last executing test programs: 33.821741106s ago: executing program 4 (id=105): syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @random="d8be10d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x5, 0x0, 0xe7}}}}}}, 0x0) 33.524779632s ago: executing program 4 (id=106): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x129240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78d09843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3c741dd17c18e8438ef2a565e04603323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (fail_nth: 1) 33.498813632s ago: executing program 1 (id=107): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000f80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6d6f64643d30303030303030303030303030303030303030303230322c756d61736b3d3030b0ab9630303030303030303030303030303030f6303030322c646d6f64653d30303030303030303030303030303030303130303030322c6769643d666f726765742c6c6f6e6761642c73686f727461642c6e6f7672732c696f636806e2f5df2f2352db375a264e766218d461727365743d63703433372c7569643dcc5d666f726765742c756d61736b3d30303030303030303030303030301030303030303030362c646d6f64843d303030303030b0303030", @ANYRESDEC=0x0, @ANYBLOB="010000006e6963622c73657373696f6e08003030303030303010303030303030303030ff352c009f231dba0dfeda4800db5375914c2b5d521b6c9c7728b7b8f31596324872f049a428663123641da0102db1217ab2d4cb65090df6c867b4", @ANYRES32=0x0, @ANYRES8], 0x1, 0xc64, &(0x7f0000001140)="$eJzs3UFsHNd9B+D/G+2KSxutmDhRnTQuNm2RyorlypJiKlbhrmqabQBZFkIxtwBciZS6NUUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDowmCHpnWBZKLD0WAAj0RLWwERQ9sESCngMHMvqWWNGnToihR0vfZ1G935r2Z92Z2ZyRBb14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/9/L5k8+l+90KAOBeujj25ZOn3P8B4JFy+SP++X9pPxsDAAAAAAAAAAAAAABsJ0URT0SKuYtraaJ639W40KnfvDU+Mrp9tcFU1TxUlS9/Gs+dOn3mC88Pn+3lhc7MB9S/2z4dr45dPt98afbG3PzUwsLUZHN8pnN1dnJq11vYa/2tjlcHoHnjtZuT164tNE89e3rT6ltD7w08fnTo3PDTJ57qlR0fGR0du12k0V++dscN6dpphMfhKOJEpHjmOz9J7YgoYu/HonFvz/1Wg1UnjledGB8ZrToy3WnPLJYrL/UORBHR7KvU6h2j7c9F1Or3tA87a3WH4BRlg4+X3Ruba8+3r0xPNS+15xc7i53ZmUup29qyP80o4myKWI6I1YH3b64eRdQixbeOrKUrEXGodxw+Xw0M3rkdxT72cRfKdjbrEcvFA3DODrCBKOKVSPHTt4/F1Xydqa41n4t4pczvR7xZ5osRqfxgnIl4d5vPEQ+mWhTxl+X5P7eWJqvrQe+6cuErzS/NXJvtK9u7rnzE+8P7rhT36f4wuCXvjQN+bWpEEe3qir+W7vw3OwAAAAAAAAAAAAAAAADcbYNRxKcixcv//sfdqf2qcelHzg3//tAv9Y8Zf/JDtlOWfTYilordjck9nAcGXkqXUrrPY4kfZY0o4k/y+L9v3O/GAAAAAAAAAAAAAAAAAAAAPNKK+HGkeOGdY2k5+ucU78xcb15uX5nuzgrbm/u3N2f6+vr6ejN1s5VzIudSzuWcKzlXu1mN+6/qF7l+zomcSzmXc67kXM0Zh3L9nK2cEzmXci7nXMm5mjNquX7OVs6JnEs5l3Ou5FzNGQdk7l4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIdJEUX8PFJ882trKVJEtCImopsrA/e7dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAaSAV8d1I0fyD1sayWkSk6v+uY+UvZ6J1uMyPR2u4zBejdT5nu8pa6xv3of3sTT0V8aNIMdB4a+OE5/Nf777b+BjEm1+//e7TtW4e6q0cem/g8aNHzg2P/tqTO71O2zXg+IXOzM1bzfGR0dGxvsW1vPeP9y0byvst7k7XiYiF1994rT09PTV/5y/Kj8AOq9bX1/+s3Mted3FAXqTajj19JF+Up/YANGMfO1jbVeH6AWjqvpxcHnbl/f/dSPHb7/xn74Zf3f9rGyU27vDxsz+9ff9/YeuGdnn/r22tl+//5T19u/v/E33LXsi/G6nXIhqLN+bqRyMaC6+/caJzo3196vrUzJmTJ784PPzF0yfrhyMa1zrTU32v9n6sAAAAAAAAAAAAAAAAAO6pVMTvRor2j9ZSMyJuVeO1hs4NP33iqUNxqBpvtWnc9qtjl883X5q9MTc/tbAwNdkcn+lcnZ2c2u3uGtVwr/GR0X3pzIca3Of2DzZemp17fb5z/Q8Xt13/WOP8lYXF+fbV7VfHYBQRrf5Dfrxq8PjIaNXo6U57pqp6advB9B9dPRXxX5Hi6plm+mxelsf/bx3hv2n8/9LWDe3T+P+P9S0r95lSET+LFL/1V0/GZ6t2Phb5mG1Slvu7SHH87GdyuThcluu1oftcge7IwLLs/0WKf/r55rK98ZBP3C773K4P7AOiPP9HIsV3/+Lb8et52ebnP2x//h/buqH3n/OJwYg9n/9P9C17bNPzCvbcdfL5PxEpXnzirfiNvOyDnv/Re/bGsVx44/kc+/T9/2TfsqG839+8O10HAAAAAAAAAAB4oNVTEX8fKX4wWkvP52W7+fd/k1s3tE///utX+pZN3p35ij70xZ4PKgAAAAAcEPVUxI8jxfXFtzbGUG8e/903/vN3bo//HElb1lZ/z/fL1XMD7ubf//Ubyvud2Hu3AQAAAAAAAAAAAAAAAAAA4EBJqYjn83zqE9V4/skd51NfiRQv/88zuVw6WpbrzQM/VP3auDg7c+L89PTs1fZi+8r0VHNsrn11qqz7iUix9refyXWLan713nzz3TneG7WIqOZin48Uo//QK9udi703N3l3PvDuXOxl2Y9Fiv/+x81le/NYf/J22VNl2b+JFF/95+3LHr1d9nRZ9tuR4odfbfbKPlaW7T0ftftM0sYfRcSzV2eLfTgrAAAAAAAAAAAAAAAAAAAAPGrqqYg/jxT/e2N5Yyx/nv+/3ve28ubX++b73+JWNc//UDX//06v72T+/+q5Aks77RUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5OKYp4I1LMXVxLKwPl+67Ghc7MzVvjI6PbVxtMVc1DVfnyp/HcqdNnvvD88NlefnD9u+1T8erY5fPNl2ZvzM1PLSxMTTbHZzpXZyendr2Fnes37qhFx6sD0Lzx2s3Ja9cWmqeePb1p9a2h9wYePzp0bvjpE0/1yo6PjI6O9ZWp1e9oz9tKOyw/HEX8daR45js/ST8YiCjiA4/FrnzIZ2e/DVadOF51YnxktOrIdKc9s1iuvNQ7EEVEs69Sq3eM7sG52JNWxFLZ/LLBx8vujc2159tXpqeal9rzi53FzuzMpdRtbdmfZhRxNkUsR8TqwPs3V48iXosU3zqylv5lIOJQ7zh8/uLYl0+e2rkdRdzXI1K2s1mPWC4egHN2gA1EEd+LFD99+1j860BELbo/8bmIV8r8fsSb0f2+pPKDcSbi3W0+RzyYalHE/5fn/9xaensgul/q6rpy4SvNL81cm+0r27uuHKj7w/f+46PWGLwbu921A35takQRP6yu+Gvp33yvAQAAAAAAAAAAAAAAAA6QIn41UrzwzrFUjQ/eGFPcmbnevNy+Mt0d1tcb+9cbM72+vr7eTN1s5ZzIuZRzOedKztWcUeT6OVtlNtbXJ/L7pZzLOVdyruaMQ7l+zlbOiZxLOZdzruRczRm1XD9nK+dEzqWcyzlXcq7mvL8jnwEAAAAAAAAAAAAAAAAAgIdVUf2X4ptfW0vrA935pSeimyvmA33o/SIAAP//8Ab0Vw==") r0 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$notify(r0, 0x402, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 33.361123025s ago: executing program 1 (id=109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) recvfrom(r2, &(0x7f0000000240)=""/66, 0x42, 0x2000, &(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x80) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer], 0x0, 0x0, 0x0}) 33.328543575s ago: executing program 4 (id=111): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$netlink(r0, 0x0, 0x24040080) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='AF', @ANYRES32=r4], 0x4) 33.240793687s ago: executing program 1 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYBLOB="1f59521f1378d551732c8c220c6eb12102738ed1ba67af863d446c32f8d187bba0a4fad9614a43aa11519d91a885d1d7ab964923974d8d5b6b831a2d2904b27e86061e0e1293df240a09387f2c54af202c9f3ccd096096345e5aa5dc379ad46c42b2d2b0d349063a2811d9ddc6ffd4e417128753aff6f75f96033230ee2962715b7e78f6b9534aeb4de2dc29c7e610f3168772a8e3faf8782d30a5dd98b3"], 0x1, 0x555e, &(0x7f0000005f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000042fd405e0000ae00000008000300", @ANYRES32=r5, @ANYBLOB="0c00990040000000190000000a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x50}}, 0xc004) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000e80)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f01}, @device_a, @device_b, @random="67b2a17c5210", {0x9}}, 0x200, 0x3, @broadcast, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{}, {0x1b}, {0x30, 0x1}, {0x6c}, {0x12}, {0x2, 0x1}]}, @val={0x2d, 0x1a, {0x10, 0x2, 0x4, 0x0, {0x5, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x44277998, 0xc}}, [{0xdd, 0x90, "c6227aa4b0fd622f5d100385d7ba3b1d7c0030d731daa64d427aec163921f7dbbb4208ddc3e76bd3361288a96bb4284675b2b93fc414709b1478dbfd984ce16e3e7b7351b3d6f4da288d4bd904f5a03c2042ae1414e7dccbff753ca43e65d3f17ddbe0ef6445e49a0033c23d5197208f79cb167ebd18a10255f96e39bc8eb628b4121ddf4f188e235fcd00e187ce15b1"}, {0xdd, 0x5a, "19249808a8f83c5b8de988c8a9d337ab813596e49878959737f9869aaad8ab421011bc27d496ca159341c7480a3b62ca7c4cdbe7d07c8b7eedf1b200dab1ca90e5c85cce1d1c8e688365b2d584b73e8bf6d2dc658287dc3989eb"}, {0xdd, 0xbd, "6cab3e355ef59cee26e865d4607900e714ba5418bcc7b08056881d28e4e738a3d5cec355349d6d7081c5121ad424b3f2368b647bd33a6de2d17e5399c6db268c902a06ca72a87fbd628e8955c5652c42ee441b079d88f06eca646fdd0adb580d922b1666603c3db6e623111c5dca4e72e8c9d8df8e5057699f62f2a860a8981f4f2fcdfa844a9f77c306e3603ee25a8818fc43ae7d21765ce62e23e03bc462a3d8c9d74ffcd6846923d60d7f3be1e1e319eb8cfc6b35690adbb3b8bce1"}, {0xdd, 0x3e, "405db1d6874dabf72ca2cd504da4c7ed1ad656426c3ef285ae05561afdce6c30d320038337473b13f709134061a72605f41b583d3b4ff7a700118e6b89b6"}, {0xdd, 0xc4, "63cc2a87d5995b00410f55c8ea46b3d8047a2b1ab79c59f2864c2183029ded6be9eb32fd6e5616ce0d5652d49aa72c95428424b5f598769165ec0c57bac346ca4be6e7175f99d5015e6c58c4e87ec47ab03bd706dc57159055fadb8e5e41789c5e953ff538e4494b9be56d7555ec1e300dd0c763c36b9bc7e9a8e9d799e8ca7218a10aba359e9ae38b782bca57845362580c91e2ef1ed6894baf4f156729cf3ad13b08c3eebd8ad5c22cbb2d1c33a11e4c1a8a26f1b0adf76eb01274db1d0225c8ffa0e3"}, {0xdd, 0x7e, "801758f621b40e0254214d151b6be7ac2befdf1ee76d3340b83154135a0d41487e1d3e13a9b3f72142f100529cc56b9ae0f7ea9a0f76585ff074347dd544f7efe35c9f78f35160f17ff3e501c16c6e12f1977808db63951f5f1b158be7418b332307198de9cc0dd94f3565380ee43fd3a14dfa4704d57459f726284c8184"}]}, 0x381) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000001300)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, 0x1, 0x0, @random=0x6, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, [{0xdd, 0xc7, "9acca3ca7dfef52a5b558e455532f0765107a6b93bd269c4ca55adf8c2ecf3630564d133ed60da037d0d8a8c1f55d79474442717701837253f07f0e3147e69237f3a61ac806513a175b441aa181356d8d990b35d88ee449f3797852ac6cd35b27ac664a796d1098b0edcc34e06cbfea78ef13bb2a0cb72c0b89fbad45d31211bd160bbe2abb20e501e0141f64b3dfce0d235d16a2876a1fd79d80c57d0ea1a40fc28212f8f71ee77267cf05a724b7c71a0b23e4fd3a39b18809578c9a04e31c96c4f6d639ab4be"}, {0xdd, 0xd4, "a350aff5b55d82cad9c63a387a22175b55fce0f953b89d8049f836ddb58d5cee2bdb69745063649c782b14c694657209dd7487dd5180c88e5dd9e262c18fb0428272acefe9e3005168fdbd034a17ad5df27cb03f1e2373bf5ebc874828bb9964fdda8e05711819fafd48c4524de75b37d0d1566a3bbfabd4defc18cf858fe92885b55ec4b940295b91773dd65fee30d3f5ba4676a895ce1175fda923d4b2148c83a45ad49dfc163e31ff6f7f7af262a7c58dc01f6d0861c390d5952b449e8a0f240d37b63eb3fdc17e916cf7625e65852b11301d"}, {0xdd, 0xe3, "c0f25b3feaa35d2a960cad751c04a467edd9ce26fe2100ec0199f3803a4a1d55e8b3a7cfeafb923935a37a1ec29b47e4d836198f8993ddd033e0e409e14ac9b78f0c214558778ecccb53773fd1f9a55562ece3d82ec7509dd3478bcbdda8ce39a894670f70650c58c369cff47ac3524235fc6fca79dbca6b14d7a1d1c70475ca41dd9c20c51dd7007a6acbcce5a5563158fe315ed54270c06ed956d1b42dbe999d0eb24dbe3ba0a688774a56adabf48329b6feaf53b7ddcba8fc702416aa530dcd260e763301bb43bf194bec36ecf99d74cab0cf12e79f08c28445914e37a361e8721f"}, {0xdd, 0x25, "f700ed33e4e398b3e24d88db01eecd5083a67bf3388ca0d9bded5f6dfff77f98d812a72f43"}, {0xdd, 0xbe, "5296571e7a4a848adaf4b0c1d27aabcf7f6bcb956f9f2f892fddaf4fa0bf7fe1d80e919a547242aab332f40a01ac40dd6da7a0bbe2cc9edab2de122a2c2106c11cfe88fa3498e755f167d82223615912f6ce76917b54c7a6edcc8e2dbad6474f498078f7670baa88e6a2d18d0a1e25442fa1af9896248862a1770e65879687258640a40718d49be8343356764bc51f9e42d77a50350e13639f5eeb4942cb2117925a11c82279e223ada983fdff28a82d7482e002986170e3681f4d1aa85f"}, {0xdd, 0xe2, "a576cae312c04aae18363bca8a0b5960b9fb3152f8f8ce8004059c134b0266509e5e303671ad31df2fd0bf8a4e1e575fb72c85f4d0735d3aac2c3051fd45e103197ed7abd6566ec8ac086175bacd1dc4640b54c79e1f369e6678541ba718a7e6be9dcb05ef1922ecd7a23d10bf2c88439c9f66307fb6e034c3560241b7ebf3db2e263227d92ffc3f370a235b499b0c65ddf0e43a1f3b4480877385984066fe7ae4a745b87976c793ef6681aef42164a431341fc752063dc21b454babcdb96c2808d8c92720b76632d557f26f68e150dd164cc64c704b2ab4ff86ceb51dbec5f4a4c3"}, {0xdd, 0x64, "d6630072a676152074ef503aee79d792dfef7c711353f17aebfa70a97e50cc123c3b4e7cf7eeec706383c5ec8212eba930984b29830107b030618bb9b72c8f273b688eefdd5c6dc778c100edac117ef5ad4ed767a61b1637fa13da886d2a3547875128e2"}]}, 0x4dd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) lsetxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x5, 0x81, 0xffffffff}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r6, &(0x7f00000001c0)="f2547842ce427bf00d1034dd0b9a67177546a61bfc011eed263036237d5424f1d59d7911fb6e5c218548a03eb9979e18aab3e1775ac9f529741afdfddecfc8ca0d50154d256184775291e1f328c84f396efaa86ba4c2e5fa2f405862e8a059c507a0da8fed6f0d526701164f4df8b6180e644bfb"}, 0x20) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x756a1f8d46efdb6b, 0x0) ioctl$RTC_PLL_GET(r7, 0x80207011, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x2, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x3) 32.407177164s ago: executing program 4 (id=120): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], &(0x7f00000002c0)=""/193, 0x32, 0xc1, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="183000000003000000000000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f00000000c0)=""/148}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', r1, 0x29, 0x2, 0x7f, 0x4, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8000, 0x5, 0x1000}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x45}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) shutdown(r2, 0x1) 31.723047837s ago: executing program 1 (id=124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11fb, &(0x7f0000002d80)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) socket$unix(0x1, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000740)="fe"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 31.524254261s ago: executing program 4 (id=127): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r0, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000, 0xffffffffffffffff}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r11}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r13], &(0x7f0000000200), &(0x7f0000000580)=[r12], &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000540)={0x1, r12}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r14 = fsmount(r7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, r14, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) r15 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r15, 0x104, 0x2, &(0x7f0000001bc0)=0x4, 0x4) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r16, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @random="d8be10d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x5, 0x0, 0xe7}}}}}}, 0x0) 31.453522292s ago: executing program 4 (id=130): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$netlink(r0, 0x0, 0x24040080) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='AF', @ANYRES32=r4], 0x4) 31.363751084s ago: executing program 1 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0xffffffffffffffff, {0x1, 0x0, 0x3}, {0x0, 0x1}, 0x0, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (fail_nth: 1) 31.184969868s ago: executing program 1 (id=134): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x104}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5) syz_io_uring_complete(r1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xebe5a4512ca8e046) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x11) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') pread64(r4, &(0x7f0000000200)=""/123, 0x9e, 0xc8) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0x7, 0x800, 0xcb2, 0x4}, 0x1e, [0x8, 0x9, 0x2, 0xdc, 0x800, 0x1, 0x3, 0x9, 0xf07, 0x1, 0x7fffffff, 0xfff, 0x7f, 0xfffffffb, 0x2, 0x3ff, 0x8, 0x2, 0x3, 0x9, 0x10000, 0x0, 0x10001, 0x100, 0x1, 0x3, 0x10000, 0x6, 0x3, 0x7fffffff, 0x7, 0x8, 0xdc3, 0x6, 0x7, 0x800, 0x5, 0xfffffff8, 0x7, 0xa33, 0x3, 0x6, 0x101, 0x5, 0x3ff, 0x9, 0x4, 0x8, 0x7, 0xffffff7f, 0x4, 0x5, 0xb, 0x4, 0x6, 0x5, 0x3, 0xf, 0x3, 0x401, 0x6, 0x2, 0xd, 0x46b1], [0x1ff, 0x10000, 0x1000, 0xd, 0x9, 0x0, 0x2, 0xb, 0x4, 0xfffffffc, 0x4, 0x4, 0xecb, 0x3ff, 0x7, 0x1e, 0x263b, 0x8, 0x2bad511e, 0x7fff, 0x1, 0x10000, 0x1, 0x0, 0xa2, 0x3, 0x4, 0xaea, 0xfff, 0xffffffff, 0xe, 0x4, 0x5, 0x2, 0x4, 0x58, 0xfffffe01, 0x6, 0xfffffff8, 0x4f, 0x3, 0x7, 0x5, 0x4, 0x1, 0xc42, 0x2, 0x8, 0xfffffff8, 0x80, 0x3, 0xd832, 0x3f, 0x5, 0x8, 0x5, 0x2, 0x4, 0x4, 0x84d2, 0x8, 0x8, 0x7fff, 0x8], [0x0, 0x1, 0x7, 0x9, 0x2, 0xfffffc00, 0x4, 0xffff, 0x1, 0x6, 0xfffffffd, 0x480, 0x0, 0x4, 0x33668993, 0x80000001, 0x547f, 0x0, 0x2, 0x3, 0x6, 0x6, 0x5, 0x200, 0xbe0e, 0x4, 0x7, 0x5bec, 0x9, 0x10000, 0xb, 0x200, 0x2, 0x40000000, 0x8000, 0xfffffff2, 0x0, 0x6, 0x2, 0x7fff, 0x7, 0x10000, 0x10001, 0xffffffff, 0x1, 0x1, 0xa5, 0x9c, 0x2fe, 0x1, 0x80000000, 0x0, 0x6, 0x8, 0x4, 0x1000, 0x8, 0x3, 0x6, 0x7, 0x40, 0x200, 0x3, 0x5], [0xb8200000, 0x10001, 0x4, 0x7fff, 0x13, 0x9c89, 0x8, 0x0, 0x6, 0xfffffe01, 0x400, 0x0, 0x4, 0x2000000, 0x4, 0x8, 0x5, 0x1b1, 0x3b3, 0xe726, 0xfffffffd, 0x4, 0x2, 0x10000, 0x3, 0x471, 0x101, 0x5, 0x7, 0x1, 0x4, 0x800, 0x2, 0x4, 0x8, 0x9, 0x7ff, 0x5, 0xfffffffb, 0x94e, 0x7, 0x587, 0xd, 0x9, 0x1ff, 0xc, 0x0, 0x9e1, 0x7ff, 0x4, 0x5, 0x0, 0xb, 0xfffffffb, 0x5, 0xa, 0x4, 0x93f5, 0x8, 0x100, 0x2, 0x4, 0x5, 0x5]}, 0x45c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x104}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5) (async) syz_io_uring_complete(r1) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xebe5a4512ca8e046) (async) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x11) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') (async) pread64(r4, &(0x7f0000000200)=""/123, 0x9e, 0xc8) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0x7, 0x800, 0xcb2, 0x4}, 0x1e, [0x8, 0x9, 0x2, 0xdc, 0x800, 0x1, 0x3, 0x9, 0xf07, 0x1, 0x7fffffff, 0xfff, 0x7f, 0xfffffffb, 0x2, 0x3ff, 0x8, 0x2, 0x3, 0x9, 0x10000, 0x0, 0x10001, 0x100, 0x1, 0x3, 0x10000, 0x6, 0x3, 0x7fffffff, 0x7, 0x8, 0xdc3, 0x6, 0x7, 0x800, 0x5, 0xfffffff8, 0x7, 0xa33, 0x3, 0x6, 0x101, 0x5, 0x3ff, 0x9, 0x4, 0x8, 0x7, 0xffffff7f, 0x4, 0x5, 0xb, 0x4, 0x6, 0x5, 0x3, 0xf, 0x3, 0x401, 0x6, 0x2, 0xd, 0x46b1], [0x1ff, 0x10000, 0x1000, 0xd, 0x9, 0x0, 0x2, 0xb, 0x4, 0xfffffffc, 0x4, 0x4, 0xecb, 0x3ff, 0x7, 0x1e, 0x263b, 0x8, 0x2bad511e, 0x7fff, 0x1, 0x10000, 0x1, 0x0, 0xa2, 0x3, 0x4, 0xaea, 0xfff, 0xffffffff, 0xe, 0x4, 0x5, 0x2, 0x4, 0x58, 0xfffffe01, 0x6, 0xfffffff8, 0x4f, 0x3, 0x7, 0x5, 0x4, 0x1, 0xc42, 0x2, 0x8, 0xfffffff8, 0x80, 0x3, 0xd832, 0x3f, 0x5, 0x8, 0x5, 0x2, 0x4, 0x4, 0x84d2, 0x8, 0x8, 0x7fff, 0x8], [0x0, 0x1, 0x7, 0x9, 0x2, 0xfffffc00, 0x4, 0xffff, 0x1, 0x6, 0xfffffffd, 0x480, 0x0, 0x4, 0x33668993, 0x80000001, 0x547f, 0x0, 0x2, 0x3, 0x6, 0x6, 0x5, 0x200, 0xbe0e, 0x4, 0x7, 0x5bec, 0x9, 0x10000, 0xb, 0x200, 0x2, 0x40000000, 0x8000, 0xfffffff2, 0x0, 0x6, 0x2, 0x7fff, 0x7, 0x10000, 0x10001, 0xffffffff, 0x1, 0x1, 0xa5, 0x9c, 0x2fe, 0x1, 0x80000000, 0x0, 0x6, 0x8, 0x4, 0x1000, 0x8, 0x3, 0x6, 0x7, 0x40, 0x200, 0x3, 0x5], [0xb8200000, 0x10001, 0x4, 0x7fff, 0x13, 0x9c89, 0x8, 0x0, 0x6, 0xfffffe01, 0x400, 0x0, 0x4, 0x2000000, 0x4, 0x8, 0x5, 0x1b1, 0x3b3, 0xe726, 0xfffffffd, 0x4, 0x2, 0x10000, 0x3, 0x471, 0x101, 0x5, 0x7, 0x1, 0x4, 0x800, 0x2, 0x4, 0x8, 0x9, 0x7ff, 0x5, 0xfffffffb, 0x94e, 0x7, 0x587, 0xd, 0x9, 0x1ff, 0xc, 0x0, 0x9e1, 0x7ff, 0x4, 0x5, 0x0, 0xb, 0xfffffffb, 0x5, 0xa, 0x4, 0x93f5, 0x8, 0x100, 0x2, 0x4, 0x5, 0x5]}, 0x45c) (async) 28.437159311s ago: executing program 2 (id=158): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11fb, &(0x7f0000002d80)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) socket$unix(0x1, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000740)="fe"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 28.219131056s ago: executing program 2 (id=160): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) 28.193651926s ago: executing program 2 (id=161): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x8c001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000240)=""/240) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0xfff, 0x5, 0xfffffffe, 0x5}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x4c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x14, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x8002, 0x200004}}, 0x10) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r6, 0x401, &(0x7f0000000000)={0x0}) 27.669877347s ago: executing program 0 (id=163): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r0, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000, 0xffffffffffffffff}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r11}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r13], &(0x7f0000000200), &(0x7f0000000580)=[r12], &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000540)={0x1, r12}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r14 = fsmount(r7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, r14, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) r15 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r15, 0x104, 0x2, &(0x7f0000001bc0)=0x4, 0x4) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r16, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @random="d8be10d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x5, 0x0, 0xe7}}}}}}, 0x0) 27.630631818s ago: executing program 0 (id=164): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x8c001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000240)=""/240) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0xfff, 0x5, 0xfffffffe, 0x5}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x4c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x14, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x8002, 0x200004}}, 0x10) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r6, 0x401, &(0x7f0000000000)={0x0}) 26.776878364s ago: executing program 0 (id=165): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r0, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000, 0xffffffffffffffff}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r11}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r13], &(0x7f0000000200), &(0x7f0000000580)=[r12], &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000540)={0x1, r12}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r14 = fsmount(r7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, r14, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) r15 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r15, 0x104, 0x2, &(0x7f0000001bc0)=0x4, 0x4) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r16, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @random="d8be10d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x5, 0x0, 0xe7}}}}}}, 0x0) 26.776580855s ago: executing program 2 (id=166): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') exit(0x5) (async) exit(0x8) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000300)=0x80000001, 0x4) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffe3ffffff0180c20000030800450000200000000000119078000000000000000000014e20000c9078010000000e51dc9fbb07cda96e44e0e3a5d57db23eb414af55ce0a9dd29290d65a10a83f475c11ff792ac69336fcf41a408fd37f89cd6a28e03f3260bcc539854d651cc91ad14c7fb147cc12dd99c5a0c1d532cbfde1016d17fd622cb7c2917afff9e9d43721211b8e74c334b983a97d19c4f2edb34b1277a260cc2ffc2db9f822adb0442be537facb4aa2ffc86098995756e148c1e08ed9137197bb13"], 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000000)=0x1, 0x12) 26.736030125s ago: executing program 2 (id=168): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000440)={[{@mb_optimize_scan}, {@discard}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0x80000000}}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0xfb, 0x585, &(0x7f0000000ec0)="$eJzs3U9vE0cfAODfOgkBwvsSJIRe3kMViUOpKA5J+odKPdBj1aJGau/USkyE4mAUO4ikSMChXHqpUKWqKlLVD9A7R9Qv0E+BVJBQhaL20IurddbYSewkBNOY+Hkk45mdMbOzuzOZ8ay1AfStsfSfXMTJiPg2iTjakjYYWeLYWr7VZzdn0lcStdrnfySRZNsa+ZPsfSSL/C8ifv064kxuc7mV5ZX5QqlUXMzi49WFa+OV5ZWzVxYKc8W54tXJqanz705NfvD+e5s/PLy7ur41/dcPnz38+Pw3p1a//+XJsXtJXIgjWVprPV7C7dbIWIxlx2QoLmzIONGFwnpJstc7wK4MZO18KNI+4GgMZK0e2P9uRUQN6FOJ9g99qjEOaMztt5wH1/bfLO/pR/UJ0PDm+idr343Ewfrc6PBqsm5mlB6J0S6Un5bx4PH9ew8eZyfkVle+hwDY1u07EXFucHBd//ffaOn/du/cDvJsLKNL38MCO/AwHf+8Pdxm/Jd7Pv6JlvHPfPa5kTZtdze2b/+5J10opqN0/Pdh2/Hv80Wr0YEs9p/6mG8ouXylVEz7trSbPB1Dw2l8q/Wc86uPap3SmuO/tVdafvrezJF7MrhhvWu2UC28TJ1bPb0T8f/BdvVvjn+TNuPf9HhM77CME8X7b3RK277+r1bt54g3257/5lwnWbc+eXLj+uR4/XoYb1wVm/1598Rvncrf6/qn5//w1vUfTVrXaysvXsZPB/8udkobS7JF0xe8/g8kX9TDB7JtNwrV6uJExIHk083bJ5ufbcQb+dP6nz7Vvv1vdf0fiogvd1j/u8fvdszaC+d/9oXOf4dALemY9OiTr37sVP7O+r936qHT2Zad9H9b7Om6wMscOwAAAAAAAOg1uYg4Ekku/zycy+Xza/d3HI/DuVK5Uj1zubx0dTbqv5UdjaFcY6V7pOV+iInsfthGfHJDfCoijkXEdwOH6vH8TLk0u9eVBwAAAAAAAAAAAAAAAAAAgB4x0uH3/6nfB/Z674BXrvlgg+ldPlofeF1t+8j/bjzpCehJW7T//ffEX2Cdbf/+A/uW9g/9S/uH/qX9Q//S/qF/af/Qv7R/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KrpixfTV2312c2ZND57fXlpvnz97GyxMp9fWJrJz5QXr+XnyuW5UjE/U47Rbf6/Url8bWIylm6MV4tJdbyyvHJpobx0tXrpykJhrnipOPTvVAsAAAAAAAAAAAAAAAAAAABeK5XllflCqVRcFBDYVWCwN3ajO4FarVbrgd3ohcBe90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0PRPAAAA//+BUj0t") r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') write$khugepaged_scan(r0, 0x0, 0x2d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000190001002abd7000fcdbdf251d01020005000d0004"], 0x60}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) ioctl$VHOST_VDPA_GET_AS_NUM(r3, 0x8004af7a, &(0x7f0000000100)) 26.707553966s ago: executing program 0 (id=170): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c0000888d28d7e98e4d8eb0756729882d563ee8bd248e97f70001e0000001000065580018907804001116b2cf7b58809289c3de0a301a870f48e44b78dcf35182ba01cfc3560a865c9fdcde43efe789cbd6bf1f87a471693a00ee68eda2e52e8ed459d3c449810f2ea5c90afe4c2e55404df031263eecd4cf7807d8cda3d4a98f60645a93d3ca166ee86a1f8ff3e619a55a392289668e8f4417c4b1b760677662fca9c442e9887204e0aeecd40299147d37e154af66108779e91201"], 0xfdef) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000400)="170000000000020000ffbe8c2ae1768814002b000203000afdff020657fc5ad90200bb6a880000d6c9db0000db0000eb00df01800a0000ebfc0607bdff5b100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab08d94e82576a7d9a488646b4c6e42fcb73af40024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2", 0xc0) getsockopt$llc_int(r0, 0x10c, 0xc, &(0x7f0000000040), &(0x7f0000001f40)=0x4) 16.027306586s ago: executing program 32 (id=134): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x104}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5) syz_io_uring_complete(r1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xebe5a4512ca8e046) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x11) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') pread64(r4, &(0x7f0000000200)=""/123, 0x9e, 0xc8) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0x7, 0x800, 0xcb2, 0x4}, 0x1e, [0x8, 0x9, 0x2, 0xdc, 0x800, 0x1, 0x3, 0x9, 0xf07, 0x1, 0x7fffffff, 0xfff, 0x7f, 0xfffffffb, 0x2, 0x3ff, 0x8, 0x2, 0x3, 0x9, 0x10000, 0x0, 0x10001, 0x100, 0x1, 0x3, 0x10000, 0x6, 0x3, 0x7fffffff, 0x7, 0x8, 0xdc3, 0x6, 0x7, 0x800, 0x5, 0xfffffff8, 0x7, 0xa33, 0x3, 0x6, 0x101, 0x5, 0x3ff, 0x9, 0x4, 0x8, 0x7, 0xffffff7f, 0x4, 0x5, 0xb, 0x4, 0x6, 0x5, 0x3, 0xf, 0x3, 0x401, 0x6, 0x2, 0xd, 0x46b1], [0x1ff, 0x10000, 0x1000, 0xd, 0x9, 0x0, 0x2, 0xb, 0x4, 0xfffffffc, 0x4, 0x4, 0xecb, 0x3ff, 0x7, 0x1e, 0x263b, 0x8, 0x2bad511e, 0x7fff, 0x1, 0x10000, 0x1, 0x0, 0xa2, 0x3, 0x4, 0xaea, 0xfff, 0xffffffff, 0xe, 0x4, 0x5, 0x2, 0x4, 0x58, 0xfffffe01, 0x6, 0xfffffff8, 0x4f, 0x3, 0x7, 0x5, 0x4, 0x1, 0xc42, 0x2, 0x8, 0xfffffff8, 0x80, 0x3, 0xd832, 0x3f, 0x5, 0x8, 0x5, 0x2, 0x4, 0x4, 0x84d2, 0x8, 0x8, 0x7fff, 0x8], [0x0, 0x1, 0x7, 0x9, 0x2, 0xfffffc00, 0x4, 0xffff, 0x1, 0x6, 0xfffffffd, 0x480, 0x0, 0x4, 0x33668993, 0x80000001, 0x547f, 0x0, 0x2, 0x3, 0x6, 0x6, 0x5, 0x200, 0xbe0e, 0x4, 0x7, 0x5bec, 0x9, 0x10000, 0xb, 0x200, 0x2, 0x40000000, 0x8000, 0xfffffff2, 0x0, 0x6, 0x2, 0x7fff, 0x7, 0x10000, 0x10001, 0xffffffff, 0x1, 0x1, 0xa5, 0x9c, 0x2fe, 0x1, 0x80000000, 0x0, 0x6, 0x8, 0x4, 0x1000, 0x8, 0x3, 0x6, 0x7, 0x40, 0x200, 0x3, 0x5], [0xb8200000, 0x10001, 0x4, 0x7fff, 0x13, 0x9c89, 0x8, 0x0, 0x6, 0xfffffe01, 0x400, 0x0, 0x4, 0x2000000, 0x4, 0x8, 0x5, 0x1b1, 0x3b3, 0xe726, 0xfffffffd, 0x4, 0x2, 0x10000, 0x3, 0x471, 0x101, 0x5, 0x7, 0x1, 0x4, 0x800, 0x2, 0x4, 0x8, 0x9, 0x7ff, 0x5, 0xfffffffb, 0x94e, 0x7, 0x587, 0xd, 0x9, 0x1ff, 0xc, 0x0, 0x9e1, 0x7ff, 0x4, 0x5, 0x0, 0xb, 0xfffffffb, 0x5, 0xa, 0x4, 0x93f5, 0x8, 0x100, 0x2, 0x4, 0x5, 0x5]}, 0x45c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x104}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5) (async) syz_io_uring_complete(r1) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xebe5a4512ca8e046) (async) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x11) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') (async) pread64(r4, &(0x7f0000000200)=""/123, 0x9e, 0xc8) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0x7, 0x800, 0xcb2, 0x4}, 0x1e, [0x8, 0x9, 0x2, 0xdc, 0x800, 0x1, 0x3, 0x9, 0xf07, 0x1, 0x7fffffff, 0xfff, 0x7f, 0xfffffffb, 0x2, 0x3ff, 0x8, 0x2, 0x3, 0x9, 0x10000, 0x0, 0x10001, 0x100, 0x1, 0x3, 0x10000, 0x6, 0x3, 0x7fffffff, 0x7, 0x8, 0xdc3, 0x6, 0x7, 0x800, 0x5, 0xfffffff8, 0x7, 0xa33, 0x3, 0x6, 0x101, 0x5, 0x3ff, 0x9, 0x4, 0x8, 0x7, 0xffffff7f, 0x4, 0x5, 0xb, 0x4, 0x6, 0x5, 0x3, 0xf, 0x3, 0x401, 0x6, 0x2, 0xd, 0x46b1], [0x1ff, 0x10000, 0x1000, 0xd, 0x9, 0x0, 0x2, 0xb, 0x4, 0xfffffffc, 0x4, 0x4, 0xecb, 0x3ff, 0x7, 0x1e, 0x263b, 0x8, 0x2bad511e, 0x7fff, 0x1, 0x10000, 0x1, 0x0, 0xa2, 0x3, 0x4, 0xaea, 0xfff, 0xffffffff, 0xe, 0x4, 0x5, 0x2, 0x4, 0x58, 0xfffffe01, 0x6, 0xfffffff8, 0x4f, 0x3, 0x7, 0x5, 0x4, 0x1, 0xc42, 0x2, 0x8, 0xfffffff8, 0x80, 0x3, 0xd832, 0x3f, 0x5, 0x8, 0x5, 0x2, 0x4, 0x4, 0x84d2, 0x8, 0x8, 0x7fff, 0x8], [0x0, 0x1, 0x7, 0x9, 0x2, 0xfffffc00, 0x4, 0xffff, 0x1, 0x6, 0xfffffffd, 0x480, 0x0, 0x4, 0x33668993, 0x80000001, 0x547f, 0x0, 0x2, 0x3, 0x6, 0x6, 0x5, 0x200, 0xbe0e, 0x4, 0x7, 0x5bec, 0x9, 0x10000, 0xb, 0x200, 0x2, 0x40000000, 0x8000, 0xfffffff2, 0x0, 0x6, 0x2, 0x7fff, 0x7, 0x10000, 0x10001, 0xffffffff, 0x1, 0x1, 0xa5, 0x9c, 0x2fe, 0x1, 0x80000000, 0x0, 0x6, 0x8, 0x4, 0x1000, 0x8, 0x3, 0x6, 0x7, 0x40, 0x200, 0x3, 0x5], [0xb8200000, 0x10001, 0x4, 0x7fff, 0x13, 0x9c89, 0x8, 0x0, 0x6, 0xfffffe01, 0x400, 0x0, 0x4, 0x2000000, 0x4, 0x8, 0x5, 0x1b1, 0x3b3, 0xe726, 0xfffffffd, 0x4, 0x2, 0x10000, 0x3, 0x471, 0x101, 0x5, 0x7, 0x1, 0x4, 0x800, 0x2, 0x4, 0x8, 0x9, 0x7ff, 0x5, 0xfffffffb, 0x94e, 0x7, 0x587, 0xd, 0x9, 0x1ff, 0xc, 0x0, 0x9e1, 0x7ff, 0x4, 0x5, 0x0, 0xb, 0xfffffffb, 0x5, 0xa, 0x4, 0x93f5, 0x8, 0x100, 0x2, 0x4, 0x5, 0x5]}, 0x45c) (async) 16.019891245s ago: executing program 2 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@getchain={0x4c, 0x66, 0x801, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xa, 0x1}, {0xffff, 0x8}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008850}, 0x2400c055) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r4, 0xfffffffffffffffe, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x2400c840}, 0x48010) getpid() sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000480006803c00047329000000001f0000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee7f2bf9b6fc7987cca419890800060001ffffff"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 16.019016725s ago: executing program 3 (id=173): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000008000002000000008000300", @ANYRES32=r3, @ANYBLOB="1c0022800500040008000000050001"], 0x38}}, 0x4000800) 16.003593426s ago: executing program 33 (id=130): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$netlink(r0, 0x0, 0x24040080) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='AF', @ANYRES32=r4], 0x4) 15.993885446s ago: executing program 0 (id=175): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x8c001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000240)=""/240) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0xfff, 0x5, 0xfffffffe, 0x5}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x4c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x14, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x8002, 0x200004}}, 0x10) clock_gettime(0x0, &(0x7f0000000080)) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x401, &(0x7f0000000000)={0x0}) 15.909206827s ago: executing program 3 (id=176): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1210890, &(0x7f00000081c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="d435d9afbeca2782ae19ed8bd41575ea7d9c9874c548e8a3b6d356a39d4518f41339a72ccd509df9e4d9d79abcc2f6da6768bd4f40d0beffba62fb5009c1e93fd4fe41778354a47dc025c852e30590bfb3cccdb6c83b0fdb27f16f03d72df1eac33d4948589efe30db71a5f7e31a303bf4ed9f3125c0a7aa0008ddaa", @ANYRES8], 0x1, 0xda6, &(0x7f0000003c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) sendfile(r0, r0, 0x0, 0x1000000000007) 15.834832869s ago: executing program 3 (id=177): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610916dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84b99b2ed90f71810cd92eeca69f5275cb7b7027d4babf643bd69b0a68134c022fe5dcd03834f547325ac2d1a5d16f074d898946ff71afa90180b317e645dd58a922e5d907462cd50dc23801c48c0d49ab012961d84d2eb85a3730a3f3177da048c3bc991216b11dca020afefc24ae7583b59534a0ab1fca82bf473216141db8e9864f7861d0500a920e1a8d3352d0662f586e743386e87b6c0c5ed6e4d192ef2990b44cedbb708e7a18b20dcd5573b603c4d659992647ffa8210abf4e9d232b52a8ea1dd1c045afd8e472cd1fbb775e89cca49d136a6"], 0x1, 0x4446, &(0x7f00000088c0)="$eJzs3b9vHFkdAPDvjH3ENslhH1ccEhIrcRIIkGVfBfgkHMeJz76YoMCdEM1mbW8Sw9ob2WtEkcJ0kaiQKBBFBBKdq8gFbfgTaChDHQkKGiSkCKPdnXV2xrt4E3kdkvt8Co/n/ba/M2/fFLMvzTTubu6WNndLle1Sff327geln9dre1vVSM9Jz/7fOr/+GcwwrpNXfe19lt24cu2Hn34Q8eeNvz49Ojo6iqbR6Gm26/d//fP+evexIy3Uabbbu7Wz8pOIePfEuJpGIuLHf4pIIuJylraQHccj4lK08z69/6tbpTMazaMn1Q/Lz1YfHM69v3Lw8LD/355E/K72pW/d2fr7V0fm/vaNM+oeAAAAAAAAAAAAAAAAAIDX3NLNG5/8YGY2HicxepCcfF93KTv2fT/26Kx8JWJy6H8uAAAAAAAAAAAAAAAAAAAA/F96/v5/KXmnx/v/i9lxvk/9o+8Nf4wMz/L3byxenZnN9n9PTuR/O0v6x+WRmOqx73tx//fLhfq9938/2c/L6oyv0+9kJOl07jxNp6cj/pBt/P5eMpHW6ruNb96u721vnNkwXlv5+Ld3789FJ9vQf9D4LxTaH/7+/188cTU1z2+d3SX2RsvHf6RvuT/+Mhko/lcK9c4j/ry8fPxHW2nj3QXm2xNAM/6/Hj09/ouF9ocV/7cjopQ0x1rKzQDNNUwzvd96hbx8/N9qpeWmzuwf2e/+/3ch/lcL7b+q+X+/+EFET/n4f66VNpYr8fz+n0pPv/+vFdp/FfFvjn/f5/9A8vG/0E4czRVp/ScHnf+XCu0PK/6fpNk4305yV8BB0k7v+3115OTjP3Yi//nzXzrQ+u+jQv3zev7r9Nt5/utM/19P2s9/9JaP/3jfcoPe/8uFesOe/+ejFElc7Jya9V9QPv4TrbT82rn9pZzd8b/wP+K/Umh/WPFvrUrG2vHvnv//c6Gd/nvrv4Hk4//5dmLaXWK/9bO1/ktOX/9/XGi/Hf9h3pYn13/N8e+nQ+zyDZKP/8W+5Zrx/8sAn//XC/WGv/6PmDHrv7R8/C/1Lde6/8dOj/9qod6w4/+1YTYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BpYyI6TkaTTufM0nZ6OuJKdvxcTyVplo7xWq6//bDdiMUsvxTvJnVp9rVIrb27XN6rlSq1WX4+4muW/G2PJbq3eKG9V7l07bms8uVut7DTWqpVGRCxl6V+OS5221jYbW5V7EfHRcd4X0vrOvbuV7fLG5s53Z2ZmZmL5eAxTSfUXjep2o917Ozdi5bjuZNI1uFb2x8djuZj8tL63s12ptdKvd9Wp1dcrta46q1neb2Iqaezsba9XGtVyrX6n099pkv0XDM4LmG/+SCMWl2/+6Ob12Yli/q2kfVwY3hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAOP577z24gYbZ+lETHf+SXpVf7Rk+qH5WerDw7n3l85eHj4tF85AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYVdOkZpIIjCAPxmLNTOY1gtu53tiiJauCJ4Aj2Gh9GjeAnvkCJF2hQhkMxC2OzCNkn1fc2D+Zl5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDP03v38VY3ESmuNpcRf1//i8P8pdSf+/H7F2eYkdN5fu0eHuum/Hs6yu/K0bLNu3S9+v6Mkdr7HezJcJ/2+j7Xk3NN7dvUfH3fm0i5ioi25Lcp56qa9xYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+BQAA///8NR6x") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x22) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$hfs(&(0x7f0000000840), &(0x7f0000000140)='./file0\x00', 0x2000000, &(0x7f0000000040)={[{@type={'type', 0x3d, "f7004596"}}, {@file_umask={'file_umask', 0x3d, 0x7}}, {@type={'type', 0x3d, "ee2d2633"}}]}, 0x5, 0x2f7, &(0x7f0000000880)="$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") 88.816518ms ago: executing program 34 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@getchain={0x4c, 0x66, 0x801, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xa, 0x1}, {0xffff, 0x8}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008850}, 0x2400c055) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r4, 0xfffffffffffffffe, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x2400c840}, 0x48010) getpid() sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000480006803c00047329000000001f0000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee7f2bf9b6fc7987cca419890800060001ffffff"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 78.315288ms ago: executing program 3 (id=179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}}, 0x4000) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4300, 0x20) io_uring_enter(r2, 0xa9a, 0x3ff7, 0x8, &(0x7f0000000080)={[0x2]}, 0x8) 69.441068ms ago: executing program 0 (id=186): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x8c001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000240)=""/240) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0xfff, 0x5, 0xfffffffe, 0x5}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x4c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x14, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x8002, 0x200004}}, 0x10) clock_gettime(0x0, &(0x7f0000000080)) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x401, &(0x7f0000000000)={0x0}) 1.25891ms ago: executing program 3 (id=180): clock_adjtime(0x0, &(0x7f00000002c0)={0x19b1, 0xc1bdf10000000003, 0x100000000, 0x2, 0x0, 0x3, 0x80000001, 0x200, 0x0, 0x300, 0x400, 0x0, 0x0, 0x2000000000000, 0x0, 0x282, 0x4, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x2, 0x0, {}, {0xffffffffffffffff}, 0x0, 0xd4}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000500)={[{@quota}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x66, 0x61, 0x64, 0x35, 0x35, 0x34], 0x2d, [0x64, 0x37, 0x37, 0x63], 0x2d, [0x37, 0x65, 0x33, 0x63], 0x2d, [0x33, 0x33, 0x62, 0x35], 0x2d, [0x64, 0x33, 0x65, 0x31, 0x66, 0x34, 0x64, 0x34]}}}, {@pcr={'pcr', 0x3d, 0xd}}, {@uid_gt={'uid>', r0}}, {@fowner_lt={'fowner<', r0}}, {@subj_user={'subj_user', 0x3d, '\xf39u'}}, {@appraise}]}, 0x6, 0x515, &(0x7f0000001140)="$eJzs3V1PY3kZAPDnlHYGdtGyu16smziL+xLG6BRY9oV4sS6JL1ebGNd7BqEQQqETKLsDmSjzCTRmoibe6JU3Jn4AEzMfwZhMondeeKWZKONceGNqTns6A6XFTqa0M/D7JYfzP/8/Pc/zFFrOGz0BXFiTEfFRRIxExNsRUcz6c9kUB80p/b4Hh7eW0ymJev2TfyaRZH3t63wxe1jqe9+J+EFyMu7O3v7GUqVS3j7evX9tfXNprbxW3pqbm31//oP59+ZneqwkyZ82+lJEfPjNhz/78W++/eEfvvbZ3xb/cfWHaVrXs/FOdfRDs/RCjB5bPj/S35t8o0IAAJ4Hr0TEyxHxRkR8JYoxEqduRgMAAADPofo3xi+3mgAAAMD5lIuI8Uhypex63/HI5Uql5jW8X4gXcpXqTu2rq9XdrZV0LGIiCrnV9Up5JrtWeCIKSbo822g/Xn6nbXkuuwb3TnEsXW6MAQAAAIOx0Lb//7DY3P8HAAAAzpnOJ+NHBp4HAAAAcHZcjA8AAADnn/1/AAAAONe++/HH6VR/cHircR+AlU/3djeqn15bKe9slDZ3l0vL1e0bpbVqda1SLvXwHwGVavXGu7G1e3O6lt+pTe/s7S9uVne3aouN+3ovll8eQE0AAADAcS+9fvcvSUQcfH2sMaUuZWOFoWYGPEOSfFvH9S8PKROgLzoc0h879QGTu2eXDDBQ7X/TgYvDPj6QtHe0bRiMdttU+GN7x5X/G8s2BwAADMfUF53/h4sqN+wEgKH5yYmeS0PJAxi8no/FT55tHsDgFdzmDy68E+f/24x2Gzhx/r+bev2JEgIAAPpuvDk7iOxc4HjkcqXSo9OCyep6pTwTEZ+PiD8XC5fT5dkh5gsAAAAAAAAAAAAAAAAAAAAAAAAAz6N6PYk6AAAAcK5F5P6eZPf/miq+Nd5+fOBS8p9iZHcF/uyXn/z85lKttj2b9v/rUX/tF1n/O8M4ggEAAAAXUeHU0dZ+ems/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66cHhreXWNMi49xdiLCY6xc/HaGM+GoWIeOHfSeSPPC6JiJE+xD+4HRGvdoqfpGnFRJZFe/xcRIwNOf6LfYgPF9ndhYj4qNPrLxeTjXnn118+m57W/YXGi7xj/Nb730iX97/P9RjjtXu/m+4a/3bEa/mT8ccjeRQ/6RL/zR7jX//+/n63sfqvI6Y6/v1JmrNc9o21zRvTO3v719Y3l9bKa+WtubnZ9+c/mH9vfmZ6db1Szr52jPHTL/3+4E7X+psBjsZv1TnRzPBH3ep/q8f6/3vv5uErzWbhZPyIq292/vm/2ph3fv7T34m3s6cnHZ9qtQ+a7aOu/PZPV7rllsZf6fL8N3/+xfrj+Plj9V/trfyjNf+qt4cAAGdpZ29/Y6lSKW8PoPHGu/1bYdJopFtBA0p+2I3WwY5nJZ/R4US/HMOt/VtPvZ7W5vDTrOevfasr3WfoPDTENyUAAOBMPN7oH3YmAAAAAAAAAAAAAAAAAAAAcHE1/v9/5Ak/CPD1J/uksfaYB8MpFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgVP8LAAD//9WHwV0=") (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x90) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x8201, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffe, 0x101100) (rerun: 32) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) 0s ago: executing program 3 (id=188): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e20, 0x7, @remote, 0x3}, r4, 0x5}}, 0x48) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1832b, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r4, 0x1000}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r8, 0xc0086202, &(0x7f0000000140)=0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 31.070511][ T4310] cgroup: Unknown subsys name 'net' [ 31.346637][ T4310] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.601772][ T4310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.804288][ T4325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.805928][ T4325] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.807493][ T4325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.808830][ T4325] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.814328][ T4334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.815510][ T4334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.816715][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.818140][ T4334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.818573][ T4335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.819986][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.821242][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.821537][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.822768][ T4335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.824662][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.825473][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.826209][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.828066][ T4335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.828313][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.830525][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.831589][ T4335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.831820][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.839427][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.842343][ T4322] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.843767][ T4322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.851675][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.855430][ T4325] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.857076][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.860624][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.871726][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.873176][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.972895][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 32.991113][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 33.008176][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 33.021030][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.022535][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.024408][ T4321] device bridge_slave_0 entered promiscuous mode [ 33.035709][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.036939][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.038484][ T4321] device bridge_slave_1 entered promiscuous mode [ 33.055933][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 33.059968][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.064189][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.065471][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.067091][ T4330] device bridge_slave_0 entered promiscuous mode [ 33.073331][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.081230][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.082495][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.085013][ T4330] device bridge_slave_1 entered promiscuous mode [ 33.096069][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.097306][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.098910][ T4320] device bridge_slave_0 entered promiscuous mode [ 33.109632][ T4321] team0: Port device team_slave_0 added [ 33.110875][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.111959][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.113476][ T4320] device bridge_slave_1 entered promiscuous mode [ 33.127945][ T4321] team0: Port device team_slave_1 added [ 33.137086][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.139673][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.140778][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.142199][ T4326] device bridge_slave_0 entered promiscuous mode [ 33.144356][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.145568][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.149784][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.151893][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.153151][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.155385][ T4326] device bridge_slave_1 entered promiscuous mode [ 33.159851][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.161860][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.163039][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.167599][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.177276][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.180343][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.189697][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 33.195671][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.203124][ T4330] team0: Port device team_slave_0 added [ 33.205336][ T4330] team0: Port device team_slave_1 added [ 33.212106][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.219321][ T4320] team0: Port device team_slave_0 added [ 33.232647][ T4320] team0: Port device team_slave_1 added [ 33.284930][ T4321] device hsr_slave_0 entered promiscuous mode [ 33.324168][ T4321] device hsr_slave_1 entered promiscuous mode [ 33.372008][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.373099][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.376887][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.379259][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.380311][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.384340][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.387607][ T4326] team0: Port device team_slave_0 added [ 33.388772][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.390009][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.391543][ T4327] device bridge_slave_0 entered promiscuous mode [ 33.400695][ T4326] team0: Port device team_slave_1 added [ 33.402187][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.403434][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.405137][ T4327] device bridge_slave_1 entered promiscuous mode [ 33.406639][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.407698][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.412024][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.423565][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.427213][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.431118][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.446973][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.448036][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.452249][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.458274][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.461951][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.463116][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.467559][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.514875][ T4330] device hsr_slave_0 entered promiscuous mode [ 33.554068][ T4330] device hsr_slave_1 entered promiscuous mode [ 33.593897][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.595146][ T4330] Cannot create hsr debugfs directory [ 33.596981][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.654907][ T4320] device hsr_slave_0 entered promiscuous mode [ 33.704208][ T4320] device hsr_slave_1 entered promiscuous mode [ 33.743870][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.745100][ T4320] Cannot create hsr debugfs directory [ 33.754656][ T4327] team0: Port device team_slave_0 added [ 33.768104][ T4327] team0: Port device team_slave_1 added [ 33.805009][ T4326] device hsr_slave_0 entered promiscuous mode [ 33.854115][ T4326] device hsr_slave_1 entered promiscuous mode [ 33.893871][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.894984][ T4326] Cannot create hsr debugfs directory [ 33.914550][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.915642][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.919712][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.932872][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.934076][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.937984][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.035309][ T4327] device hsr_slave_0 entered promiscuous mode [ 34.073993][ T4327] device hsr_slave_1 entered promiscuous mode [ 34.113884][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.115154][ T4327] Cannot create hsr debugfs directory [ 34.134957][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.169213][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.206026][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.258406][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.306231][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.349823][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.386601][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.425865][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.488811][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.525279][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.569039][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.611243][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.679683][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.705978][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.755716][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.798114][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.834283][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 34.846825][ T4327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.885905][ T4327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.914402][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 34.914891][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 34.915384][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 34.916358][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 34.929454][ T4327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.976877][ T4327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.025717][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.040326][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.048817][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.051116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.056309][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.057817][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.059479][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.069482][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.082481][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.084741][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.086455][ T1658] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.087640][ T1658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.089413][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.090978][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.092581][ T1658] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.093867][ T1658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.096044][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.097531][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.108794][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.110333][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.111933][ T1658] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.112974][ T1658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.114711][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.116174][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.117560][ T1658] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.118605][ T1658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.123367][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.125990][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.138391][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.140344][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.144819][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.151327][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.152975][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.155582][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.157141][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.158511][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.162770][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.169499][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.171138][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.173194][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.175626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.180413][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.181903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.183435][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.184657][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.186328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.188299][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.189893][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.200400][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.202846][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.205154][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.206680][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.208621][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.210463][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.211900][ T1578] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.213075][ T1578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.214571][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.216243][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.220000][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.222704][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.226772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.232287][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.235022][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.236407][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.237960][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.239462][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.243153][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.250961][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.256090][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.261550][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.262966][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.264837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.266238][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.267715][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.269650][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.276513][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.277844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.279822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.285514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.287108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.288621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.290212][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.291729][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.292774][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.312133][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.313626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.317382][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.318984][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.320059][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.321373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.325073][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.330254][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.332186][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.333935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.335932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.337402][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.339072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.340464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.341897][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.343770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.345599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.347045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.348627][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.350000][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.351158][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.352583][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.354790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.357398][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.363149][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.365648][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.367204][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.368686][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.369773][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.377150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.378490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.383933][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.391751][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.405233][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.409258][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.411572][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.413431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.425284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.426926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.428507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.430899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.432499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.436607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.446613][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.450627][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.452437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.453708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.463150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.465265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.478603][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.480172][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.481867][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.483473][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.495965][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.497521][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.505518][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.508008][ T4320] device veth0_vlan entered promiscuous mode [ 35.512311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.513582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.522246][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.525605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.527003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.531861][ T4320] device veth1_vlan entered promiscuous mode [ 35.548836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.550380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.551977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.553767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.556759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.558328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.559751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.562157][ T4321] device veth0_vlan entered promiscuous mode [ 35.573092][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.574929][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.576080][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.577286][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.578829][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.581719][ T4321] device veth1_vlan entered promiscuous mode [ 35.584933][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.588654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.590312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.591887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.594918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.596352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.604573][ T4330] device veth0_vlan entered promiscuous mode [ 35.618804][ T4330] device veth1_vlan entered promiscuous mode [ 35.628669][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.630264][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.631806][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.633293][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.635755][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.637392][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.638835][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.640854][ T4326] device veth0_vlan entered promiscuous mode [ 35.650913][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.652592][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.663439][ T4320] device veth0_macvtap entered promiscuous mode [ 35.666620][ T4320] device veth1_macvtap entered promiscuous mode [ 35.668065][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.669665][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.671115][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.672662][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.676170][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.678034][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.680584][ T4321] device veth0_macvtap entered promiscuous mode [ 35.682829][ T4321] device veth1_macvtap entered promiscuous mode [ 35.685269][ T4326] device veth1_vlan entered promiscuous mode [ 35.689481][ T4330] device veth0_macvtap entered promiscuous mode [ 35.692268][ T4330] device veth1_macvtap entered promiscuous mode [ 35.707746][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.709147][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.710872][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.712419][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.715122][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.716765][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.718283][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.719902][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.721461][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.725058][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.726615][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.728825][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.733618][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.738096][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.739795][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.741293][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.742880][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.745477][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.747137][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.749616][ T4326] device veth0_macvtap entered promiscuous mode [ 35.753138][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.755365][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.756772][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.758233][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.761185][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.762664][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.764952][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.766178][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.768352][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.769875][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.772611][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.774694][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.776171][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.777786][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.780006][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.782900][ T4326] device veth1_macvtap entered promiscuous mode [ 35.786471][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.788004][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.789568][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.792512][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.795472][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.797034][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.798769][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.801025][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.807028][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.808603][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.810723][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.812051][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.813384][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.815112][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.820591][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.822317][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.832398][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.835057][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.836570][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.838004][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.860724][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.862507][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.866317][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.867865][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.869379][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.870955][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.873362][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.882446][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.884386][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.887367][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.888828][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.891085][ T4327] device veth0_vlan entered promiscuous mode [ 35.902353][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.905383][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.908310][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.910042][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.911562][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.913181][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.915471][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.917209][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.919567][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.931180][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.932906][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.948198][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.949467][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.951322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.955944][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.957481][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.958007][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.958805][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.960126][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.961308][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.967021][ T4327] device veth1_vlan entered promiscuous mode [ 35.969874][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.971506][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.972960][ T1658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.978165][ T1658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.979827][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.992551][ T1658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.993779][ T1658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.999852][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.001652][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.013151][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.014506][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.019348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.029966][ T1658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.031183][ T1658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.033104][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.035268][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.036713][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.055319][ T4327] device veth0_macvtap entered promiscuous mode [ 36.057705][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.058169][ T4327] device veth1_macvtap entered promiscuous mode [ 36.058822][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.062044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.063696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.068384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.077605][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.079643][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.081315][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.083131][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.086310][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.087850][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.089406][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.091157][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.093580][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.106025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.107814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.136208][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.137786][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.139248][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.141977][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.147166][ T4431] FAULT_INJECTION: forcing a failure. [ 36.147166][ T4431] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.149234][ T4431] CPU: 0 PID: 4431 Comm: syz.1.2 Not tainted syzkaller #0 [ 36.150258][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.150376][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 36.152067][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.153530][ T4431] Call trace: [ 36.155810][ T4431] dump_backtrace+0x1c8/0x1f4 [ 36.156530][ T4431] show_stack+0x2c/0x3c [ 36.157206][ T4431] __dump_stack+0x30/0x40 [ 36.157929][ T4431] dump_stack_lvl+0xf8/0x160 [ 36.158612][ T4431] dump_stack+0x1c/0x5c [ 36.159193][ T4431] should_fail_ex+0x3c4/0x520 [ 36.159837][ T4431] should_fail+0x14/0x24 [ 36.159942][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.160421][ T4431] should_fail_usercopy+0x20/0x30 [ 36.162173][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.162982][ T4431] copy_msghdr_from_user+0xb4/0x4ac [ 36.165523][ T4431] __sys_sendmsg+0x200/0x320 [ 36.166346][ T4431] __arm64_sys_sendmsg+0x80/0x94 [ 36.167200][ T4431] invoke_syscall+0x98/0x2bc [ 36.168020][ T4431] el0_svc_common+0x138/0x258 [ 36.168754][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.170051][ T4431] do_el0_svc+0x58/0x13c [ 36.170781][ T4431] el0_svc+0x58/0x138 [ 36.171437][ T4431] el0t_64_sync_handler+0x84/0xf0 [ 36.172215][ T4431] el0t_64_sync+0x18c/0x190 [ 36.172881][ T4327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.173611][ T1658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.175923][ T4327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.175953][ T4327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.177296][ T1658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.179973][ T4327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.189286][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.190935][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.192599][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.239630][ T1658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.241065][ T1658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.243020][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.257187][ T1578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.258596][ T1578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.260470][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.306034][ T4441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 36.358277][ T4441] loop0: detected capacity change from 0 to 256 [ 36.365605][ T4441] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.367555][ T4441] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 36.371938][ T4441] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 36.462196][ T4451] fuse: Unknown parameter '"Û*nhP:K¥' [ 36.468098][ T4451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8'. [ 36.760006][ T4457] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 36.926458][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 36.996507][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 36.997651][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 36.997815][ T4325] Bluetooth: hci1: command 0x041b tx timeout [ 36.998557][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 37.114429][ T1658] tipc: Subscription rejected, illegal request [ 37.118398][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 37.122020][ T4467] loop2: detected capacity change from 0 to 128 [ 37.132295][ T4467] FAT-fs (loop2): Unrecognized mount option "gid=0xffffffffffffffff [ 37.132295][ T4467] " or missing value [ 37.372642][ T4473] ======================================================= [ 37.372642][ T4473] WARNING: The mand mount option has been deprecated and [ 37.372642][ T4473] and is ignored by this kernel. Remove the mand [ 37.372642][ T4473] option from the mount to silence this warning. [ 37.372642][ T4473] ======================================================= [ 37.612312][ T4471] loop4: detected capacity change from 0 to 32768 [ 37.644887][ T4471] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.14 (4471) [ 37.661709][ T4471] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 37.675913][ T4471] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 37.692474][ T4471] BTRFS info (device loop4): using free space tree [ 37.813495][ T4471] BTRFS info (device loop4): enabling ssd optimizations [ 37.924520][ T4471] tipc: Started in network mode [ 37.924561][ T4471] tipc: Node identity 7a91192afe77, cluster identity 4711 [ 37.924624][ T4471] tipc: Enabled bearer , priority 0 [ 37.925520][ T4471] device syzkaller0 entered promiscuous mode [ 37.938322][ T4520] input: syz0 as /devices/virtual/input/input2 [ 37.946377][ T4470] tipc: Resetting bearer [ 37.996093][ T4470] tipc: Disabling bearer [ 38.067248][ T4522] loop0: detected capacity change from 0 to 8192 [ 38.096175][ T4522] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 38.099674][ T4522] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 38.106296][ T4522] REISERFS (device loop0): using ordered data mode [ 38.107662][ T4524] No such timeout policy "syz0" [ 38.108560][ T4522] reiserfs: using flush barriers [ 38.119731][ T4522] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 38.146534][ T4526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 38.149509][ T4522] REISERFS (device loop0): checking transaction log (loop0) [ 38.188994][ T4526] loop1: detected capacity change from 0 to 256 [ 38.200205][ T4526] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.202208][ T4526] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 38.208390][ T4522] REISERFS (device loop0): Using tea hash to sort names [ 38.210368][ T4522] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 38.212878][ T4522] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 38.215762][ T4526] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 38.235020][ T4522] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 38.419092][ T4535] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 38.421285][ T4535] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 38.721246][ T4543] FAULT_INJECTION: forcing a failure. [ 38.721246][ T4543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.723745][ T4543] CPU: 1 PID: 4543 Comm: syz.1.28 Not tainted syzkaller #0 [ 38.724954][ T4543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 38.726713][ T4543] Call trace: [ 38.727283][ T4543] dump_backtrace+0x1c8/0x1f4 [ 38.728041][ T4543] show_stack+0x2c/0x3c [ 38.728735][ T4543] __dump_stack+0x30/0x40 [ 38.729448][ T4543] dump_stack_lvl+0xf8/0x160 [ 38.730227][ T4543] dump_stack+0x1c/0x5c [ 38.730972][ T4543] should_fail_ex+0x3c4/0x520 [ 38.731714][ T4543] should_fail+0x14/0x24 [ 38.732405][ T4543] should_fail_usercopy+0x20/0x30 [ 38.733213][ T4543] copy_msghdr_from_user+0xb4/0x4ac [ 38.734011][ T4543] __sys_sendmsg+0x200/0x320 [ 38.734711][ T4543] __arm64_sys_sendmsg+0x80/0x94 [ 38.735463][ T4543] invoke_syscall+0x98/0x2bc [ 38.736205][ T4543] el0_svc_common+0x138/0x258 [ 38.736979][ T4543] do_el0_svc+0x58/0x13c [ 38.737652][ T4543] el0_svc+0x58/0x138 [ 38.738280][ T4543] el0t_64_sync_handler+0x84/0xf0 [ 38.739066][ T4543] el0t_64_sync+0x18c/0x190 [ 38.771102][ T4546] sock: sock_timestamping_bind_phc: sock not bind to device [ 38.778329][ T4546] loop2: detected capacity change from 0 to 512 [ 38.816483][ T4546] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.884661][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 38.922221][ T4561] loop2: detected capacity change from 0 to 128 [ 38.922666][ T4555] loop1: detected capacity change from 0 to 32768 [ 38.926202][ T4561] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 38.929259][ T4561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 38.944389][ T4561] overlayfs: failed to resolve './bus': -2 [ 38.956844][ T4555] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 38.960418][ T4555] JBD2: Unrecognised features on journal [ 38.961974][ T4555] (syz.1.31,4555,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 38.963761][ T4555] (syz.1.31,4555,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -22 [ 38.968927][ T4555] (syz.1.31,4555,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 38.970219][ T4555] (syz.1.31,4555,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 38.976272][ T4555] (syz.1.31,4555,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 38.994761][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 39.036952][ T4571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35'. [ 39.040226][ T4569] loop0: detected capacity change from 0 to 128 [ 39.074125][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 39.074162][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 39.075219][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 39.076175][ T4328] Bluetooth: hci2: command 0x040f tx timeout [ 39.083578][ T4571] loop2: detected capacity change from 0 to 256 [ 39.087027][ T4571] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.088748][ T4571] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 39.092893][ T4571] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 39.208343][ T4585] FAULT_INJECTION: forcing a failure. [ 39.208343][ T4585] name failslab, interval 1, probability 0, space 0, times 0 [ 39.210599][ T4585] CPU: 0 PID: 4585 Comm: syz.0.42 Not tainted syzkaller #0 [ 39.211740][ T4585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 39.213320][ T4585] Call trace: [ 39.213900][ T4585] dump_backtrace+0x1c8/0x1f4 [ 39.214679][ T4585] show_stack+0x2c/0x3c [ 39.215402][ T4585] __dump_stack+0x30/0x40 [ 39.216095][ T4585] dump_stack_lvl+0xf8/0x160 [ 39.216834][ T4585] dump_stack+0x1c/0x5c [ 39.217535][ T4585] should_fail_ex+0x3c4/0x520 [ 39.218289][ T4585] __should_failslab+0xc0/0x120 [ 39.219114][ T4585] should_failslab+0x10/0x28 [ 39.219906][ T4585] __kmem_cache_alloc_node+0x7c/0x320 [ 39.220843][ T4585] __kmalloc+0xd8/0x178 [ 39.221500][ T4585] tomoyo_realpath_from_path+0xc4/0x4d4 [ 39.222376][ T4585] tomoyo_path_number_perm+0x190/0x4dc [ 39.223218][ T4585] tomoyo_file_ioctl+0x2c/0x3c [ 39.223968][ T4585] security_file_ioctl+0x80/0xbc [ 39.224771][ T4585] __arm64_sys_ioctl+0xa8/0x1c8 [ 39.225487][ T4585] invoke_syscall+0x98/0x2bc [ 39.226242][ T4585] el0_svc_common+0x138/0x258 [ 39.226961][ T4585] do_el0_svc+0x58/0x13c [ 39.227594][ T4585] el0_svc+0x58/0x138 [ 39.228284][ T4585] el0t_64_sync_handler+0x84/0xf0 [ 39.229133][ T4585] el0t_64_sync+0x18c/0x190 [ 39.233761][ T4585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 39.543525][ T4589] loop2: detected capacity change from 0 to 4096 [ 39.549494][ T4589] ntfs: (device loop2): parse_options(): Unrecognized mount option gidÿÿÿÿÿÿÿÿÿÿ0x0000000000000000. [ 39.686728][ T4588] loop0: detected capacity change from 0 to 512 [ 39.688941][ T4588] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.691115][ T4588] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.705991][ T4588] EXT4-fs (loop0): 1 truncate cleaned up [ 39.708116][ T4588] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.722407][ T4588] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.43: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 39.752198][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 39.872267][ T4609] FAULT_INJECTION: forcing a failure. [ 39.872267][ T4609] name failslab, interval 1, probability 0, space 0, times 0 [ 39.877151][ T4609] CPU: 0 PID: 4609 Comm: syz.3.48 Not tainted syzkaller #0 [ 39.878352][ T4609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 39.880115][ T4609] Call trace: [ 39.880683][ T4609] dump_backtrace+0x1c8/0x1f4 [ 39.881480][ T4609] show_stack+0x2c/0x3c [ 39.882129][ T4609] __dump_stack+0x30/0x40 [ 39.882863][ T4609] dump_stack_lvl+0xf8/0x160 [ 39.883642][ T4609] dump_stack+0x1c/0x5c [ 39.884384][ T4609] should_fail_ex+0x3c4/0x520 [ 39.885192][ T4609] __should_failslab+0xc0/0x120 [ 39.886041][ T4609] should_failslab+0x10/0x28 [ 39.886760][ T4609] __kmem_cache_alloc_node+0x7c/0x320 [ 39.887611][ T4609] __kmalloc+0xd8/0x178 [ 39.888301][ T4609] tomoyo_realpath_from_path+0xc4/0x4d4 [ 39.889188][ T4609] tomoyo_path_number_perm+0x190/0x4dc [ 39.890079][ T4609] tomoyo_file_ioctl+0x2c/0x3c [ 39.890848][ T4609] security_file_ioctl+0x80/0xbc [ 39.891575][ T4609] __arm64_sys_ioctl+0xa8/0x1c8 [ 39.892362][ T4609] invoke_syscall+0x98/0x2bc [ 39.893138][ T4609] el0_svc_common+0x138/0x258 [ 39.893926][ T4609] do_el0_svc+0x58/0x13c [ 39.894625][ T4609] el0_svc+0x58/0x138 [ 39.895300][ T4609] el0t_64_sync_handler+0x84/0xf0 [ 39.896144][ T4609] el0t_64_sync+0x18c/0x190 [ 39.898725][ T4609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 39.948048][ T4614] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 40.023149][ T4622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.52'. [ 40.078635][ T4626] netlink: 'syz.2.53': attribute type 1 has an invalid length. [ 40.080220][ T4627] loop3: detected capacity change from 0 to 256 [ 40.080305][ T4626] FAULT_INJECTION: forcing a failure. [ 40.080305][ T4626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.083424][ T4626] CPU: 0 PID: 4626 Comm: syz.2.53 Not tainted syzkaller #0 [ 40.084604][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 40.086266][ T4626] Call trace: [ 40.086356][ T4627] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.086812][ T4626] dump_backtrace+0x1c8/0x1f4 [ 40.089263][ T4626] show_stack+0x2c/0x3c [ 40.089972][ T4626] __dump_stack+0x30/0x40 [ 40.090778][ T4626] dump_stack_lvl+0xf8/0x160 [ 40.091529][ T4626] dump_stack+0x1c/0x5c [ 40.092177][ T4626] should_fail_ex+0x3c4/0x520 [ 40.092315][ T4627] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 40.092905][ T4626] should_fail+0x14/0x24 [ 40.092924][ T4626] should_fail_usercopy+0x20/0x30 [ 40.092931][ T4626] copy_msghdr_from_user+0xb4/0x4ac [ 40.096377][ T4626] __sys_sendmsg+0x200/0x320 [ 40.097107][ T4626] __arm64_sys_sendmsg+0x80/0x94 [ 40.097934][ T4626] invoke_syscall+0x98/0x2bc [ 40.098796][ T4626] el0_svc_common+0x138/0x258 [ 40.099514][ T4626] do_el0_svc+0x58/0x13c [ 40.100175][ T4626] el0_svc+0x58/0x138 [ 40.100874][ T4626] el0t_64_sync_handler+0x84/0xf0 [ 40.101682][ T4626] el0t_64_sync+0x18c/0x190 [ 40.101748][ T4627] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 40.102392][ C0] vkms_vblank_simulate: vblank timer overrun [ 40.130535][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 40.171669][ T4630] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 40.190009][ T4628] loop1: detected capacity change from 0 to 8192 [ 40.210048][ T4628] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 40.212387][ T4628] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 40.216245][ T4628] REISERFS (device loop1): using ordered data mode [ 40.217379][ T4628] reiserfs: using flush barriers [ 40.219049][ T4628] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.223318][ T4628] REISERFS (device loop1): checking transaction log (loop1) [ 40.260238][ T4628] REISERFS (device loop1): Using tea hash to sort names [ 40.261575][ T4628] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 40.338198][ T4647] loop0: detected capacity change from 0 to 256 [ 40.350884][ T4647] FAT-fs (loop0): Directory bread(block 64) failed [ 40.352186][ T4647] FAT-fs (loop0): Directory bread(block 65) failed [ 40.355916][ T4647] FAT-fs (loop0): Directory bread(block 66) failed [ 40.357067][ T4647] FAT-fs (loop0): Directory bread(block 67) failed [ 40.358170][ T4647] FAT-fs (loop0): Directory bread(block 68) failed [ 40.359239][ T4647] FAT-fs (loop0): Directory bread(block 69) failed [ 40.360464][ T4647] FAT-fs (loop0): Directory bread(block 70) failed [ 40.361340][ T4647] FAT-fs (loop0): Directory bread(block 71) failed [ 40.362414][ T4647] FAT-fs (loop0): Directory bread(block 72) failed [ 40.363453][ T4647] FAT-fs (loop0): Directory bread(block 73) failed [ 40.383556][ T4647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'. [ 40.448184][ T4648] loop3: detected capacity change from 0 to 32768 [ 40.457914][ T4648] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 40.460832][ T4648] JBD2: Unrecognised features on journal [ 40.461969][ T4648] (syz.3.57,4648,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 40.463468][ T4648] (syz.3.57,4648,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -22 [ 40.465181][ T4648] (syz.3.57,4648,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 40.466586][ T4648] (syz.3.57,4648,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 40.476998][ T4648] (syz.3.57,4648,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 41.074981][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 41.154680][ T4325] Bluetooth: hci2: command 0x0419 tx timeout [ 41.160167][ T4325] Bluetooth: hci4: command 0x0419 tx timeout [ 41.160189][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 41.161092][ T4325] Bluetooth: hci3: command 0x0419 tx timeout [ 41.174266][ T4657] FAULT_INJECTION: forcing a failure. [ 41.174266][ T4657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.176246][ T4657] CPU: 1 PID: 4657 Comm: syz.1.59 Not tainted syzkaller #0 [ 41.177383][ T4657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 41.178999][ T4657] Call trace: [ 41.179475][ T4657] dump_backtrace+0x1c8/0x1f4 [ 41.180167][ T4657] show_stack+0x2c/0x3c [ 41.180774][ T4657] __dump_stack+0x30/0x40 [ 41.181390][ T4657] dump_stack_lvl+0xf8/0x160 [ 41.182050][ T4657] dump_stack+0x1c/0x5c [ 41.182683][ T4657] should_fail_ex+0x3c4/0x520 [ 41.183433][ T4657] should_fail+0x14/0x24 [ 41.184162][ T4657] should_fail_usercopy+0x20/0x30 [ 41.184984][ T4657] copy_msghdr_from_user+0xb4/0x4ac [ 41.185854][ T4657] __sys_sendmsg+0x200/0x320 [ 41.186587][ T4657] __arm64_sys_sendmsg+0x80/0x94 [ 41.187309][ T4657] invoke_syscall+0x98/0x2bc [ 41.188048][ T4657] el0_svc_common+0x138/0x258 [ 41.188789][ T4657] do_el0_svc+0x58/0x13c [ 41.189422][ T4657] el0_svc+0x58/0x138 [ 41.190039][ T4657] el0t_64_sync_handler+0x84/0xf0 [ 41.190824][ T4657] el0t_64_sync+0x18c/0x190 [ 41.310458][ T4662] loop2: detected capacity change from 0 to 1024 [ 41.310974][ T4664] FAULT_INJECTION: forcing a failure. [ 41.310974][ T4664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.329674][ T4664] CPU: 0 PID: 4664 Comm: syz.3.64 Not tainted syzkaller #0 [ 41.330773][ T4664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 41.332302][ T4664] Call trace: [ 41.332814][ T4664] dump_backtrace+0x1c8/0x1f4 [ 41.333587][ T4664] show_stack+0x2c/0x3c [ 41.334265][ T4664] __dump_stack+0x30/0x40 [ 41.334947][ T4664] dump_stack_lvl+0xf8/0x160 [ 41.335690][ T4664] dump_stack+0x1c/0x5c [ 41.336366][ T4664] should_fail_ex+0x3c4/0x520 [ 41.337130][ T4664] should_fail+0x14/0x24 [ 41.337819][ T4664] should_fail_usercopy+0x20/0x30 [ 41.338657][ T4664] copy_msghdr_from_user+0xb4/0x4ac [ 41.339511][ T4664] __sys_sendmsg+0x200/0x320 [ 41.340286][ T4664] __arm64_sys_sendmsg+0x80/0x94 [ 41.341157][ T4664] invoke_syscall+0x98/0x2bc [ 41.341951][ T4664] el0_svc_common+0x138/0x258 [ 41.342761][ T4664] do_el0_svc+0x58/0x13c [ 41.343451][ T4664] el0_svc+0x58/0x138 [ 41.344109][ T4664] el0t_64_sync_handler+0x84/0xf0 [ 41.344882][ T4664] el0t_64_sync+0x18c/0x190 [ 41.438187][ T4668] loop3: detected capacity change from 0 to 512 [ 41.445403][ T4668] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.456219][ T4668] EXT4-fs (loop3): 1 truncate cleaned up [ 41.457207][ T4668] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.477676][ T4668] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.65: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 41.485743][ T4670] vcan0: tx drop: invalid da for name 0x0000000000000010 [ 41.556956][ T4327] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 41.575076][ C1] vcan0: j1939_tp_rxtimer: 0x000000009996c5d6: rx timeout, send abort [ 41.577283][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e9619ec5: rx timeout, send abort [ 41.581071][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000009996c5d6: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 41.585904][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000e9619ec5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 41.718580][ T4679] loop0: detected capacity change from 0 to 4096 [ 41.787444][ T4682] loop4: detected capacity change from 0 to 512 [ 41.791155][ T4682] EXT4-fs: Ignoring removed nobh option [ 41.804503][ T4682] EXT4-fs: quotafile must be on filesystem root [ 41.936274][ T4679] loop0: detected capacity change from 0 to 32768 [ 41.994568][ T4679] XFS (loop0): Mounting V5 Filesystem [ 42.035613][ T4679] XFS (loop0): Ending clean mount [ 42.042849][ T4679] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 42.229505][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 42.597469][ C1] vcan0: j1939_tp_rxtimer: 0x000000002848c8ce: rx timeout, send abort [ 42.598916][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a154af99: rx timeout, send abort [ 42.600346][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000002848c8ce: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 42.602817][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000a154af99: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 42.782603][ C1] vcan0: j1939_tp_rxtimer: 0x00000000be0111b7: rx timeout, send abort [ 42.783956][ C1] vcan0: j1939_tp_rxtimer: 0x000000003bb18952: rx timeout, send abort [ 42.785362][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000be0111b7: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 42.788370][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000003bb18952: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 43.064907][ T4326] XFS (loop0): Unmounting Filesystem [ 43.328059][ T4723] FAULT_INJECTION: forcing a failure. [ 43.328059][ T4723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.330580][ T4723] CPU: 0 PID: 4723 Comm: syz.3.77 Not tainted syzkaller #0 [ 43.331821][ T4723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 43.333370][ T4723] Call trace: [ 43.333878][ T4723] dump_backtrace+0x1c8/0x1f4 [ 43.334656][ T4723] show_stack+0x2c/0x3c [ 43.335302][ T4723] __dump_stack+0x30/0x40 [ 43.335982][ T4723] dump_stack_lvl+0xf8/0x160 [ 43.336710][ T4723] dump_stack+0x1c/0x5c [ 43.337382][ T4723] should_fail_ex+0x3c4/0x520 [ 43.338148][ T4723] should_fail+0x14/0x24 [ 43.338860][ T4723] should_fail_usercopy+0x20/0x30 [ 43.339734][ T4723] copy_msghdr_from_user+0xb4/0x4ac [ 43.340577][ T4723] __sys_sendmsg+0x200/0x320 [ 43.341343][ T4723] __arm64_sys_sendmsg+0x80/0x94 [ 43.342185][ T4723] invoke_syscall+0x98/0x2bc [ 43.342935][ T4723] el0_svc_common+0x138/0x258 [ 43.343757][ T4723] do_el0_svc+0x58/0x13c [ 43.344480][ T4723] el0_svc+0x58/0x138 [ 43.345136][ T4723] el0t_64_sync_handler+0x84/0xf0 [ 43.345974][ T4723] el0t_64_sync+0x18c/0x190 [ 43.424663][ T4721] loop4: detected capacity change from 0 to 32768 [ 43.433105][ T4721] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 43.438081][ T4721] JBD2: Unrecognised features on journal [ 43.440814][ T4721] (syz.4.74,4721,1):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 43.442209][ T4721] (syz.4.74,4721,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -22 [ 43.444018][ T4721] (syz.4.74,4721,1):ocfs2_check_volume:2489 ERROR: status = -22 [ 43.445276][ T4721] (syz.4.74,4721,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 43.449949][ T4721] (syz.4.74,4721,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 43.626294][ T4733] loop3: detected capacity change from 0 to 32768 [ 43.630109][ T4733] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.78 (4733) [ 43.636803][ T4733] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 43.638558][ T4733] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 43.640219][ T4733] BTRFS info (device loop3): using free space tree [ 43.656117][ T4733] BTRFS info (device loop3): enabling ssd optimizations [ 43.688425][ T4733] tipc: Started in network mode [ 43.689324][ T4733] tipc: Node identity c61067cafb7b, cluster identity 4711 [ 43.690399][ T4733] tipc: Enabled bearer , priority 0 [ 43.692214][ T4733] device syzkaller0 entered promiscuous mode [ 43.766972][ T4732] tipc: Resetting bearer [ 43.816642][ T4732] tipc: Disabling bearer [ 43.837216][ T4763] (unnamed net_device) (uninitialized): option mode: invalid value (81) [ 43.840037][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 43.851055][ T4765] loop2: detected capacity change from 0 to 512 [ 43.855766][ T4765] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.872317][ T4765] EXT4-fs (loop2): 1 truncate cleaned up [ 43.873146][ T4763] loop4: detected capacity change from 0 to 4096 [ 43.873284][ T4765] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.879797][ T4763] ntfs3: Unknown parameter 'mys_immutable' [ 43.891243][ T4765] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.80: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 43.898365][ T4595] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.911181][ T4320] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 44.014149][ T4773] FAULT_INJECTION: forcing a failure. [ 44.014149][ T4773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.016615][ T4773] CPU: 0 PID: 4773 Comm: syz.3.83 Not tainted syzkaller #0 [ 44.017748][ T4773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.019194][ T4773] Call trace: [ 44.019710][ T4773] dump_backtrace+0x1c8/0x1f4 [ 44.020475][ T4773] show_stack+0x2c/0x3c [ 44.021100][ T4773] __dump_stack+0x30/0x40 [ 44.021745][ T4773] dump_stack_lvl+0xf8/0x160 [ 44.022456][ T4773] dump_stack+0x1c/0x5c [ 44.023073][ T4773] should_fail_ex+0x3c4/0x520 [ 44.023782][ T4773] should_fail+0x14/0x24 [ 44.024492][ T4773] should_fail_usercopy+0x20/0x30 [ 44.025323][ T4773] move_addr_to_kernel+0xa8/0x270 [ 44.026135][ T4773] __sys_sendto+0x1ec/0x3fc [ 44.026880][ T4773] __arm64_sys_sendto+0xd8/0xf8 [ 44.027703][ T4773] invoke_syscall+0x98/0x2bc [ 44.028452][ T4773] el0_svc_common+0x138/0x258 [ 44.029237][ T4773] do_el0_svc+0x58/0x13c [ 44.030024][ T4773] el0_svc+0x58/0x138 [ 44.030650][ T4773] el0t_64_sync_handler+0x84/0xf0 [ 44.031472][ T4773] el0t_64_sync+0x18c/0x190 [ 44.057802][ T4775] loop3: detected capacity change from 0 to 64 [ 44.128356][ T4778] loop1: detected capacity change from 0 to 64 [ 44.186093][ T4780] loop3: detected capacity change from 0 to 64 [ 44.189902][ T4780] FAULT_INJECTION: forcing a failure. [ 44.189902][ T4780] name failslab, interval 1, probability 0, space 0, times 0 [ 44.192100][ T4780] CPU: 1 PID: 4780 Comm: syz.3.88 Not tainted syzkaller #0 [ 44.193247][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.194783][ T4780] Call trace: [ 44.195306][ T4780] dump_backtrace+0x1c8/0x1f4 [ 44.196091][ T4780] show_stack+0x2c/0x3c [ 44.196763][ T4780] __dump_stack+0x30/0x40 [ 44.197450][ T4780] dump_stack_lvl+0xf8/0x160 [ 44.198208][ T4780] dump_stack+0x1c/0x5c [ 44.198996][ T4780] should_fail_ex+0x3c4/0x520 [ 44.199762][ T4780] __should_failslab+0xc0/0x120 [ 44.200472][ T4780] should_failslab+0x10/0x28 [ 44.201304][ T4780] kmem_cache_alloc+0x88/0x318 [ 44.202051][ T4780] getname_flags+0xb8/0x45c [ 44.202764][ T4780] user_path_at_empty+0x40/0x84 [ 44.203535][ T4780] __arm64_sys_chdir+0xb4/0x26c [ 44.204382][ T4780] invoke_syscall+0x98/0x2bc [ 44.205147][ T4780] el0_svc_common+0x138/0x258 [ 44.205876][ T4780] do_el0_svc+0x58/0x13c [ 44.206486][ T4780] el0_svc+0x58/0x138 [ 44.207146][ T4780] el0t_64_sync_handler+0x84/0xf0 [ 44.207942][ T4780] el0t_64_sync+0x18c/0x190 [ 44.252814][ T4784] FAULT_INJECTION: forcing a failure. [ 44.252814][ T4784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.257299][ T4784] CPU: 1 PID: 4784 Comm: syz.3.90 Not tainted syzkaller #0 [ 44.258371][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.259994][ T4784] Call trace: [ 44.260517][ T4784] dump_backtrace+0x1c8/0x1f4 [ 44.261273][ T4784] show_stack+0x2c/0x3c [ 44.261977][ T4784] __dump_stack+0x30/0x40 [ 44.262706][ T4784] dump_stack_lvl+0xf8/0x160 [ 44.263463][ T4784] dump_stack+0x1c/0x5c [ 44.264158][ T4784] should_fail_ex+0x3c4/0x520 [ 44.264829][ T4784] should_fail+0x14/0x24 [ 44.265512][ T4784] should_fail_usercopy+0x20/0x30 [ 44.266360][ T4784] move_addr_to_kernel+0xa8/0x270 [ 44.267180][ T4784] __sys_sendto+0x1ec/0x3fc [ 44.267921][ T4784] __arm64_sys_sendto+0xd8/0xf8 [ 44.268650][ T4784] invoke_syscall+0x98/0x2bc [ 44.269313][ T4784] el0_svc_common+0x138/0x258 [ 44.269973][ T4784] do_el0_svc+0x58/0x13c [ 44.270624][ T4784] el0_svc+0x58/0x138 [ 44.271207][ T4784] el0t_64_sync_handler+0x84/0xf0 [ 44.271883][ T4784] el0t_64_sync+0x18c/0x190 [ 44.501382][ T4788] loop3: detected capacity change from 0 to 65536 [ 44.522384][ T4788] XFS (loop3): Mounting V5 Filesystem [ 44.545161][ T4788] XFS (loop3): Ending clean mount [ 44.549698][ T4788] XFS (loop3): Quotacheck needed: Please wait. [ 44.567830][ T4788] XFS (loop3): Quotacheck: Done. [ 44.588918][ T4320] XFS (loop3): Unmounting Filesystem [ 44.633618][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 44.698680][ T4812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.100'. [ 44.707017][ T4810] loop4: detected capacity change from 0 to 8192 [ 44.711365][ T4810] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.713454][ T4810] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 44.717210][ T4810] REISERFS (device loop4): using ordered data mode [ 44.718305][ T4810] reiserfs: using flush barriers [ 44.719534][ T4810] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.722264][ T4810] REISERFS (device loop4): checking transaction log (loop4) [ 44.739718][ T4810] REISERFS (device loop4): Using r5 hash to sort names [ 44.741745][ T4810] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 44.788013][ T4815] loop0: detected capacity change from 0 to 8192 [ 44.790898][ T4815] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.793073][ T4815] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 44.798902][ T4815] REISERFS (device loop0): using ordered data mode [ 44.799967][ T4815] reiserfs: using flush barriers [ 44.806132][ T4815] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.808856][ T4815] REISERFS (device loop0): checking transaction log (loop0) [ 44.826592][ T4815] REISERFS (device loop0): Using r5 hash to sort names [ 44.827994][ T4815] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 44.836909][ T4815] FAULT_INJECTION: forcing a failure. [ 44.836909][ T4815] name failslab, interval 1, probability 0, space 0, times 0 [ 44.840417][ T4815] CPU: 0 PID: 4815 Comm: syz.0.101 Not tainted syzkaller #0 [ 44.841571][ T4815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.843102][ T4815] Call trace: [ 44.843667][ T4815] dump_backtrace+0x1c8/0x1f4 [ 44.844480][ T4815] show_stack+0x2c/0x3c [ 44.845178][ T4815] __dump_stack+0x30/0x40 [ 44.845930][ T4815] dump_stack_lvl+0xf8/0x160 [ 44.846731][ T4815] dump_stack+0x1c/0x5c [ 44.847404][ T4815] should_fail_ex+0x3c4/0x520 [ 44.848126][ T4815] __should_failslab+0xc0/0x120 [ 44.848999][ T4815] should_failslab+0x10/0x28 [ 44.849834][ T4815] kmem_cache_alloc+0x88/0x318 [ 44.850628][ T4815] getname_flags+0xb8/0x45c [ 44.851364][ T4815] getname+0x28/0x38 [ 44.851967][ T4815] do_sys_openat2+0xd0/0x3d8 [ 44.852739][ T4815] __arm64_sys_openat+0x120/0x154 [ 44.853543][ T4815] invoke_syscall+0x98/0x2bc [ 44.854286][ T4815] el0_svc_common+0x138/0x258 [ 44.855135][ T4815] do_el0_svc+0x58/0x13c [ 44.855807][ T4815] el0_svc+0x58/0x138 [ 44.856451][ T4815] el0t_64_sync_handler+0x84/0xf0 [ 44.857195][ T4815] el0t_64_sync+0x18c/0x190 [ 44.910866][ T4820] loop4: detected capacity change from 0 to 64 [ 44.937449][ T4822] loop3: detected capacity change from 0 to 8192 [ 44.944450][ T4822] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.946814][ T4822] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 44.950822][ T4822] REISERFS (device loop3): using ordered data mode [ 44.952322][ T4822] reiserfs: using flush barriers [ 44.956747][ T4822] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.959614][ T4314] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.961259][ T4820] loop4: detected capacity change from 0 to 128 [ 44.961389][ T4314] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.964647][ T4822] REISERFS (device loop3): checking transaction log (loop3) [ 44.966626][ T4314] Buffer I/O error on dev loop4, logical block 0, async page read [ 44.970566][ T4822] REISERFS (device loop3): Using r5 hash to sort names [ 44.970998][ T4820] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 44.972437][ T4822] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 44.989972][ T4820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 44.997274][ T4825] netlink: 'syz.0.103': attribute type 1 has an invalid length. [ 45.076998][ T4820] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 45.078740][ T4820] UDF-fs: error (device loop4): udf_count_free_bitmap: udf_count_free failed [ 45.080322][ T4820] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 45.082232][ T4820] UDF-fs: error (device loop4): udf_count_free_bitmap: udf_count_free failed [ 45.432181][ T4833] loop6: detected capacity change from 0 to 524287999 [ 45.443391][ T4831] FAULT_INJECTION: forcing a failure. [ 45.443391][ T4831] name failslab, interval 1, probability 0, space 0, times 0 [ 45.446982][ T4831] CPU: 0 PID: 4831 Comm: syz.4.106 Not tainted syzkaller #0 [ 45.448208][ T4831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 45.449829][ T4831] Call trace: [ 45.450404][ T4831] dump_backtrace+0x1c8/0x1f4 [ 45.451136][ T4831] show_stack+0x2c/0x3c [ 45.451835][ T4831] __dump_stack+0x30/0x40 [ 45.452578][ T4831] dump_stack_lvl+0xf8/0x160 [ 45.453388][ T4831] dump_stack+0x1c/0x5c [ 45.454104][ T4831] should_fail_ex+0x3c4/0x520 [ 45.454872][ T4831] __should_failslab+0xc0/0x120 [ 45.455622][ T4831] should_failslab+0x10/0x28 [ 45.456328][ T4831] __kmem_cache_alloc_node+0x7c/0x320 [ 45.457227][ T4831] __kmalloc+0xd8/0x178 [ 45.457848][ T4831] tomoyo_realpath_from_path+0xc4/0x4d4 [ 45.458737][ T4831] tomoyo_path_number_perm+0x190/0x4dc [ 45.459567][ T4831] tomoyo_file_ioctl+0x2c/0x3c [ 45.460281][ T4831] security_file_ioctl+0x80/0xbc [ 45.461095][ T4831] __arm64_sys_ioctl+0xa8/0x1c8 [ 45.461916][ T4831] invoke_syscall+0x98/0x2bc [ 45.462703][ T4831] el0_svc_common+0x138/0x258 [ 45.463460][ T4831] do_el0_svc+0x58/0x13c [ 45.464184][ T4831] el0_svc+0x58/0x138 [ 45.464900][ T4831] el0t_64_sync_handler+0x84/0xf0 [ 45.465708][ T4831] el0t_64_sync+0x18c/0x190 [ 45.479276][ T4831] ERROR: Out of memory at tomoyo_realpath_from_path. [ 45.481894][ T4835] loop1: detected capacity change from 0 to 2048 [ 45.483220][ T4835] UDF-fs: bad mount option "modd=00000000000000000000202" or missing value [ 45.538974][ T4837] binder: 4836:4837 tried to acquire reference to desc 0, got 1 instead [ 45.542460][ T4837] binder_alloc: 4836: pid 4836 spamming oneway? 2 buffers allocated for a total size of 5120 [ 45.545201][ T4837] binder_alloc: 4836: pid 4836 spamming oneway? 3 buffers allocated for a total size of 5128 [ 45.547316][ T4837] FAULT_INJECTION: forcing a failure. [ 45.547316][ T4837] name failslab, interval 1, probability 0, space 0, times 0 [ 45.550287][ T4837] CPU: 1 PID: 4837 Comm: syz.2.108 Not tainted syzkaller #0 [ 45.551555][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 45.553113][ T4837] Call trace: [ 45.553615][ T4837] dump_backtrace+0x1c8/0x1f4 [ 45.554262][ T4837] show_stack+0x2c/0x3c [ 45.554862][ T4837] __dump_stack+0x30/0x40 [ 45.555534][ T4837] dump_stack_lvl+0xf8/0x160 [ 45.556245][ T4837] dump_stack+0x1c/0x5c [ 45.556885][ T4837] should_fail_ex+0x3c4/0x520 [ 45.557621][ T4837] __should_failslab+0xc0/0x120 [ 45.558349][ T4837] should_failslab+0x10/0x28 [ 45.559091][ T4837] __kmem_cache_alloc_node+0x7c/0x320 [ 45.559866][ T4837] __kmalloc+0xd8/0x178 [ 45.560530][ T4837] tomoyo_realpath_from_path+0xc4/0x4d4 [ 45.561461][ T4837] tomoyo_path_number_perm+0x190/0x4dc [ 45.562334][ T4837] tomoyo_file_ioctl+0x2c/0x3c [ 45.563075][ T4837] security_file_ioctl+0x80/0xbc [ 45.563881][ T4837] __arm64_sys_ioctl+0xa8/0x1c8 [ 45.564694][ T4837] invoke_syscall+0x98/0x2bc [ 45.565500][ T4837] el0_svc_common+0x138/0x258 [ 45.566341][ T4837] do_el0_svc+0x58/0x13c [ 45.566979][ T4837] el0_svc+0x58/0x138 [ 45.567667][ T4837] el0t_64_sync_handler+0x84/0xf0 [ 45.568521][ T4837] el0t_64_sync+0x18c/0x190 [ 45.572857][ T4837] ERROR: Out of memory at tomoyo_realpath_from_path. [ 45.574017][ T4837] binder: 4836:4837 BC_FREE_BUFFER u0000000000000000 no match [ 45.581463][ T4352] binder: undelivered TRANSACTION_COMPLETE [ 45.583248][ T4352] binder: undelivered TRANSACTION_COMPLETE [ 45.584553][ T4352] binder: undelivered TRANSACTION_COMPLETE [ 45.593223][ T4839] binder: 4838:4839 tried to acquire reference to desc 0, got 1 instead [ 45.595090][ T4839] binder_alloc: 4838: pid 4838 spamming oneway? 2 buffers allocated for a total size of 5120 [ 45.599176][ T22] binder: undelivered transaction 6, process died. [ 45.600309][ T22] binder: undelivered transaction 7, process died. [ 45.601397][ T22] binder: undelivered transaction 5, process died. [ 45.617349][ T4839] binder_alloc: 4838: pid 4838 spamming oneway? 3 buffers allocated for a total size of 5128 [ 45.627464][ T4839] binder: 4838:4839 BC_FREE_BUFFER u0000000000000000 no match [ 45.634351][ T22] binder: undelivered TRANSACTION_COMPLETE [ 45.635380][ T22] binder: undelivered TRANSACTION_COMPLETE [ 45.636293][ T22] binder: undelivered TRANSACTION_COMPLETE [ 45.652457][ T4844] binder: 4843:4844 tried to acquire reference to desc 0, got 1 instead [ 45.654748][ T22] binder: undelivered transaction 13, process died. [ 45.661020][ T4844] binder_alloc: 4843: pid 4843 spamming oneway? 2 buffers allocated for a total size of 5120 [ 45.666121][ T4844] binder_alloc: 4843: pid 4843 spamming oneway? 3 buffers allocated for a total size of 5128 [ 45.673164][ T4844] binder: 4843:4844 BC_FREE_BUFFER u0000000000000000 no match [ 46.145559][ T4847] loop1: detected capacity change from 0 to 40427 [ 46.149737][ T4847] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 46.151221][ T4847] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 46.155694][ T4847] F2FS-fs (loop1): invalid crc value [ 46.159049][ T4847] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.171925][ T4847] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 46.173268][ T4847] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 46.307626][ T4870] FAULT_INJECTION: forcing a failure. [ 46.307626][ T4870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.309874][ T4870] CPU: 1 PID: 4870 Comm: syz.0.117 Not tainted syzkaller #0 [ 46.310976][ T4870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 46.312497][ T4870] Call trace: [ 46.312927][ T4870] dump_backtrace+0x1c8/0x1f4 [ 46.313648][ T4870] show_stack+0x2c/0x3c [ 46.314359][ T4870] __dump_stack+0x30/0x40 [ 46.315103][ T4870] dump_stack_lvl+0xf8/0x160 [ 46.315849][ T4870] dump_stack+0x1c/0x5c [ 46.316528][ T4870] should_fail_ex+0x3c4/0x520 [ 46.317297][ T4870] should_fail+0x14/0x24 [ 46.318081][ T4870] should_fail_usercopy+0x20/0x30 [ 46.318955][ T4870] copy_msghdr_from_user+0xb4/0x4ac [ 46.319840][ T4870] __sys_sendmsg+0x200/0x320 [ 46.320591][ T4870] __arm64_sys_sendmsg+0x80/0x94 [ 46.321427][ T4870] invoke_syscall+0x98/0x2bc [ 46.322233][ T4870] el0_svc_common+0x138/0x258 [ 46.323064][ T4870] do_el0_svc+0x58/0x13c [ 46.323791][ T4870] el0_svc+0x58/0x138 [ 46.324463][ T4870] el0t_64_sync_handler+0x84/0xf0 [ 46.325308][ T4870] el0t_64_sync+0x18c/0x190 [ 46.480215][ T4865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.495384][ T4868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.509031][ T4871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.519258][ T4876] loop2: detected capacity change from 0 to 512 [ 46.697522][ T4892] netlink: 'syz.2.122': attribute type 12 has an invalid length. [ 46.699031][ T4892] netlink: 'syz.2.122': attribute type 29 has an invalid length. [ 46.700388][ T4892] netlink: 148 bytes leftover after parsing attributes in process `syz.2.122'. [ 46.702023][ T4892] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 46.709243][ T4892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.122'. [ 46.825290][ T4892] loop2: detected capacity change from 0 to 32768 [ 46.831544][ T4892] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.122 (4892) [ 46.840362][ T4892] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.842938][ T4892] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 46.844796][ T4892] BTRFS info (device loop2): using free space tree [ 46.868302][ T4892] BTRFS info (device loop2): enabling ssd optimizations [ 46.871881][ T4892] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.961046][ T4314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4314) [ 47.328503][ T4919] loop1: detected capacity change from 0 to 8192 [ 47.340973][ T4919] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.465722][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 47.552086][ T4919] binder: tried to use weak ref as strong ref [ 47.554944][ T4919] binder: 4918:4919 Acquire 1 refcount change on invalid ref 0 ret -22 [ 47.556892][ T4919] binder: 4918:4919 got transaction to invalid handle, 1 [ 47.558639][ T4919] binder: 4918:4919 ioctl c0306201 20000580 returned -14 [ 47.571161][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 47.601693][ T4941] FAULT_INJECTION: forcing a failure. [ 47.601693][ T4941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.606754][ T4941] CPU: 1 PID: 4941 Comm: syz.1.133 Not tainted syzkaller #0 [ 47.607952][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.609745][ T4941] Call trace: [ 47.610298][ T4941] dump_backtrace+0x1c8/0x1f4 [ 47.611119][ T4941] show_stack+0x2c/0x3c [ 47.611839][ T4941] __dump_stack+0x30/0x40 [ 47.612576][ T4941] dump_stack_lvl+0xf8/0x160 [ 47.613343][ T4941] dump_stack+0x1c/0x5c [ 47.614047][ T4941] should_fail_ex+0x3c4/0x520 [ 47.614829][ T4941] should_fail+0x14/0x24 [ 47.615565][ T4941] should_fail_usercopy+0x20/0x30 [ 47.616391][ T4941] copy_msghdr_from_user+0xb4/0x4ac [ 47.617240][ T4941] __sys_sendmsg+0x200/0x320 [ 47.617956][ T4941] __arm64_sys_sendmsg+0x80/0x94 [ 47.618793][ T4941] invoke_syscall+0x98/0x2bc [ 47.619568][ T4941] el0_svc_common+0x138/0x258 [ 47.620256][ T4941] do_el0_svc+0x58/0x13c [ 47.620938][ T4941] el0_svc+0x58/0x138 [ 47.621619][ T4941] el0t_64_sync_handler+0x84/0xf0 [ 47.622482][ T4941] el0t_64_sync+0x18c/0x190 [ 47.773676][ T4944] input: syz0 as /devices/virtual/input/input3 [ 48.723640][ T5030] FAULT_INJECTION: forcing a failure. [ 48.723640][ T5030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.725831][ T5030] CPU: 1 PID: 5030 Comm: syz.2.137 Not tainted syzkaller #0 [ 48.726889][ T5030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 48.728338][ T5030] Call trace: [ 48.728855][ T5030] dump_backtrace+0x1c8/0x1f4 [ 48.729523][ T5030] show_stack+0x2c/0x3c [ 48.730129][ T5030] __dump_stack+0x30/0x40 [ 48.730781][ T5030] dump_stack_lvl+0xf8/0x160 [ 48.731453][ T5030] dump_stack+0x1c/0x5c [ 48.732049][ T5030] should_fail_ex+0x3c4/0x520 [ 48.732815][ T5030] should_fail+0x14/0x24 [ 48.733456][ T5030] should_fail_usercopy+0x20/0x30 [ 48.734325][ T5030] iovec_from_user+0xcc/0x5dc [ 48.735012][ T5030] __import_iovec+0x84/0x470 [ 48.735640][ T5030] import_iovec+0x88/0xa4 [ 48.736356][ T5030] do_writev+0x1b0/0x380 [ 48.737035][ T5030] __arm64_sys_writev+0x80/0x94 [ 48.737735][ T5030] invoke_syscall+0x98/0x2bc [ 48.738501][ T5030] el0_svc_common+0x138/0x258 [ 48.739181][ T5030] do_el0_svc+0x58/0x13c [ 48.739808][ T5030] el0_svc+0x58/0x138 [ 48.740441][ T5030] el0t_64_sync_handler+0x84/0xf0 [ 48.741251][ T5030] el0t_64_sync+0x18c/0x190 [ 48.873122][ T5032] loop3: detected capacity change from 0 to 32768 [ 48.915695][ T5047] loop0: detected capacity change from 0 to 512 [ 48.936770][ T5047] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 48.943723][ T5047] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.143: iget: bad extended attribute block 851968 [ 48.950436][ T5047] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.143: couldn't read orphan inode 15 (err -117) [ 48.952355][ T5047] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.978059][ T5047] EXT4-fs (loop0): shut down requested (2) [ 48.992365][ T5047] Zero length message leads to an empty skb [ 49.031978][ T5045] loop2: detected capacity change from 0 to 32768 [ 49.034711][ T5052] loop3: detected capacity change from 0 to 64 [ 49.036509][ T5052] hfs: unable to parse mount options [ 49.050177][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 49.060202][ T5045] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 49.068528][ T4314] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.074754][ T5045] XFS (loop2): Mounting V5 Filesystem [ 49.121020][ T5045] XFS (loop2): Ending clean mount [ 49.128284][ T5045] XFS (loop2): Quotacheck needed: Please wait. [ 49.137386][ T5061] loop0: detected capacity change from 0 to 8192 [ 49.143564][ T5061] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.162267][ T5045] XFS (loop2): Quotacheck: Done. [ 49.176977][ T5064] loop3: detected capacity change from 0 to 64 [ 49.185449][ T5064] hfs: bad allocation block size 272 [ 49.191834][ T5064] hfs: can't find a HFS filesystem on dev loop3 [ 49.231758][ T4596] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.297053][ T5061] binder: tried to use weak ref as strong ref [ 49.300459][ T5061] binder: 5059:5061 ioctl c0306201 20000580 returned -14 [ 49.302866][ T5068] loop3: detected capacity change from 0 to 4096 [ 49.307184][ T5068] ntfs: (device loop3): parse_options(): Unrecognized mount option uma. [ 49.680310][ T5044] [U] ¦ [ 49.708860][ T4330] XFS (loop2): Unmounting Filesystem [ 50.001772][ T5079] loop2: detected capacity change from 0 to 4096 [ 50.020472][ T5079] NILFS (loop2): invalid segment: Checksum error in segment payload [ 50.022072][ T5079] NILFS (loop2): trying rollback from an earlier position [ 50.029053][ T5079] NILFS (loop2): recovery complete [ 50.039744][ T5080] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.109149][ T5079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.149'. [ 50.229723][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 50.231528][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 50.233139][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 50.234861][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 50.236575][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 50.238059][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 50.239593][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 50.241091][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 50.242801][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 50.245056][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 50.467320][ T5097] loop3: detected capacity change from 0 to 32768 [ 50.473120][ T5097] JBD2: Ignoring recovery information on journal [ 50.508347][ T5086] device syzkaller0 entered promiscuous mode [ 50.511639][ T5097] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 50.568438][ T5103] loop2: detected capacity change from 0 to 8192 [ 50.590010][ T5103] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.610093][ T4320] ocfs2: Unmounting device (7,3) on (node local) [ 50.700982][ T5103] binder_user_error: 2 callbacks suppressed [ 50.700992][ T5103] binder: tried to use weak ref as strong ref [ 50.702930][ T5103] binder: 5102:5103 Acquire 1 refcount change on invalid ref 0 ret -22 [ 50.705038][ T5103] binder: 5102:5103 got transaction to invalid handle, 1 [ 50.706020][ T5103] binder_debug: 12 callbacks suppressed [ 50.706032][ T5103] binder: 5103:5102 cannot find target node [ 50.707758][ T5103] binder: 5102:5103 transaction call to 0:0 failed 30/29201/-22, size 0-0 line 3054 [ 50.709509][ T5103] binder: 5102:5103 ioctl c0306201 20000580 returned -14 [ 50.752300][ T5108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.159'. [ 51.125976][ T5117] loop0: detected capacity change from 0 to 4096 [ 51.137501][ T5117] NILFS (loop0): invalid segment: Checksum error in segment payload [ 51.138799][ T5117] NILFS (loop0): trying rollback from an earlier position [ 51.148436][ T5117] NILFS (loop0): recovery complete [ 51.170937][ T5118] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.216535][ T5117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.162'. [ 52.173021][ T5127] FAULT_INJECTION: forcing a failure. [ 52.173021][ T5127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.175289][ T5127] CPU: 1 PID: 5127 Comm: syz.3.167 Not tainted syzkaller #0 [ 52.176462][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 52.177973][ T5127] Call trace: [ 52.178433][ T5127] dump_backtrace+0x1c8/0x1f4 [ 52.179172][ T5127] show_stack+0x2c/0x3c [ 52.179861][ T5127] __dump_stack+0x30/0x40 [ 52.180692][ T5127] dump_stack_lvl+0xf8/0x160 [ 52.181465][ T5127] dump_stack+0x1c/0x5c [ 52.182168][ T5127] should_fail_ex+0x3c4/0x520 [ 52.182903][ T5127] should_fail+0x14/0x24 [ 52.183623][ T5127] should_fail_usercopy+0x20/0x30 [ 52.184471][ T5127] copy_from_sockptr+0x74/0x1bc [ 52.185305][ T5127] sk_setsockopt+0x1e0/0x2428 [ 52.186049][ T5127] sock_setsockopt+0x68/0x80 [ 52.186794][ T5127] __sys_setsockopt+0x32c/0x504 [ 52.187541][ T5127] __arm64_sys_setsockopt+0xb8/0xd4 [ 52.188402][ T5127] invoke_syscall+0x98/0x2bc [ 52.189161][ T5127] el0_svc_common+0x138/0x258 [ 52.190005][ T5127] do_el0_svc+0x58/0x13c [ 52.190658][ T5127] el0_svc+0x58/0x138 [ 52.191306][ T5127] el0t_64_sync_handler+0x84/0xf0 [ 52.192068][ T5127] el0t_64_sync+0x18c/0x190 [ 52.226444][ T5135] loop2: detected capacity change from 0 to 1024 [ 52.227940][ T5135] EXT4-fs: inline encryption not supported [ 52.251980][ T5135] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.346970][ T5135] netlink: 68 bytes leftover after parsing attributes in process `syz.2.168'. [ 62.957639][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 63.026196][ T5153] loop3: detected capacity change from 0 to 4096 [ 63.039884][ T5153] NILFS (loop3): invalid segment: Checksum error in segment payload [ 63.041213][ T5153] NILFS (loop3): trying rollback from an earlier position [ 63.048077][ T5153] NILFS (loop3): recovery complete [ 63.049630][ T5156] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.216250][ T5158] loop3: detected capacity change from 0 to 32768 [ 63.227142][ T5158] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 63.253737][ T4320] ocfs2: Unmounting device (7,3) on (node local) [ 64.515375][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.516567][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.644123][ T14] cfg80211: failed to load regulatory.db [ 125.959907][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.960965][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.407219][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.408261][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.447771][ T28] INFO: task kworker/0:4:4352 blocked for more than 143 seconds. [ 194.449007][ T28] Not tainted syzkaller #0 [ 194.449751][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 194.453388][ T28] task:kworker/0:4 state:D stack:0 pid:4352 ppid:2 flags:0x00000008 [ 194.454851][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 194.455833][ T28] Call trace: [ 194.456386][ T28] __switch_to+0x2f4/0x568 [ 194.457081][ T28] __schedule+0xddc/0x1b18 [ 194.465526][ T28] schedule+0xc4/0x170 [ 194.466131][ T28] schedule_preempt_disabled+0x18/0x2c [ 194.466908][ T28] __mutex_lock_common+0xad4/0x1f38 [ 194.467758][ T28] mutex_lock_nested+0x38/0x44 [ 194.468452][ T28] rfkill_global_led_trigger_worker+0x30/0xe4 [ 194.487830][ T28] process_one_work+0x7f4/0x13a8 [ 194.488685][ T28] worker_thread+0x8c8/0xfbc [ 194.489497][ T28] kthread+0x250/0x2d8 [ 194.490197][ T28] ret_from_fork+0x10/0x20 [ 194.490948][ T28] INFO: task kworker/0:7:4474 blocked for more than 143 seconds. [ 194.492218][ T28] Not tainted syzkaller #0 [ 194.492963][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 194.494349][ T28] task:kworker/0:7 state:D stack:0 pid:4474 ppid:2 flags:0x00000008 [ 194.495635][ T28] Workqueue: events rfkill_op_handler [ 194.508649][ T28] Call trace: [ 194.509125][ T28] __switch_to+0x2f4/0x568 [ 194.509878][ T28] __schedule+0xddc/0x1b18 [ 194.510587][ T28] schedule+0xc4/0x170 [ 194.511804][ T28] schedule_preempt_disabled+0x18/0x2c [ 194.512661][ T28] __mutex_lock_common+0xad4/0x1f38 [ 194.513483][ T28] mutex_lock_nested+0x38/0x44 [ 194.514185][ T28] nfc_rfkill_set_block+0x4c/0x2a8 [ 194.514982][ T28] rfkill_set_block+0x18c/0x374 [ 194.515798][ T28] rfkill_epo+0x8c/0x158 [ 194.516477][ T28] rfkill_op_handler+0x150/0x248 [ 194.517236][ T28] process_one_work+0x7f4/0x13a8 [ 194.518777][ T28] worker_thread+0x8c8/0xfbc [ 194.519516][ T28] kthread+0x250/0x2d8 [ 194.520234][ T28] ret_from_fork+0x10/0x20 [ 194.520895][ T28] INFO: task syz.4.130:4930 blocked for more than 143 seconds. [ 194.522125][ T28] Not tainted syzkaller #0 [ 194.522976][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 194.524349][ T28] task:syz.4.130 state:D stack:0 pid:4930 ppid:4327 flags:0x00000009 [ 194.525823][ T28] Call trace: [ 194.526368][ T28] __switch_to+0x2f4/0x568 [ 194.527118][ T28] __schedule+0xddc/0x1b18 [ 194.528284][ T28] schedule+0xc4/0x170 [ 194.529007][ T28] schedule_preempt_disabled+0x18/0x2c [ 194.529877][ T28] __mutex_lock_common+0xad4/0x1f38 [ 194.530783][ T28] mutex_lock_nested+0x38/0x44 [ 194.531582][ T28] rfkill_unregister+0xb8/0x208 [ 194.532403][ T28] nfc_unregister_device+0x94/0x288 [ 194.533320][ T28] nci_unregister_device+0x1dc/0x21c [ 194.534178][ T28] virtual_ncidev_close+0x70/0xb0 [ 194.535044][ T28] __fput+0x1bc/0x7c0 [ 194.535703][ T28] ____fput+0x20/0x30 [ 194.536336][ T28] task_work_run+0x1ec/0x270 [ 194.537086][ T28] do_notify_resume+0x1f70/0x2b0c [ 194.538663][ T28] el0_svc+0x98/0x138 [ 194.539297][ T28] el0t_64_sync_handler+0x84/0xf0 [ 194.540145][ T28] el0t_64_sync+0x18c/0x190 [ 194.540867][ T28] INFO: task syz.1.134:4946 blocked for more than 143 seconds. [ 194.542163][ T28] Not tainted syzkaller #0 [ 194.543031][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 194.544465][ T28] task:syz.1.134 state:D stack:0 pid:4946 ppid:4321 flags:0x0000000c [ 194.545940][ T28] Call trace: [ 194.546472][ T28] __switch_to+0x2f4/0x568 [ 194.547186][ T28] __schedule+0xddc/0x1b18 [ 194.548397][ T28] schedule+0xc4/0x170 [ 194.549038][ T28] schedule_preempt_disabled+0x18/0x2c [ 194.549900][ T28] __mutex_lock_common+0xad4/0x1f38 [ 194.550660][ T28] mutex_lock_nested+0x38/0x44 [ 194.551397][ T28] rfkill_fop_release+0x54/0x268 [ 194.552237][ T28] __fput+0x1bc/0x7c0 [ 194.552913][ T28] ____fput+0x20/0x30 [ 194.553569][ T28] task_work_run+0x1ec/0x270 [ 194.554263][ T28] do_exit+0x54c/0x19a8 [ 194.554929][ T28] do_group_exit+0x194/0x22c [ 194.555662][ T28] get_signal+0x11d0/0x1310 [ 194.556384][ T28] do_notify_resume+0x340/0x2b0c [ 194.557216][ T28] asm_exit_to_user_mode+0x6c/0x80 [ 194.558687][ T28] ret_from_fork+0x1c/0x20 [ 194.559493][ T28] [ 194.559493][ T28] Showing all locks held in the system: [ 194.560720][ T28] 1 lock held by rcu_tasks_kthre/12: [ 194.561627][ T28] #0: ffff800015297770 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 194.565525][ T28] 1 lock held by rcu_tasks_trace/13: [ 194.566407][ T28] #0: ffff800015297f90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 194.568630][ T28] 1 lock held by khungtaskd/28: [ 194.569480][ T28] #0: ffff800015296e00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 194.571153][ T28] 2 locks held by kworker/1:2/3776: [ 194.572019][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 194.573668][ T28] #1: ffff800023197c20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 194.575202][ T28] 2 locks held by getty/4082: [ 194.575907][ T28] #0: ffff0000d6c37098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 194.577340][ T28] #1: ffff80001cea62f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xf9c [ 194.579345][ T28] 1 lock held by syz-executor/4320: [ 194.580185][ T28] #0: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x208 [ 194.581851][ T28] 1 lock held by syz-executor/4321: [ 194.582622][ T28] #0: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x208 [ 194.584090][ T28] 1 lock held by syz-executor/4330: [ 194.584830][ T28] #0: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x208 [ 194.586347][ T28] 3 locks held by kworker/0:4/4352: [ 194.587084][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 194.589084][ T28] #1: ffff800020967c20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 194.591139][ T28] #2: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x30/0xe4 [ 194.593058][ T28] 4 locks held by kworker/0:7/4474: [ 194.593970][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 194.595655][ T28] #1: ffff800020fa7c20 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 194.597473][ T28] #2: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 194.599244][ T28] #3: ffff0000cd3fe100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2a8 [ 194.600884][ T28] 2 locks held by kworker/1:7/4769: [ 194.601681][ T28] #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 194.603410][ T28] #1: ffff8000214f7c20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 194.605160][ T28] 1 lock held by syz.0.118/4889: [ 194.605867][ T28] #0: ffff80001529cab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x264/0x6f0 [ 194.607462][ T28] 2 locks held by syz.4.130/4930: [ 194.608283][ T28] #0: ffff0000cd3fe100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x68/0x288 [ 194.609849][ T28] #1: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x208 [ 194.611450][ T28] 1 lock held by syz.1.134/4946: [ 194.612250][ T28] #0: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_release+0x54/0x268 [ 194.613905][ T28] 2 locks held by syz-executor/5150: [ 194.614804][ T28] #0: ffff0000d3497918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 194.616439][ T28] #1: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 194.618135][ T28] 2 locks held by syz-executor/5155: [ 194.619045][ T28] #0: ffff0000d7de0118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 194.620703][ T28] #1: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 194.622422][ T28] 2 locks held by syz-executor/5173: [ 194.623314][ T28] #0: ffff0000f464d118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 194.624894][ T28] #1: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 194.626605][ T28] 2 locks held by syz-executor/5191: [ 194.627553][ T28] #0: ffff0000dab14918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 194.629294][ T28] #1: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 194.630836][ T28] 2 locks held by syz-executor/5193: [ 194.631658][ T28] #0: ffff0000c32d9118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 194.633205][ T28] #1: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 194.634918][ T28] 2 locks held by syz-executor/5199: [ 194.635684][ T28] #0: ffff0000f50a1118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 194.637206][ T28] #1: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 194.638743][ T28] 2 locks held by syz-executor/5203: [ 194.639531][ T28] #0: ffff0000f20a2918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 194.641045][ T28] #1: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 194.642521][ T28] 2 locks held by syz-executor/5205: [ 194.643293][ T28] #0: ffff0000d6249118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 194.644822][ T28] #1: ffff8000179e04a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 194.646375][ T28] [ 194.646756][ T28] ============================================= [ 194.646756][ T28] [ 194.648636][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 194.649664][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 194.650709][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 194.652266][ T28] Call trace: [ 194.652746][ T28] dump_backtrace+0x1c8/0x1f4 [ 194.653388][ T28] show_stack+0x2c/0x3c [ 194.653985][ T28] __dump_stack+0x30/0x40 [ 194.654655][ T28] dump_stack_lvl+0xf8/0x160 [ 194.655409][ T28] dump_stack+0x1c/0x5c [ 194.656055][ T28] panic+0x2e0/0x79c [ 194.656625][ T28] hung_task_panic+0x0/0x2c [ 194.657348][ T28] kthread+0x250/0x2d8 [ 194.657974][ T28] ret_from_fork+0x10/0x20 [ 194.658726][ T28] SMP: stopping secondary CPUs [ 194.659546][ T28] Kernel Offset: disabled [ 194.660209][ T28] CPU features: 0x080000,000f0097,a65bfea7 [ 194.661165][ T28] Memory Limit: none [ 194.947823][ T28] Rebooting in 86400 seconds..