker/u4:26: Invalid inode table block 0 in block_group 0 [ 429.153942][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.161252][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.340036][ T7695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.512680][T10016] vlan2: entered promiscuous mode [ 429.527155][T10016] vlan2: entered allmulticast mode [ 430.104118][ T5852] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 430.183857][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.192265][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.401678][ T5852] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 430.433986][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.443097][ T5852] usb 5-1: Product: syz [ 430.453732][ T5852] usb 5-1: Manufacturer: syz [ 430.458396][ T5852] usb 5-1: SerialNumber: syz [ 430.481138][ T5852] usb 5-1: config 0 descriptor?? [ 430.750421][ T5832] usb 5-1: USB disconnect, device number 5 [ 431.223910][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.231714][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.749954][ T28] audit: type=1326 audit(1755802150.613:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f38ebe9 code=0x7ffc0000 [ 431.798079][ T28] audit: type=1326 audit(1755802150.643:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f38ebe9 code=0x7ffc0000 [ 431.825919][ T28] audit: type=1326 audit(1755802150.643:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0f7f38ebe9 code=0x7ffc0000 [ 431.853221][ T28] audit: type=1326 audit(1755802150.643:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f38ebe9 code=0x7ffc0000 [ 431.881696][ T28] audit: type=1326 audit(1755802150.643:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f38ebe9 code=0x7ffc0000 [ 431.914832][ T28] audit: type=1326 audit(1755802150.643:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0f7f38ebe9 code=0x7ffc0000 [ 432.128372][ T28] audit: type=1326 audit(1755802150.643:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f38ebe9 code=0x7ffc0000 [ 432.153035][ T28] audit: type=1326 audit(1755802150.643:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f7f38ebe9 code=0x7ffc0000 [ 432.213115][ T28] audit: type=1326 audit(1755802150.643:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f38ebe9 code=0x7ffc0000 [ 432.263873][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.271489][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.615458][ T28] audit: type=1326 audit(1755802150.643:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f7f38ebe9 code=0x7ffc0000 [ 433.041119][T10079] lo speed is unknown, defaulting to 1000 [ 433.077896][T10077] loop4: detected capacity change from 0 to 4096 [ 433.115420][T10077] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 433.303860][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.311642][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.461336][T10086] Driver unsupported XDP return value 0 on prog (id 281) dev N/A, expect packet loss! [ 434.343906][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.351582][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.267598][T10113] netlink: 'syz.0.1113': attribute type 12 has an invalid length. [ 435.383888][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.391287][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.753289][ T6035] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 435.990480][ T6035] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.022449][ T6035] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.047106][ T6035] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 436.072732][ T6035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 436.142961][ T6035] usb 7-1: SerialNumber: syz [ 436.423887][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.431264][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.598354][ T6035] usb 7-1: 0:2 : does not exist [ 436.640581][ T6035] usb 7-1: USB disconnect, device number 6 [ 436.773107][T10134] loop2: detected capacity change from 0 to 512 [ 436.805817][T10126] libceph: connect (1)[c::]:6789 error -101 [ 436.813151][T10126] libceph: mon0 (1)[c::]:6789 connect error [ 436.822330][T10135] lo speed is unknown, defaulting to 1000 [ 436.858865][T10134] EXT4-fs (loop2): too many log groups per flexible block group [ 436.869197][T10134] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 436.880833][T10134] EXT4-fs (loop2): mount failed [ 437.079459][T10126] libceph: connect (1)[c::]:6789 error -101 [ 437.091511][T10126] libceph: mon0 (1)[c::]:6789 connect error [ 437.290634][T10134] tipc: Resetting bearer [ 437.463999][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.471571][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.946034][T10137] ceph: No mds server is up or the cluster is laggy [ 437.970941][T10134] batadv_slave_0: left promiscuous mode [ 437.979101][ T6035] libceph: connect (1)[c::]:6789 error -101 [ 437.988948][T10134] macvlan0: left promiscuous mode [ 437.990305][ T6035] libceph: mon0 (1)[c::]:6789 connect error [ 438.002406][T10134] hsr1: left promiscuous mode [ 438.306666][T10164] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 438.503927][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.511571][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.543906][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.551556][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.033837][T10126] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 440.583856][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.591591][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.694726][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.701636][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.068136][T10126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 441.087261][T10126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.098101][T10126] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 441.112994][ T6035] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 441.121493][T10126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.137525][T10126] usb 3-1: config 0 descriptor?? [ 441.623885][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.631391][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.084557][ T6035] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 442.098133][ T6035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.110028][T10126] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 442.133327][ T6035] usb 7-1: config 0 descriptor?? [ 442.259449][T10238] sctp: [Deprecated]: syz.0.1149 (pid 10238) Use of int in max_burst socket option. [ 442.259449][T10238] Use struct sctp_assoc_value instead [ 442.306040][ T5832] usb 3-1: USB disconnect, device number 8 [ 442.663867][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.671370][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.703864][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.711315][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.743869][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.751488][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.606177][ T6035] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 445.656353][ T6035] asix: probe of 7-1:0.0 failed with error -71 [ 445.680623][ T6035] usb 7-1: USB disconnect, device number 7 [ 445.784085][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.791483][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.823861][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.831530][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.231040][T10283] pimreg: entered allmulticast mode [ 447.245415][T10283] dvmrp0: entered allmulticast mode [ 447.252879][T10283] dvmrp0: left allmulticast mode [ 447.258971][T10283] pimreg: left allmulticast mode [ 447.813407][ T5832] IPVS: starting estimator thread 0... [ 447.863933][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.871410][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.023937][T10296] IPVS: using max 17 ests per chain, 40800 per kthread [ 448.903913][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.911561][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.683425][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'. [ 449.928190][T10348] overlayfs: failed to clone upperpath [ 449.956340][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.963862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.984078][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.991667][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.449541][T10362] loop6: detected capacity change from 0 to 1024 [ 452.023879][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 452.031478][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.063989][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.071465][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.588535][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 454.113873][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 454.121388][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.143880][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.151161][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 456.183882][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 456.191726][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 456.628124][T10439] loop6: detected capacity change from 0 to 1024 [ 456.643390][T10439] EXT4-fs: Ignoring removed orlov option [ 456.674802][T10439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.866222][ T8596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.223835][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.231612][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.263892][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.271440][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.103930][ T6035] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 459.303866][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.304257][ T6035] usb 7-1: Using ep0 maxpacket: 32 [ 459.311429][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.319974][ T6035] usb 7-1: config 0 has an invalid interface number: 199 but max is 0 [ 459.436864][ T6035] usb 7-1: config 0 has no interface number 0 [ 459.544780][ T6035] usb 7-1: config 0 interface 199 has no altsetting 0 [ 459.561468][ T6035] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 459.593064][ T6035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.602531][ T6035] usb 7-1: Product: syz [ 459.607250][ T6035] usb 7-1: Manufacturer: syz [ 459.617683][ T6035] usb 7-1: SerialNumber: syz [ 459.628022][ T6035] usb 7-1: config 0 descriptor?? [ 459.816277][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 459.816292][ T28] audit: type=1326 audit(1755802178.683:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 459.861433][ T28] audit: type=1326 audit(1755802178.683:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 460.344020][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 460.352006][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 460.818297][ T28] audit: type=1326 audit(1755802178.683:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 460.863388][ T28] audit: type=1326 audit(1755802178.683:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 460.929308][ T28] audit: type=1326 audit(1755802178.713:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 461.040358][ T28] audit: type=1326 audit(1755802178.713:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 461.144575][ T28] audit: type=1326 audit(1755802178.713:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 461.169587][ T28] audit: type=1326 audit(1755802179.633:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 461.187895][T10484] loop2: detected capacity change from 0 to 512 [ 461.196591][ T6035] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 461.208092][ T28] audit: type=1326 audit(1755802179.633:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 461.223067][T10484] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 461.233823][ T28] audit: type=1326 audit(1755802179.633:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 461.280753][T10488] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 461.299096][T10484] EXT4-fs (loop2): 1 truncate cleaned up [ 461.313519][T10484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.374448][T10484] syz.2.1214 (pid 10484) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 461.383884][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.394634][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.506645][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.553747][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 461.612456][T10500] syz.2.1220 uses obsolete (PF_INET,SOCK_PACKET) [ 461.672050][ T6035] gspca_stk1135: reg_w 0x3 err -71 [ 461.684757][ T6035] gspca_stk1135: serial bus timeout: status=0x00 [ 461.691485][ T6035] gspca_stk1135: Sensor write failed [ 461.714225][ T6035] gspca_stk1135: serial bus timeout: status=0x00 [ 461.721671][ T6035] gspca_stk1135: Sensor write failed [ 461.734509][T10504] (null): rxe_set_mtu: Set mtu to 1024 [ 461.740955][ T6035] gspca_stk1135: serial bus timeout: status=0x00 [ 461.747745][ T6035] gspca_stk1135: Sensor read failed [ 461.752993][ T6035] gspca_stk1135: serial bus timeout: status=0x00 [ 461.760329][T10504] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 461.770129][ T6035] gspca_stk1135: Sensor read failed [ 461.784116][ T6035] gspca_stk1135: Detected sensor type unknown (0x0) [ 461.801456][ T6035] gspca_stk1135: serial bus timeout: status=0x00 [ 461.808645][ T6035] gspca_stk1135: Sensor read failed [ 461.823946][ T6035] gspca_stk1135: serial bus timeout: status=0x00 [ 461.831194][ T6035] gspca_stk1135: Sensor read failed [ 461.836758][ T6035] gspca_stk1135: serial bus timeout: status=0x00 [ 461.848044][ T6035] gspca_stk1135: Sensor write failed [ 461.855273][ T6035] gspca_stk1135: serial bus timeout: status=0x00 [ 461.861994][ T6035] gspca_stk1135: Sensor write failed [ 461.889222][ T6035] stk1135: probe of 7-1:0.199 failed with error -71 [ 461.916168][ T6035] usb 7-1: USB disconnect, device number 8 [ 462.423991][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.431641][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.512557][T10534] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1230'. [ 463.463931][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.471256][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.503893][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.511537][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.543845][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.551532][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.939310][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 465.939324][ T28] audit: type=1326 audit(1755802184.803:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 465.978114][ T28] audit: type=1326 audit(1755802184.803:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 466.003307][ T28] audit: type=1326 audit(1755802184.843:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 466.042535][ T28] audit: type=1326 audit(1755802184.843:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 466.583982][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.591913][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.697778][ T28] audit: type=1326 audit(1755802184.843:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 466.721082][ T28] audit: type=1326 audit(1755802184.843:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 466.760532][ T28] audit: type=1326 audit(1755802184.843:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 466.813842][ T28] audit: type=1326 audit(1755802184.843:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 466.851179][T10571] tipc: Enabled bearer , priority 0 [ 466.853740][ T28] audit: type=1326 audit(1755802184.843:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 466.860157][T10571] syzkaller0: entered promiscuous mode [ 466.887971][ T28] audit: type=1326 audit(1755802184.843:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe8a9b8ebe9 code=0x7ffc0000 [ 466.948122][T10571] syzkaller0: entered allmulticast mode [ 467.042877][T10571] tipc: Resetting bearer [ 467.062272][T10570] tipc: Resetting bearer [ 467.118067][T10570] tipc: Disabling bearer [ 467.284460][T10585] netlink: 'syz.6.1248': attribute type 10 has an invalid length. [ 467.320822][T10583] 9pnet: Could not find request transport: 0xffffffffffffffff [ 467.623954][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 467.631621][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 468.409528][T10603] fuse: Bad value for 'fd' [ 468.663876][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 468.671654][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.144212][ T5839] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 469.496540][ T5839] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.512197][ T5839] usb 7-1: config 0 has no interfaces? [ 469.703876][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.711433][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.736300][ T5839] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 469.746136][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.759260][ T5839] usb 7-1: Product: syz [ 469.764977][ T5839] usb 7-1: Manufacturer: syz [ 469.774724][ T5839] usb 7-1: SerialNumber: syz [ 469.782411][ T5839] usb 7-1: config 0 descriptor?? [ 470.495507][T10625] loop2: detected capacity change from 0 to 8 [ 470.512930][T10611] loop6: detected capacity change from 0 to 512 [ 470.524850][T10611] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 470.542681][T10625] SQUASHFS error: Failed to read block 0x4de: -5 [ 470.552503][T10611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 470.560939][T10611] System zones: 1-12 [ 470.567004][T10625] SQUASHFS error: Failed to read block 0x4de: -5 [ 470.587078][T10611] EXT4-fs (loop6): 1 truncate cleaned up [ 470.610737][T10611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.631949][T10628] lo speed is unknown, defaulting to 1000 [ 470.668430][ T6035] usb 7-1: USB disconnect, device number 9 [ 470.718981][T10632] 9pnet_fd: Insufficient options for proto=fd [ 470.731518][T10632] @: renamed from vlan0 (while UP) [ 470.743978][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.751348][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.784016][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.791561][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.875336][ T8596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.132846][T10670] delete_channel: no stack [ 472.211427][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 472.348848][T10684] loop6: detected capacity change from 0 to 256 [ 472.443439][T10684] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 472.619890][T10676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.833973][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 472.841702][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.863830][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.871204][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 474.339210][T10718] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 474.434133][T10718] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 474.451722][T10718] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 474.482571][T10722] gretap2: entered promiscuous mode [ 474.492375][T10722] bond0: (slave gretap2): making interface the new active one [ 474.505855][T10722] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 474.903870][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 474.911570][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.953852][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.961469][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.983881][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.992044][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.265454][ T785] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 477.713826][ T785] usb 7-1: Using ep0 maxpacket: 16 [ 477.731868][ T785] usb 7-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 477.747422][ T785] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 477.761246][ T785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.786515][ T785] usb 7-1: config 0 descriptor?? [ 477.800399][T10765] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 477.811658][ T785] gspca_main: spca501-2.14.0 probing 0000:0000 [ 478.023870][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 478.031562][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 478.230726][ T785] gspca_spca501: reg write: error -71 [ 478.302167][ T785] spca501 7-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 478.419565][ T785] spca501: probe of 7-1:0.0 failed with error -22 [ 478.695992][ T785] usb 7-1: USB disconnect, device number 10 [ 479.063952][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 479.071599][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.103896][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.111423][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.197437][ T50] Bluetooth: hci0: unexpected event for opcode 0x2064 [ 486.910685][T10867] lo: left allmulticast mode [ 487.094391][T10869] sit0: entered promiscuous mode [ 487.099701][T10869] sit0: left allmulticast mode [ 487.594822][T10869] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1326'. [ 489.620659][T10888] macvlan2: entered promiscuous mode [ 489.662896][T10879] lo speed is unknown, defaulting to 1000 [ 489.671209][T10890] loop2: detected capacity change from 0 to 512 [ 489.958449][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'. [ 489.972855][T10892] vlan0: entered promiscuous mode [ 489.978604][T10892] team0: entered promiscuous mode [ 493.943519][T10944] lo speed is unknown, defaulting to 1000 [ 495.246834][T10938] loop6: detected capacity change from 0 to 32768 [ 495.298928][T10938] JFS: co.tinue is an invalid error handler [ 495.367886][T10954] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1349'. [ 495.672096][T10956] netlink: 576 bytes leftover after parsing attributes in process `syz.6.1350'. [ 495.891156][T10960] loop6: detected capacity change from 0 to 1024 [ 495.914658][T10960] EXT4-fs: Ignoring removed nobh option [ 495.920463][T10960] EXT4-fs: Ignoring removed bh option [ 496.279617][T10960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.712205][T10967] overlayfs: missing 'lowerdir' [ 497.169266][T10975] syz.0.1355: attempt to access beyond end of device [ 497.169266][T10975] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 497.183606][T10975] F2FS-fs (loop1): Unable to read 1th superblock [ 497.191332][T10975] syz.0.1355: attempt to access beyond end of device [ 497.191332][T10975] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 497.205166][T10975] F2FS-fs (loop1): Unable to read 2th superblock [ 497.217619][ T8596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.527673][T10990] SET target dimension over the limit! [ 499.063830][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 500.047704][T11026] netlink: 'syz.2.1370': attribute type 10 has an invalid length. [ 500.059799][T11026] batman_adv: batadv0: Adding interface: team0 [ 500.068449][T11026] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.095490][T11026] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 501.118353][T11029] loop6: detected capacity change from 0 to 40427 [ 501.138203][T11029] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x7ffff [ 501.165201][T11029] F2FS-fs (loop6): invalid crc value [ 501.180813][T11029] F2FS-fs (loop6): Found nat_bits in checkpoint [ 501.264403][T11029] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 501.373864][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 501.373880][ T28] audit: type=1326 audit(1755802220.203:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 501.449478][ T28] audit: type=1326 audit(1755802220.203:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 501.560601][ T28] audit: type=1326 audit(1755802220.203:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 501.622580][ T28] audit: type=1326 audit(1755802220.203:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 501.668760][ T28] audit: type=1326 audit(1755802220.203:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 501.718322][ T28] audit: type=1326 audit(1755802220.203:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 501.722339][T11053] F2FS-fs (loop6): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x97f/0x19e0 [ 501.784533][ T28] audit: type=1326 audit(1755802220.203:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 501.788667][T11053] syz.6.1371: attempt to access beyond end of device [ 501.788667][T11053] loop6: rw=2049, sector=53248, nr_sectors = 256 limit=40427 [ 501.823753][ T28] audit: type=1326 audit(1755802220.203:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 501.882391][ T28] audit: type=1326 audit(1755802220.203:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 501.924713][ T28] audit: type=1326 audit(1755802220.203:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 502.003403][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.131857][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.138534][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.139092][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.175982][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.189011][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.196712][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.204127][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.211177][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.218541][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.225620][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.232719][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.456672][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.468178][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.475940][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.483414][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.500615][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.600742][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.701287][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.910467][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.937341][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 502.976138][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.511305][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.528932][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.592327][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.645253][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.658711][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.668961][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.677944][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.686129][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.693226][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.701216][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.710113][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 503.717988][T11053] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 504.575980][ T5871] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 504.649968][T11087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1383'. [ 505.462547][T11089] netlink: 'syz.6.1385': attribute type 2 has an invalid length. [ 505.483736][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 505.500278][ T5871] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 505.511150][ T5871] usb 3-1: config 0 has no interface number 0 [ 505.536117][ T5871] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 505.553711][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.561848][ T5871] usb 3-1: Product: syz [ 505.573715][ T5871] usb 3-1: Manufacturer: syz [ 505.578704][ T5871] usb 3-1: SerialNumber: syz [ 505.595749][ T5871] usb 3-1: config 0 descriptor?? [ 505.614841][ T5871] smsc95xx v2.0.0 [ 506.098346][T11101] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 506.493024][ T5871] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 506.566711][ T5871] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 506.877572][ T6035] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 506.885292][T11113] xt_recent: Unsupported userspace flags (000000de) [ 507.166035][ T6035] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.177203][ T6035] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 507.190874][ T6035] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.208901][ T6035] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 507.218816][ T6035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.227208][ T6035] usb 7-1: Product: syz [ 507.231733][ T6035] usb 7-1: Manufacturer: syz [ 507.236898][ T6035] usb 7-1: SerialNumber: syz [ 507.819964][ T6035] usb 7-1: config 0 descriptor?? [ 507.826253][T11107] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 507.834996][ T6035] usb 7-1: ucan: probing device on interface #0 [ 507.841388][ T6035] usb 7-1: ucan: invalid EP count (1) [ 507.847063][ T6035] usb 7-1: ucan: probe failed; try to update the device firmware [ 509.171523][ T5871] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 509.195048][ T5871] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 509.213871][T11132] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 509.217519][ T5871] usb 3-1: USB disconnect, device number 9 [ 509.254843][T11132] netlink: 'syz.4.1401': attribute type 10 has an invalid length. [ 509.314708][T11136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1411'. [ 509.341271][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'. [ 509.580329][ T5832] usb 7-1: USB disconnect, device number 11 [ 512.498287][T11169] bridge2: entered allmulticast mode [ 515.263858][ T6035] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 515.561589][ T6035] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.597702][ T6035] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.263185][ T6035] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 516.361477][ T6035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 516.393296][ T6035] usb 3-1: SerialNumber: syz [ 516.484863][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1425'. [ 516.628978][ T6035] usb 3-1: 0:2 : does not exist [ 516.641392][ T6035] usb 3-1: USB disconnect, device number 10 [ 517.261707][T11213] netlink: zone id is out of range [ 517.273620][T11213] netlink: zone id is out of range [ 517.283818][T11213] netlink: zone id is out of range [ 517.289098][T11213] netlink: zone id is out of range [ 517.298740][T11213] netlink: zone id is out of range [ 517.310838][T11213] netlink: zone id is out of range [ 517.319867][T11213] netlink: zone id is out of range [ 517.325615][T11213] netlink: zone id is out of range [ 517.331470][T11213] netlink: zone id is out of range [ 517.341722][T11213] netlink: zone id is out of range [ 517.505722][T11217] batadv_slave_0: entered promiscuous mode [ 517.566530][T11216] batadv_slave_0: left promiscuous mode [ 518.205591][T11230] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1436'. [ 519.250049][T11247] loop2: detected capacity change from 0 to 128 [ 519.288033][T11247] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 519.362863][T11247] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.519210][T11253] lo speed is unknown, defaulting to 1000 [ 520.413590][ T5795] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 520.869513][T11266] loop6: detected capacity change from 0 to 512 [ 520.891273][T11266] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 521.186965][T11266] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #17: comm syz.6.1448: iget: bad i_size value: -6917529027641081756 [ 521.390603][T11266] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1448: couldn't read orphan inode 17 (err -117) [ 521.553002][T11266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.669658][T11266] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.1448: bg 0: block 65: padding at end of block bitmap is not set [ 521.734169][T11266] __quota_error: 13 callbacks suppressed [ 521.734187][T11266] Quota error (device loop6): write_blk: dquota write failed [ 521.763915][T11266] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 521.844435][T11279] Quota error (device loop6): do_check_range: Getting block 144 out of range 0-5 [ 521.885834][T11266] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1448: Failed to acquire dquot type 0 [ 522.656869][ T8596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.282689][T11316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.739673][T11340] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1466'. [ 528.806008][T11334] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1466'. [ 529.808042][T11355] overlayfs: failed to clone upperpath [ 529.889790][T11360] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 530.345740][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 530.359873][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1476'. [ 531.118363][T11375] loop6: detected capacity change from 0 to 512 [ 531.165972][T11375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.194055][T11375] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.268316][ T8596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.326893][T11390] loop2: detected capacity change from 0 to 512 [ 531.632024][T11390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.681255][T11390] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 533.575629][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.203983][T11425] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 535.076386][ T28] audit: type=1804 audit(1755802253.933:243): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1490" name="/newroot/163/bus/bus" dev="overlay" ino=910 res=1 errno=0 [ 535.150378][ T28] audit: type=1804 audit(1755802254.003:244): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1490" name="/newroot/163/bus/bus" dev="overlay" ino=910 res=1 errno=0 [ 535.364423][ T28] audit: type=1800 audit(1755802254.233:245): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1489" name="bus" dev="ramfs" ino=29003 res=0 errno=0 [ 535.684698][T11431] bridge_slave_0: left promiscuous mode [ 535.690635][T11431] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.729305][T11431] bridge_slave_1: left promiscuous mode [ 535.743407][T11431] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.828612][T11431] team0: Port device team_slave_0 removed [ 535.897653][T11431] team0: Port device team_slave_1 removed [ 535.914148][T11431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.958078][T11431] bond1: (slave bridge1): Releasing active interface [ 536.093187][T11431] bond0: (slave ip6gre1): Releasing backup interface [ 536.100564][T11431] ip6gre1: left promiscuous mode [ 536.204295][T11434] team0: Mode changed to "roundrobin" [ 540.847225][ T28] audit: type=1800 audit(1755802259.713:246): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1503" name="bus" dev="ramfs" ino=28190 res=0 errno=0 [ 540.952265][T11492] loop2: detected capacity change from 0 to 512 [ 541.243607][T11492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11c, mo2=0082] [ 541.292535][T11492] System zones: 1-12 [ 541.337541][T11492] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1509: corrupted in-inode xattr: e_value size too large [ 541.471082][T11492] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1509: couldn't read orphan inode 15 (err -117) [ 541.544443][T11492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.120194][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.039781][ T28] audit: type=1800 audit(1755802264.893:247): pid=11518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1520" name="bus" dev="ramfs" ino=28239 res=0 errno=0 [ 548.385753][T11554] tipc: Failed to remove unknown binding: 66,1,1/0:1990497928/1990497930 [ 548.447577][T11544] tipc: Failed to remove unknown binding: 66,1,1/0:1990497928/1990497930 [ 548.460400][T11557] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1527'. [ 548.471390][T11544] tipc: Failed to remove unknown binding: 66,1,1/0:1990497928/1990497930 [ 548.486868][T11557] vlan2: entered promiscuous mode [ 548.502367][T11557] team0: entered promiscuous mode [ 548.508674][T11557] team_slave_0: entered promiscuous mode [ 548.516889][T11557] team_slave_1: entered promiscuous mode [ 551.774968][T11590] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 551.788062][T11587] IPVS: stopping backup sync thread 11590 ... [ 553.071728][ T28] audit: type=1800 audit(1755802271.933:248): pid=11582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1533" name="bus" dev="ramfs" ino=28303 res=0 errno=0 [ 554.302675][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1543'. [ 554.879697][T11609] vlan3: entered promiscuous mode [ 554.907381][T11609] team0: entered promiscuous mode [ 555.080681][T11615] lo speed is unknown, defaulting to 1000 [ 555.984703][T11623] overlayfs: failed to clone upperpath [ 556.068261][T11626] netlink: 'syz.6.1549': attribute type 1 has an invalid length. [ 556.181159][T11631] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 556.216993][T11631] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 556.252878][T11633] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 556.253520][T11630] IPVS: stopping backup sync thread 11633 ... [ 557.277323][T11645] loop2: detected capacity change from 0 to 128 [ 557.419169][T11645] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 557.434108][T11645] ext4 filesystem being mounted at /407/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 558.024862][T11649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.032676][T11649] IPv6: NLM_F_CREATE should be set when creating new route [ 559.347905][T11650] lo: entered allmulticast mode [ 559.357083][ T5795] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 559.402482][T11650] tunl0: entered allmulticast mode [ 559.424548][T11650] gre0: entered allmulticast mode [ 559.509918][T11650] gretap0: entered allmulticast mode [ 559.536393][T11650] erspan0: entered allmulticast mode [ 559.556819][T11655] loop2: detected capacity change from 0 to 4096 [ 559.565751][T11655] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 559.567988][T11650] ip_vti0: entered allmulticast mode [ 559.595722][T11650] ip6_vti0: entered allmulticast mode [ 559.617555][T11650] sit0: entered allmulticast mode [ 559.662196][T11650] ip6tnl0: entered allmulticast mode [ 559.686155][T11650] ip6gre0: entered allmulticast mode [ 559.710711][T11650] ip6gretap0: entered allmulticast mode [ 559.736458][T11650] vcan0: entered allmulticast mode [ 559.742809][T11650] team0: entered allmulticast mode [ 559.757118][T11650] dummy0: entered allmulticast mode [ 559.763858][T11650] nlmon0: entered allmulticast mode [ 559.775999][T11650] caif0: entered allmulticast mode [ 559.790590][T11650] veth0: entered allmulticast mode [ 559.832013][T11650] veth1: entered allmulticast mode [ 559.859358][T11650] wg1: entered allmulticast mode [ 559.881281][T11650] wg2: entered allmulticast mode [ 559.910869][T11650] veth0_to_bridge: entered allmulticast mode [ 559.940677][T11650] bridge_slave_0: entered allmulticast mode [ 559.958507][T11650] veth1_to_bridge: entered allmulticast mode [ 559.974737][T11650] bridge_slave_1: entered allmulticast mode [ 559.997717][T11650] veth0_to_bond: entered allmulticast mode [ 560.015238][T11650] bond_slave_0: entered allmulticast mode [ 560.044499][T11650] veth1_to_bond: entered allmulticast mode [ 560.054235][T11650] bond_slave_1: entered allmulticast mode [ 560.061575][T11650] veth0_to_team: entered allmulticast mode [ 560.074966][T11650] team_slave_0: entered allmulticast mode [ 560.085726][T11650] veth1_to_team: entered allmulticast mode [ 560.107692][T11650] team_slave_1: entered allmulticast mode [ 560.195729][T11650] veth0_to_batadv: entered allmulticast mode [ 560.449503][T11650] batadv_slave_0: entered allmulticast mode [ 560.747848][T11650] veth1_to_batadv: entered allmulticast mode [ 560.783572][T11650] batadv_slave_1: entered allmulticast mode [ 560.819237][T11650] xfrm0: entered allmulticast mode [ 560.863141][T11650] veth0_to_hsr: entered allmulticast mode [ 560.894147][T11650] hsr_slave_0: entered allmulticast mode [ 560.922702][T11650] veth1_to_hsr: entered allmulticast mode [ 560.950725][T11650] hsr_slave_1: entered allmulticast mode [ 560.980766][T11650] hsr0: entered allmulticast mode [ 561.009106][T11650] veth1_virt_wifi: entered allmulticast mode [ 561.040204][T11650] veth0_virt_wifi: entered allmulticast mode [ 561.052502][T11650] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 561.061519][T11650] veth1_vlan: entered allmulticast mode [ 561.079038][T11650] veth0_vlan: entered allmulticast mode [ 561.131759][T11650] @: entered allmulticast mode [ 561.166210][T11650] vlan1: entered allmulticast mode [ 561.180614][T11650] macvlan0: left promiscuous mode [ 561.258770][T11650] macvlan0: entered allmulticast mode [ 561.330896][T11650] macvlan1: entered allmulticast mode [ 561.408906][T11650] ipvlan0: entered allmulticast mode [ 561.470550][T11650] ipvlan1: entered allmulticast mode [ 561.579786][T11650] veth1_macvtap: entered allmulticast mode [ 561.770059][T11650] veth0_macvtap: entered allmulticast mode [ 561.814246][T11650] macvtap0: entered allmulticast mode [ 561.842954][T11650] macsec0: entered allmulticast mode [ 561.879851][T11650] geneve0: entered allmulticast mode [ 561.902902][T11650] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.912669][T11650] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.922683][T11650] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.932814][T11650] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.949975][T11650] geneve1: entered allmulticast mode [ 561.963550][T11650] netdevsim netdevsim0 : entered allmulticast mode [ 561.983457][T11650] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 562.008814][T11650] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 562.032244][T11650] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 562.052302][T11650] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 562.084766][T11650] netdevsim netdevsim0 : unset [1, 1] type 2 family 0 port 256 - 0 [ 562.093770][T11650] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 562.107427][T11650] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 562.116990][T11650] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 562.126937][T11650] geneve2: left promiscuous mode [ 562.141171][T11650] vlan2: entered allmulticast mode [ 562.149730][T11650] bond1: entered allmulticast mode [ 562.209494][T11673] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 562.217779][T11673] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 562.225784][T11673] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 562.239648][T11673] Error parsing options; rc = [-22] [ 562.342653][T11650] gretap1: entered allmulticast mode [ 562.376184][T11650] ip6gretap1: entered allmulticast mode [ 562.423768][T11650] syztnl1: entered allmulticast mode [ 562.477370][T11650] bridge0: entered allmulticast mode [ 562.690511][T11650] bridge1: entered allmulticast mode [ 562.737772][T11650] gre1: entered allmulticast mode [ 562.745418][T11650] vlan0001: entered allmulticast mode [ 562.751188][T11650] bond0: entered allmulticast mode [ 562.759404][T11650] gretap2: entered allmulticast mode [ 562.770157][T11650] gretap2: left promiscuous mode [ 562.797112][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1557'. [ 562.810390][ T5839] lo speed is unknown, defaulting to 1000 [ 562.867916][T11658] vlan0: entered promiscuous mode [ 562.883360][T11658] team0: entered promiscuous mode [ 562.891047][T11658] team_slave_0: entered promiscuous mode [ 562.899361][T11658] team_slave_1: entered promiscuous mode [ 563.024850][T11682] lo speed is unknown, defaulting to 1000 [ 563.058750][T11681] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 563.625036][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.631773][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.756442][T11695] netlink: 'syz.4.1564': attribute type 10 has an invalid length. [ 564.799243][T11695] team0: left allmulticast mode [ 564.851409][T11695] batman_adv: batadv0: Adding interface: team0 [ 564.858812][T11695] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.884750][T11695] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 568.355053][T11725] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 568.362554][T11725] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 568.370572][T11725] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 568.383782][T11725] Error parsing options; rc = [-22] [ 569.217075][T11730] loop6: detected capacity change from 0 to 8192 [ 569.483438][ T50] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 569.494356][ T50] Bluetooth: hci3: unexpected event for opcode 0x203e [ 570.823009][T11754] netlink: 'syz.6.1580': attribute type 10 has an invalid length. [ 570.888173][T11754] batman_adv: batadv0: Adding interface: team0 [ 570.996089][T11754] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.037243][T11754] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 573.121846][T11780] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 573.130808][T11780] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 573.139475][T11780] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 573.155561][T11780] Error parsing options; rc = [-22] [ 573.676652][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 573.687964][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 573.701039][ T50] Bluetooth: hci3: hardware error 0x00 [ 574.308154][T11792] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 574.316154][T11792] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 574.324229][T11792] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 574.338999][T11792] Error parsing options; rc = [-22] [ 574.553770][T11794] Cannot find add_set index 0 as target [ 576.015495][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 577.958288][T11816] netlink: 'syz.0.1595': attribute type 10 has an invalid length. [ 577.991255][T11816] team0: left allmulticast mode [ 578.079574][ T50] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 578.088737][ T50] Bluetooth: hci1: unexpected event for opcode 0x203e [ 578.975541][T11823] loop6: detected capacity change from 0 to 512 [ 579.110033][T11823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.188205][T11831] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 579.197166][T11831] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 579.205394][T11831] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 579.219618][T11831] Error parsing options; rc = [-22] [ 579.353421][T11823] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 581.467554][ T8596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.620310][T11856] netlink: 'syz.0.1616': attribute type 10 has an invalid length. [ 581.827703][T11864] batman_adv: batadv0: Removing interface: team0 [ 582.563066][ T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 582.573003][ T50] Bluetooth: hci1: Injecting HCI hardware error event [ 582.584306][ T5799] Bluetooth: hci1: hardware error 0x00 [ 585.575105][ T5799] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 587.197901][T11884] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 587.206074][T11884] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 587.214008][T11884] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 587.228018][T11884] Error parsing options; rc = [-22] [ 591.148311][T11925] batman_adv: batadv0: Removing interface: team0 [ 591.159409][T11925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.167449][T11925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.176617][T11925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.184449][T11925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.543231][T11945] bond0: (slave gretap2): Releasing active interface [ 592.560992][T11947] netlink: 'syz.6.1629': attribute type 5 has an invalid length. [ 592.637508][T11950] team0: Mode changed to "roundrobin" [ 593.003180][T11953] batman_adv: batadv0: Removing interface: team0 [ 593.020309][T11953] team_slave_0: left promiscuous mode [ 593.036366][T11953] team0: Port device team_slave_0 removed [ 593.044101][T11953] team_slave_1: left promiscuous mode [ 593.090589][T11953] team0: Port device team_slave_1 removed [ 593.105302][T11953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.125417][T11953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.139271][T11959] team0: Mode changed to "roundrobin" [ 595.581116][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1643'. [ 596.102437][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1643'. [ 598.231370][T12008] bond0: (slave bond_slave_0): Releasing backup interface [ 598.249549][T12008] bond0: (slave bond_slave_1): Releasing backup interface [ 598.280755][T12008] team_slave_0: left promiscuous mode [ 598.334867][T12008] team0: Port device team_slave_0 removed [ 599.193053][T12008] team_slave_1: left promiscuous mode [ 599.302138][T12008] team0: Port device team_slave_1 removed [ 599.396573][T12029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1650'. [ 599.527748][T12019] team0: Mode changed to "roundrobin" [ 600.706399][T12042] ptrace attach of "./syz-executor exec"[12043] was attempted by "./syz-executor exec"[12042] [ 606.012105][T12067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1662'. [ 606.151085][T12072] lo speed is unknown, defaulting to 1000 [ 607.408173][T12085] netlink: 'syz.6.1667': attribute type 10 has an invalid length. [ 607.809064][T12107] Device name cannot be null; rc = [-22] [ 608.224502][T12120] tipc: Enabling of bearer rejected, failed to enable media [ 609.333899][ T28] audit: type=1326 audit(1755802328.193:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 609.536224][ T28] audit: type=1326 audit(1755802328.193:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 609.570176][ T28] audit: type=1326 audit(1755802328.233:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 610.063895][ T28] audit: type=1326 audit(1755802328.233:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 610.423930][ T28] audit: type=1326 audit(1755802328.233:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 610.495885][ T28] audit: type=1326 audit(1755802328.363:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 610.591110][ T28] audit: type=1326 audit(1755802328.363:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 610.673834][ T28] audit: type=1326 audit(1755802328.363:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 610.697065][ T28] audit: type=1326 audit(1755802328.363:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 610.736613][ T28] audit: type=1326 audit(1755802328.363:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbb28b8ebe9 code=0x7ffc0000 [ 611.136431][T12142] netlink: 'syz.0.1683': attribute type 11 has an invalid length. [ 615.550210][T12175] loop6: detected capacity change from 0 to 512 [ 615.577404][T12175] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 615.644458][T12175] System zones: 0-2, 18-18, 34-35 [ 615.686958][T12175] EXT4-fs error (device loop6): ext4_quota_enable:7129: inode #4: comm syz.6.1692: iget: bad i_size value: 5910974510929920 [ 615.712815][T12175] EXT4-fs error (device loop6): ext4_quota_enable:7132: comm syz.6.1692: Bad quota inode: 4, type: 1 [ 615.726514][T12175] EXT4-fs warning (device loop6): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 615.742508][T12175] EXT4-fs (loop6): mount failed [ 625.075311][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.081895][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.330342][T12299] bridge2: entered allmulticast mode [ 630.062298][T12303] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1724'. [ 630.085892][T12298] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1724'. [ 630.346812][T12315] lo speed is unknown, defaulting to 1000 [ 630.786694][T12327] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 631.791549][T12333] lo speed is unknown, defaulting to 1000 [ 631.941209][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1738'. [ 632.991884][T12357] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1741'. [ 633.016806][T12357] team0: Mode changed to "broadcast" [ 633.849146][T12372] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 639.904228][T12432] xt_socket: unknown flags 0x48 [ 640.004055][T12433] trusted_key: encrypted_key: key user:syz not found [ 640.796606][T12422] syz.2.1760 (12422) used greatest stack depth: 17160 bytes left [ 641.119754][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 641.119772][ T28] audit: type=1326 audit(1755802359.973:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.2.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 641.529135][ T28] audit: type=1326 audit(1755802359.973:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.2.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 641.557911][ T28] audit: type=1326 audit(1755802359.973:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.2.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 641.581701][ T28] audit: type=1326 audit(1755802359.973:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.2.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 641.605450][ T28] audit: type=1326 audit(1755802359.973:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.2.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 641.636877][ T28] audit: type=1326 audit(1755802359.973:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.2.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 641.661163][ T28] audit: type=1326 audit(1755802359.973:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.2.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 641.689713][ T28] audit: type=1326 audit(1755802359.973:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.2.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 641.792265][ T28] audit: type=1326 audit(1755802359.973:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.2.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 641.816037][ T28] audit: type=1326 audit(1755802359.973:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.2.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 642.012815][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1767'. [ 643.435750][T12475] tipc: Started in network mode [ 643.500813][T12475] tipc: Node identity ac14140f, cluster identity 4711 [ 643.524847][T12475] tipc: New replicast peer: 255.255.255.255 [ 643.962089][T12475] tipc: Enabled bearer , priority 10 [ 645.198654][T12482] loop6: detected capacity change from 0 to 2048 [ 645.309667][ T6941] tipc: Node number set to 2886997007 [ 645.574848][T12482] loop6: p1 < > p3 [ 645.581432][T12482] loop6: p3 size 134217728 extends beyond EOD, truncated [ 645.658427][T12493] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1779'. [ 645.696230][T12493] team0: Mode changed to "broadcast" [ 647.785556][T12520] netlink: 'syz.2.1789': attribute type 4 has an invalid length. [ 650.010655][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1795'. [ 650.021746][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1795'. [ 651.386307][T12556] tipc: Started in network mode [ 651.404087][T12556] tipc: Node identity 6, cluster identity 4711 [ 651.414586][T12556] tipc: Node number set to 6 [ 652.738513][T12573] netlink: 'syz.4.1804': attribute type 9 has an invalid length. [ 653.780778][T12586] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 653.816611][T12586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.883841][T12586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.891638][T12586] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 653.905571][T12586] bond0: (slave ipip0): Error -95 calling set_mac_address [ 654.420470][T12597] bond0: (slave ip6erspan0): making interface the new active one [ 654.436497][T12597] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 664.187113][T12699] xt_TPROXY: Can be used only with -p tcp or -p udp [ 665.755750][T12718] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1850'. [ 665.773932][T12718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1850'. [ 669.950948][T12750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.578277][T12758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.596259][T12750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.786175][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 671.812625][T12766] loop6: detected capacity change from 0 to 32768 [ 671.864671][T12766] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1854 (12766) [ 671.885456][T12766] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 671.897432][T12766] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 671.907775][T12766] BTRFS info (device loop6): turning on sync discard [ 671.917331][T12766] BTRFS info (device loop6): setting nodatacow, compression disabled [ 671.926691][T12766] BTRFS info (device loop6): turning off barriers [ 671.934142][T12766] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 671.946396][T12766] BTRFS info (device loop6): trying to use backup root at mount time [ 671.955771][T12766] BTRFS info (device loop6): metadata ratio 3 [ 671.962382][T12766] BTRFS info (device loop6): enabling auto defrag [ 671.969778][T12766] BTRFS info (device loop6): max_inline at 0 [ 671.976857][T12766] BTRFS info (device loop6): using free space tree [ 672.104319][T12774] fuse: Bad value for 'fd' [ 672.562185][ T7967] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 672.580750][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 672.580764][ T28] audit: type=1326 audit(1755802391.443:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 672.587689][T12766] BTRFS error (device loop6): failed to load root extent [ 672.618062][T12766] BTRFS warning (device loop6): try to load backup roots slot 1 [ 672.626694][ T48] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 672.630182][ T28] audit: type=1326 audit(1755802391.443:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 672.664322][ T28] audit: type=1326 audit(1755802391.443:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 672.668698][T12766] BTRFS warning (device loop6): couldn't read tree root [ 672.687858][ T28] audit: type=1326 audit(1755802391.443:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 672.687905][ T28] audit: type=1326 audit(1755802391.443:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa1f5f8ebe9 code=0x7ffc0000 [ 672.687937][ T28] audit: type=1326 audit(1755802391.453:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa1f5f8ec23 code=0x7ffc0000 [ 672.695551][T12766] BTRFS warning (device loop6): try to load backup roots slot 2 [ 672.719073][ T28] audit: type=1326 audit(1755802391.513:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1f5f8d69f code=0x7ffc0000 [ 672.797825][ T6810] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 672.809447][T12766] BTRFS warning (device loop6): couldn't read tree root [ 672.817028][T12766] BTRFS warning (device loop6): try to load backup roots slot 3 [ 672.826067][ T28] audit: type=1326 audit(1755802391.523:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa1f5f8ec77 code=0x7ffc0000 [ 672.857401][ T28] audit: type=1326 audit(1755802391.523:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1f5f8d550 code=0x7ffc0000 [ 672.891523][T12766] BTRFS info (device loop6): enabling ssd optimizations [ 672.899846][T12766] BTRFS info (device loop6): rebuilding free space tree [ 672.906024][ T28] audit: type=1326 audit(1755802391.523:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa1f5f8d84a code=0x7ffc0000 [ 672.979776][T12766] BTRFS info (device loop6): checking UUID tree [ 673.277984][ T8596] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 673.503500][T12810] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1863'. [ 673.517398][T12810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1863'. [ 674.530525][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 676.404889][T12851] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1875'. [ 676.432103][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'. [ 679.601964][T12879] bridge0: entered allmulticast mode [ 679.791184][T12889] sctp: [Deprecated]: syz.0.1885 (pid 12889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 679.791184][T12889] Use struct sctp_sack_info instead [ 680.432299][T12891] netlink: 'syz.2.1887': attribute type 4 has an invalid length. [ 680.441871][T12891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1887'. [ 680.453863][T12891] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1887'. [ 680.483957][T12891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1887'. [ 681.723731][T12909] netlink: 'syz.6.1891': attribute type 3 has an invalid length. [ 683.211964][T12925] netlink: 'syz.4.1897': attribute type 12 has an invalid length. [ 685.581347][T12943] netlink: 'syz.4.1902': attribute type 1 has an invalid length. [ 687.148225][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.155331][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.184102][T12950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.137254][T12943] veth3: entered promiscuous mode [ 688.174501][T12943] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 688.185370][T12955] netlink: 'syz.6.1905': attribute type 10 has an invalid length. [ 688.193382][T12955] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1905'. [ 688.220290][T12955] geneve0: entered promiscuous mode [ 688.229371][T12955] team0: Port device geneve0 added [ 690.371356][T12964] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 690.794583][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 690.794602][ T28] audit: type=1326 audit(1755802409.513:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.2.1906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1f5f8ebe9 code=0x0 [ 693.756150][T12995] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1917'. [ 693.774576][T12995] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1917'. [ 693.869248][T13002] netlink: 'syz.0.1919': attribute type 21 has an invalid length. [ 693.878410][T13002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1919'. [ 693.999246][T13005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1920'. [ 697.276952][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1935'. [ 699.054673][T13069] ptrace attach of ""[13070] was attempted by "./syz-executor exec"[13069] [ 700.527220][T13088] No such timeout policy "syz1" [ 704.433603][T13121] ptrace attach of ""[13122] was attempted by "./syz-executor exec"[13121] [ 707.075518][T13148] netlink: 'syz.0.1958': attribute type 12 has an invalid length. [ 708.885248][T13170] ptrace attach of ""[13172] was attempted by "./syz-executor exec"[13170] [ 709.701558][T13177] bond0: (slave ip6erspan0): Releasing active interface [ 710.159534][ C0] ------------[ cut here ]------------ [ 710.165755][ C0] WARNING: CPU: 0 PID: 13172 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 710.176663][ C0] Modules linked in: [ 710.181316][ C0] CPU: 0 PID: 13172 Comm: syz.0.1962 Not tainted 6.6.102-syzkaller #0 [ 710.190082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 710.200680][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 710.207298][ C0] Code: 24 4c 89 e7 e8 fe 37 d5 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 89 12 98 f7 0f 0b e9 f6 f7 ff ff e8 7d 12 98 f7 <0f> 0b e9 48 fb ff ff e8 71 12 98 f7 48 c7 c7 c0 00 24 8e 4c 89 e6 [ 710.227756][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 710.234085][ C0] RAX: ffffffff89ed78a3 RBX: ffffffff89ed66a6 RCX: ffff888078d41e00 [ 710.242174][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 710.250392][ C0] RBP: 0000000000000000 R08: ffff888078d41e00 R09: 0000000000000003 [ 710.258471][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88806c68a3c0 [ 710.266701][ C0] R13: dffffc0000000000 R14: ffff88806c68a8b0 R15: ffff888078e48424 [ 710.274872][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 710.284165][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 710.291049][ C0] CR2: 00007fbb298e56c0 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 710.299113][ C0] Call Trace: [ 710.302594][ C0] [ 710.305586][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 710.311450][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 710.317501][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 710.324851][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 710.330607][ C0] __iterate_interfaces+0x243/0x500 [ 710.336139][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 710.342851][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 710.350611][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 710.357041][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 710.364607][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 710.370539][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 710.375796][ C0] ? hw_scan_work+0xf40/0xf40 [ 710.380809][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 710.386155][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 710.392435][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 710.397760][ C0] handle_softirqs+0x280/0x820 [ 710.402762][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 710.408235][ C0] ? do_softirq+0x180/0x180 [ 710.413155][ C0] __irq_exit_rcu+0xc7/0x190 [ 710.418118][ C0] ? irq_exit_rcu+0x20/0x20 [ 710.422682][ C0] irq_exit_rcu+0x9/0x20 [ 710.427218][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 710.433271][ C0] [ 710.436353][ C0] [ 710.439566][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 710.445795][ C0] RIP: 0010:stack_trace_consume_entry+0x56/0x270 [ 710.452328][ C0] Code: 84 c0 0f 85 04 01 00 00 44 8b 4f 10 4c 8d 77 08 4d 89 f5 49 c1 ed 03 41 0f b6 44 15 00 84 c0 0f 85 1d 01 00 00 45 3b 0e 73 3a <48> 8d 5f 0c 49 89 df 49 c1 ef 03 41 0f b6 04 17 84 c0 0f 85 42 01 [ 710.472524][ C0] RSP: 0018:ffffc90005306eb8 EFLAGS: 00000283 [ 710.478757][ C0] RAX: 0000000000000000 RBX: ffffc90005306fc0 RCX: ffff888078d41e00 [ 710.486778][ C0] RDX: dffffc0000000000 RSI: ffffffff8151188b RDI: ffffc90005306fc0 [ 710.495244][ C0] RBP: 1ffff92000a60dfa R08: ffffc90005306fd0 R09: 000000000000000d [ 710.503724][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8151188b [ 710.511983][ C0] R13: 1ffff92000a60df9 R14: ffffc90005306fc8 R15: ffffc90005306f08 [ 710.520378][ C0] ? do_group_exit+0x21b/0x2d0 [ 710.525305][ C0] ? do_group_exit+0x21b/0x2d0 [ 710.530556][ C0] ? do_group_exit+0x21b/0x2d0 [ 710.535491][ C0] ? __kernel_text_address+0xd/0x30 [ 710.540730][ C0] ? do_group_exit+0x21b/0x2d0 [ 710.545750][ C0] ? stack_trace_save+0xe0/0xe0 [ 710.550642][ C0] arch_stack_walk+0x138/0x190 [ 710.555472][ C0] ? do_group_exit+0x21b/0x2d0 [ 710.560626][ C0] stack_trace_save+0x9c/0xe0 [ 710.565367][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 710.570597][ C0] save_stack+0xf7/0x1f0 [ 710.575009][ C0] ? __reset_page_owner+0x190/0x190 [ 710.580229][ C0] ? free_unref_page_prepare+0x7ce/0x8e0 [ 710.585920][ C0] ? free_unref_page_list+0xbe/0x860 [ 710.591317][ C0] ? release_pages+0x1fa0/0x2220 [ 710.596712][ C0] ? __folio_batch_release+0x71/0xe0 [ 710.602132][ C0] ? shmem_undo_range+0x5d0/0x1a40 [ 710.607955][ C0] ? shmem_evict_inode+0x273/0xa70 [ 710.613279][ C0] ? evict+0x486/0x870 [ 710.617587][ C0] ? __dentry_kill+0x431/0x650 [ 710.622474][ C0] ? dentry_kill+0xb8/0x290 [ 710.627308][ C0] ? dput+0xfe/0x1e0 [ 710.631623][ C0] ? __fput+0x5e5/0x970 [ 710.636062][ C0] ? task_work_run+0x1ce/0x250 [ 710.641229][ C0] ? do_exit+0x90b/0x23c0 [ 710.645814][ C0] ? page_ext_get+0x22/0x2b0 [ 710.650576][ C0] ? page_ext_get+0x1e2/0x2b0 [ 710.655519][ C0] __reset_page_owner+0x4e/0x190 [ 710.660495][ C0] ? rcu_is_watching+0x15/0xb0 [ 710.665452][ C0] free_unref_page_prepare+0x7ce/0x8e0 [ 710.671049][ C0] free_unref_page_list+0xbe/0x860 [ 710.676316][ C0] ? __folio_memcg+0x63/0x160 [ 710.681102][ C0] ? folio_memcg+0x127/0x480 [ 710.685773][ C0] release_pages+0x1fa0/0x2220 [ 710.690689][ C0] ? lru_cache_disable+0x30/0x30 [ 710.695843][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 710.701090][ C0] __folio_batch_release+0x71/0xe0 [ 710.706267][ C0] shmem_undo_range+0x5d0/0x1a40 [ 710.711240][ C0] ? __lock_acquire+0x1334/0x7c80 [ 710.716514][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 710.721888][ C0] ? inode_wait_for_writeback+0x1b4/0x200 [ 710.727847][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 710.733075][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 710.738167][ C0] shmem_evict_inode+0x273/0xa70 [ 710.743313][ C0] ? inode_wait_for_writeback+0x1b4/0x200 [ 710.749102][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 710.754843][ C0] ? sb_clear_inode_writeback+0x360/0x360 [ 710.760876][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 710.766166][ C0] ? bit_waitqueue+0x30/0x30 [ 710.771138][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 710.776523][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 710.783098][ C0] evict+0x486/0x870 [ 710.787071][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 710.792306][ C0] ? proc_nr_inodes+0x230/0x230 [ 710.797305][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 710.802529][ C0] ? _raw_spin_unlock+0x28/0x40 [ 710.807615][ C0] ? iput+0x70a/0x920 [ 710.811636][ C0] __dentry_kill+0x431/0x650 [ 710.816577][ C0] dentry_kill+0xb8/0x290 [ 710.821096][ C0] ? dput+0x3b/0x1e0 [ 710.825128][ C0] dput+0xfe/0x1e0 [ 710.828959][ C0] __fput+0x5e5/0x970 [ 710.833157][ C0] task_work_run+0x1ce/0x250 [ 710.837916][ C0] ? task_work_cancel+0x240/0x240 [ 710.843335][ C0] do_exit+0x90b/0x23c0 [ 710.847684][ C0] ? put_task_struct+0xc0/0xc0 [ 710.852748][ C0] ? lock_chain_count+0x20/0x20 [ 710.857764][ C0] do_group_exit+0x21b/0x2d0 [ 710.862402][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 710.867700][ C0] get_signal+0x12fc/0x1400 [ 710.872779][ C0] arch_do_signal_or_restart+0x96/0x780 [ 710.878713][ C0] ? get_sigframe_size+0x20/0x20 [ 710.883800][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 710.890117][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 710.895930][ C0] exit_to_user_mode_loop+0x70/0x110 [ 710.901252][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 710.907033][ C0] irqentry_exit_to_user_mode+0x9/0x40 [ 710.912709][ C0] exc_page_fault+0x8f/0x110 [ 710.917400][ C0] asm_exc_page_fault+0x26/0x30 [ 710.922740][ C0] RIP: 0033:0x7fe8a9a4f920 [ 710.927497][ C0] Code: Unable to access opcode bytes at 0x7fe8a9a4f8f6. [ 710.935198][ C0] RSP: 002b:00007fe8a79b4178 EFLAGS: 00010206 [ 710.941497][ C0] RAX: 0000000000000000 RBX: 00007fe8a9db6270 RCX: 00007fe8a9b8ebe9 [ 710.949715][ C0] RDX: 00007fe8a79b4180 RSI: 00007fe8a79b42b0 RDI: 000000000000000b [ 710.957913][ C0] RBP: 00007fe8a9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 710.966194][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 710.974570][ C0] R13: 00007fe8a9db6308 R14: 00007fe8a9db6270 R15: 00007fff912b1178 [ 710.982728][ C0] [ 710.985900][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 710.993806][ C0] CPU: 0 PID: 13172 Comm: syz.0.1962 Not tainted 6.6.102-syzkaller #0 [ 711.002240][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 711.012515][ C0] Call Trace: [ 711.016174][ C0] [ 711.019115][ C0] dump_stack_lvl+0x16c/0x230 [ 711.023816][ C0] ? show_regs_print_info+0x20/0x20 [ 711.029377][ C0] ? load_image+0x3b0/0x3b0 [ 711.034219][ C0] panic+0x2c0/0x710 [ 711.038322][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 711.043064][ C0] __warn+0x2e0/0x470 [ 711.047325][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 711.053154][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 711.059623][ C0] report_bug+0x2be/0x4f0 [ 711.064262][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 711.070357][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 711.076465][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 711.082522][ C0] handle_bug+0xcf/0x120 [ 711.086977][ C0] exc_invalid_op+0x1a/0x50 [ 711.091879][ C0] asm_exc_invalid_op+0x1a/0x20 [ 711.097116][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 711.103817][ C0] Code: 24 4c 89 e7 e8 fe 37 d5 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 89 12 98 f7 0f 0b e9 f6 f7 ff ff e8 7d 12 98 f7 <0f> 0b e9 48 fb ff ff e8 71 12 98 f7 48 c7 c7 c0 00 24 8e 4c 89 e6 [ 711.124057][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 711.130244][ C0] RAX: ffffffff89ed78a3 RBX: ffffffff89ed66a6 RCX: ffff888078d41e00 [ 711.138336][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 711.146587][ C0] RBP: 0000000000000000 R08: ffff888078d41e00 R09: 0000000000000003 [ 711.154897][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88806c68a3c0 [ 711.164044][ C0] R13: dffffc0000000000 R14: ffff88806c68a8b0 R15: ffff888078e48424 [ 711.172403][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 711.178269][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 711.184243][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 711.190519][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 711.196217][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 711.201727][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 711.208887][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 711.214649][ C0] __iterate_interfaces+0x243/0x500 [ 711.219949][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 711.226322][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 711.233666][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 711.240036][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 711.247276][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 711.252946][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 711.258178][ C0] ? hw_scan_work+0xf40/0xf40 [ 711.262886][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 711.268213][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 711.274430][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 711.280085][ C0] handle_softirqs+0x280/0x820 [ 711.285147][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 711.290140][ C0] ? do_softirq+0x180/0x180 [ 711.294876][ C0] __irq_exit_rcu+0xc7/0x190 [ 711.299674][ C0] ? irq_exit_rcu+0x20/0x20 [ 711.304735][ C0] irq_exit_rcu+0x9/0x20 [ 711.309169][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 711.315002][ C0] [ 711.318307][ C0] [ 711.321422][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 711.327456][ C0] RIP: 0010:stack_trace_consume_entry+0x56/0x270 [ 711.334507][ C0] Code: 84 c0 0f 85 04 01 00 00 44 8b 4f 10 4c 8d 77 08 4d 89 f5 49 c1 ed 03 41 0f b6 44 15 00 84 c0 0f 85 1d 01 00 00 45 3b 0e 73 3a <48> 8d 5f 0c 49 89 df 49 c1 ef 03 41 0f b6 04 17 84 c0 0f 85 42 01 [ 711.354841][ C0] RSP: 0018:ffffc90005306eb8 EFLAGS: 00000283 [ 711.361451][ C0] RAX: 0000000000000000 RBX: ffffc90005306fc0 RCX: ffff888078d41e00 [ 711.369463][ C0] RDX: dffffc0000000000 RSI: ffffffff8151188b RDI: ffffc90005306fc0 [ 711.377906][ C0] RBP: 1ffff92000a60dfa R08: ffffc90005306fd0 R09: 000000000000000d [ 711.385897][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8151188b [ 711.394005][ C0] R13: 1ffff92000a60df9 R14: ffffc90005306fc8 R15: ffffc90005306f08 [ 711.402099][ C0] ? do_group_exit+0x21b/0x2d0 [ 711.406893][ C0] ? do_group_exit+0x21b/0x2d0 [ 711.411711][ C0] ? do_group_exit+0x21b/0x2d0 [ 711.416526][ C0] ? __kernel_text_address+0xd/0x30 [ 711.421905][ C0] ? do_group_exit+0x21b/0x2d0 [ 711.426972][ C0] ? stack_trace_save+0xe0/0xe0 [ 711.431976][ C0] arch_stack_walk+0x138/0x190 [ 711.437182][ C0] ? do_group_exit+0x21b/0x2d0 [ 711.438192][T13189] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.1969'. [ 711.438359][T13189] net_ratelimit: 23 callbacks suppressed [ 711.438373][T13189] openvswitch: netlink: ct_state flags 00030000 unsupported [ 711.465394][ C0] stack_trace_save+0x9c/0xe0 [ 711.470124][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 711.475446][ C0] save_stack+0xf7/0x1f0 [ 711.479714][ C0] ? __reset_page_owner+0x190/0x190 [ 711.485166][ C0] ? free_unref_page_prepare+0x7ce/0x8e0 [ 711.491205][ C0] ? free_unref_page_list+0xbe/0x860 [ 711.497091][ C0] ? release_pages+0x1fa0/0x2220 [ 711.502146][ C0] ? __folio_batch_release+0x71/0xe0 [ 711.507731][ C0] ? shmem_undo_range+0x5d0/0x1a40 [ 711.512918][ C0] ? shmem_evict_inode+0x273/0xa70 [ 711.518244][ C0] ? evict+0x486/0x870 [ 711.522524][ C0] ? __dentry_kill+0x431/0x650 [ 711.527322][ C0] ? dentry_kill+0xb8/0x290 [ 711.532091][ C0] ? dput+0xfe/0x1e0 [ 711.536161][ C0] ? __fput+0x5e5/0x970 [ 711.540673][ C0] ? task_work_run+0x1ce/0x250 [ 711.545613][ C0] ? do_exit+0x90b/0x23c0 [ 711.550030][ C0] ? page_ext_get+0x22/0x2b0 [ 711.554646][ C0] ? page_ext_get+0x1e2/0x2b0 [ 711.559329][ C0] __reset_page_owner+0x4e/0x190 [ 711.564269][ C0] ? rcu_is_watching+0x15/0xb0 [ 711.569280][ C0] free_unref_page_prepare+0x7ce/0x8e0 [ 711.575162][ C0] free_unref_page_list+0xbe/0x860 [ 711.580291][ C0] ? __folio_memcg+0x63/0x160 [ 711.585232][ C0] ? folio_memcg+0x127/0x480 [ 711.589850][ C0] release_pages+0x1fa0/0x2220 [ 711.594723][ C0] ? lru_cache_disable+0x30/0x30 [ 711.599852][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 711.605184][ C0] __folio_batch_release+0x71/0xe0 [ 711.610391][ C0] shmem_undo_range+0x5d0/0x1a40 [ 711.615420][ C0] ? __lock_acquire+0x1334/0x7c80 [ 711.620536][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 711.625756][ C0] ? inode_wait_for_writeback+0x1b4/0x200 [ 711.631745][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 711.637133][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 711.642244][ C0] shmem_evict_inode+0x273/0xa70 [ 711.647370][ C0] ? inode_wait_for_writeback+0x1b4/0x200 [ 711.653168][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 711.658714][ C0] ? sb_clear_inode_writeback+0x360/0x360 [ 711.664882][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 711.670017][ C0] ? bit_waitqueue+0x30/0x30 [ 711.674600][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 711.680052][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 711.686040][ C0] evict+0x486/0x870 [ 711.690121][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 711.695427][ C0] ? proc_nr_inodes+0x230/0x230 [ 711.700288][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 711.705688][ C0] ? _raw_spin_unlock+0x28/0x40 [ 711.711156][ C0] ? iput+0x70a/0x920 [ 711.715430][ C0] __dentry_kill+0x431/0x650 [ 711.720268][ C0] dentry_kill+0xb8/0x290 [ 711.724783][ C0] ? dput+0x3b/0x1e0 [ 711.728734][ C0] dput+0xfe/0x1e0 [ 711.732639][ C0] __fput+0x5e5/0x970 [ 711.736730][ C0] task_work_run+0x1ce/0x250 [ 711.741597][ C0] ? task_work_cancel+0x240/0x240 [ 711.746813][ C0] do_exit+0x90b/0x23c0 [ 711.750974][ C0] ? put_task_struct+0xc0/0xc0 [ 711.755912][ C0] ? lock_chain_count+0x20/0x20 [ 711.760845][ C0] do_group_exit+0x21b/0x2d0 [ 711.765566][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 711.770790][ C0] get_signal+0x12fc/0x1400 [ 711.775879][ C0] arch_do_signal_or_restart+0x96/0x780 [ 711.781609][ C0] ? get_sigframe_size+0x20/0x20 [ 711.786718][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 711.793042][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 711.798582][ C0] exit_to_user_mode_loop+0x70/0x110 [ 711.803866][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 711.809604][ C0] irqentry_exit_to_user_mode+0x9/0x40 [ 711.815153][ C0] exc_page_fault+0x8f/0x110 [ 711.819742][ C0] asm_exc_page_fault+0x26/0x30 [ 711.824604][ C0] RIP: 0033:0x7fe8a9a4f920 [ 711.829108][ C0] Code: Unable to access opcode bytes at 0x7fe8a9a4f8f6. [ 711.836285][ C0] RSP: 002b:00007fe8a79b4178 EFLAGS: 00010206 [ 711.842785][ C0] RAX: 0000000000000000 RBX: 00007fe8a9db6270 RCX: 00007fe8a9b8ebe9 [ 711.851009][ C0] RDX: 00007fe8a79b4180 RSI: 00007fe8a79b42b0 RDI: 000000000000000b [ 711.859145][ C0] RBP: 00007fe8a9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 711.867387][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 711.875619][ C0] R13: 00007fe8a9db6308 R14: 00007fe8a9db6270 R15: 00007fff912b1178 [ 711.883689][ C0] [ 711.887191][ C0] Kernel Offset: disabled [ 711.892075][ C0] Rebooting in 86400 seconds..