last executing test programs: 27m10.471250928s ago: executing program 32 (id=50): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000b000000000000000000009302000000b36e0500009d68091f33c1fea800ddc600305f2e612e61302e5f00"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) write$sequencer(r2, &(0x7f0000000000)=[@l={0x92, 0x5, 0xc0, 0x10, 0x3, 0x4}, @x={0x94, 0x1, "c0f4f1ea09eb"}], 0x10) ftruncate(r1, 0xffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0x0, 0x8401, 0x1, 0x7, 0x64, 0x258}) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0xffe0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000004805dc000000090020"], 0x38}, 0x40) 26m57.007003445s ago: executing program 33 (id=81): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000240)={0x3, 0x0, 0x98, &(0x7f0000000000)={0xfffe00000, 0x0, 0x2}}) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r8, &(0x7f00000192c0)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce\x04\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\xbbGh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5_J\x1en\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe3) close(r8) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r9, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) 24m54.931193759s ago: executing program 34 (id=298): userfaultfd(0x80801) socket$inet6(0xa, 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) r0 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xb4e, &(0x7f0000000240)={0x0, 0xf92c, 0x10100, 0x12000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x36e10853185f3b19, 0x0, {0x0, 0x0, r0}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 24m46.780508498s ago: executing program 35 (id=308): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40448c5, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000002) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000900)="b25de18a0d2cfcb8227d703812ffcc98f67e346ac17202f6479fd6611a510573bbc59ee9820fcff2476403594b599981771fb5f31c71", 0x36}, {&(0x7f0000000940)="a8b1dc5a0c314a56afd729a79754018dfc796de05949616a1586546676224e1bf187a90a8778afd2dd352bb7ef4c1bbc69365e1e02451aeacb0050cb08452e", 0x3f}, {&(0x7f00000009c0)='?', 0x1}, {&(0x7f0000000a00)="b49b4038da78a7ad5f545eb060bb2b019618e9fe7448a64fddfee65436141d89dc5f5ed27fa5bdea363158b6a07e65d0823a0bec5dcf188f15dd4bca3c607257972345993b563aeb97975bf66ed65ee2b2451b2fdf72298d9aa1d83960acd47b0d0cf8672402d1b977b412da7a2d1252afe1304151ad76af0d77ef", 0x7b}, {&(0x7f0000000b80)="4d62a95cb52f38bba7196372b321a8c311243aa6ca323deb20955d0294ecff7b37c77b10f8c5282d75712f9affc8602ab4aac04c7dd3ace7ef2b2d42193fe0a7bfd6d2624723f5d3c10d858df48a94e117ce5d2fca8b0cf786461180dd52ef11538d49919613e178ddbc0ea83e366452c9fa1b4d1b858cfc41a550afe46d6d0d3dc5bd7b7bc4e59a0206703b3a40852b5ecf8d6b2008175f7890a54da61329e2c320d2cc03d7acf286a93bdb1ccb97fef7ecfd53be6ebb26fe63860cf81caf800ff99eec794108fb6dfa3e66196a923ad5e52cbf4a9dbcf20c9d28f3319f9605bdf5d81ad8e7487b9a378ce78b772108", 0xf0}, {&(0x7f0000000ac0)="c23e45adbfb46f5e16698a97ef1c3a5a310d2b97d6aa543126291980e124d5bcaafd4ee6dd404528d5b5f29c01d9cb95f20c00835118696d79d9f282d355292d94ac0b37db60f64da13e81e7941fe9e573cd187b5932ad3291970131a504a2b354e9904ed6ee7b98467ce4bea87ef3d799b931b9acfc429ee3f969c0bb79cd", 0x7f}], 0x6, &(0x7f0000000cc0), 0x0, 0x20040042}}], 0x1, 0x44800) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440fdd544f9b0176aeeef844967f4cbb2a56842c683bd04fcb9b85331f3e5d78605f7e72a5dcdbd67196ca41d2aea01e4bb568a09730c70000000500674d363d207a4b9194175a14bc040ef5a5a34989b90decd8d5df4acf3b486829fadaf16d47268ec47f6e0c60c8cf5e4da2824c50185a2dc218846279", @ANYBLOB, @ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) 23m2.375343058s ago: executing program 36 (id=463): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 21m47.79165784s ago: executing program 37 (id=581): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, 0x0, 0x40004) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCX_GETX(r4, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 18m13.014838193s ago: executing program 38 (id=1122): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r3, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) 18m2.499522151s ago: executing program 39 (id=1153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd25, 0xfffffff8}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x18}, 0x0) 16m44.89526876s ago: executing program 40 (id=1351): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)="e9", 0x1}], 0x1, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 16m31.337585071s ago: executing program 41 (id=1387): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) iopl(0x3) io_uring_setup(0x1de3, &(0x7f0000000a00)={0x0, 0x5ae5, 0x200, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r3, 0x1000000) 12m43.674514089s ago: executing program 42 (id=2235): socket$can_j1939(0x1d, 0x2, 0x7) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x2a00) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_open_dev$sndpcmc(&(0x7f0000000740), 0x1, 0x2000) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x80, r1, 0x1, 0x4, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x38, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) 10m42.87933763s ago: executing program 43 (id=2681): rseq(0x0, 0x0, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xd) 10m3.979120394s ago: executing program 44 (id=2813): ptrace(0x10, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x9, &(0x7f00000003c0)) ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 8m45.087273584s ago: executing program 45 (id=3134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 8m40.125230921s ago: executing program 6 (id=3158): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x18002) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fc", 0x57}], 0x1) 8m39.729865635s ago: executing program 6 (id=3162): read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2000000000903, 0x0, 0x0, 0xfffd}, 0x20) pipe2(0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) 8m35.704589067s ago: executing program 6 (id=3166): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000140)='./file0\x00', 0x300001a, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRES32], 0xfc, 0x2b5, &(0x7f00000001c0)="$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") syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 8m34.92741177s ago: executing program 46 (id=3164): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x5, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 8m34.642872077s ago: executing program 6 (id=3171): mkdirat(0xffffffffffffff9c, 0x0, 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x20000, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000a00)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@fat=@check_normal}, {@fat=@check_strict}]}, 0x0, 0x274, &(0x7f0000000280)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 8m32.873952155s ago: executing program 6 (id=3175): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000001000)=ANY=[@ANYBLOB="440f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000280)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000340)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8m27.839535636s ago: executing program 6 (id=3189): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 8m26.938678265s ago: executing program 47 (id=3189): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 8m3.562155149s ago: executing program 2 (id=3282): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8m2.61462871s ago: executing program 2 (id=3284): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x208, 0x1000600}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x5945, &(0x7f0000005cc0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x0) fcntl$dupfd(r0, 0x406, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, &(0x7f00000001c0)=0x8) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x23) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffd}) 8m1.174495887s ago: executing program 2 (id=3293): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000000)) 7m54.739590524s ago: executing program 2 (id=3341): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0) getpid() mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2205080, 0x0) setns(0xffffffffffffffff, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 7m53.392288352s ago: executing program 2 (id=3350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="696e6c696e655f64656e74727900016865636b706f696e743d64697361626c652c696e6c696e655f646174612c6e6f636865636b706f696e745f6d657267652c6d6f64653d6c66732c252be76e0a8848022769ce6db839b26b6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303031312c61636c2c6e6f61636c2c636f6d70726573735f63616368652c6572726f72733d72656d6f756e742d726f2c6e6f657874656e745f63616368652c686561702c616c6c6f635f6d6f64653d7265fc2413a788f8817d011fa9de16d2e9ccd0cf7bfdf2eccfdf64bada5a48e38c545bc45a4cf0233d64b6b88ad72cbd055493d674d3b8562bfa8cee7acd180fa03e80ac49c4131ec06b1f277a8e0de9598a22bce43f8fff00"], 0x1, 0x5508, &(0x7f0000002480)="$eJzs3EtvG1UUAODjpOmbEiEW7DpShZRItVWnD8GuQCseolVUYMEKHNux3NqeKHackBULlogF/wSBxIolv4EFa3aIBYgdEshzJ9DwkEBxYtJ8nzQ+c6+vz5xrVZXOTOQATqzF7OcfK3EpzkXEfERcjCjOK+VRuJ3CcxGRRcTcY0elnP994nREnI+IS5PkKWelfOvTq+MrN39446evvjlz6sJnX347u10Ds/Z8RPQ30vl2P8W8k+LDcr4x7haxf2NcxvRG/1E5zlPcbq8VGbYbe+saRbzeSevzja3hJK73Gs1J7HTXi/mNQbrgcNzZy1N84GFjsxi32mtF7A7zInZ2U107u+n/tt3hKOVplfk+KNLHaLQX03x7p532s/GoiM3BqJxPefNWe2cSx2UsLxfNvNcq6lg7yDf9//Zmd7C1k43bm8NuPshu1uov1Oq3qvXNvNUetW9UG/3WrRvZUqc3WVYdtRv925087/TatWbeX86WOs1mtV7Plu6017qNQVav167XrlVvLpdnV7NX77+T9VrZ0iS+3B1sjbq9Ybaeb2bpE8vZSu36i8vZlXr21r3VbPXB3bv3Vt9+786791+69/or5aK/lJUtrVxbWanWr1VX6ssnaP8flUVPcf9wIJVZFwBw/PzX/v+y/h+YgsPr/zcfRBx+/x/6/6k4Vv3vSe//D2H/cCD6fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE+u7hc9fK04W0/hCOf9UOfVMOa5ExFxE/Po35uP0vpzzZZ6Ff1i/8Kcavq5EkWFyjTPlcT4ibpfHL08f9rcAAAAAT64vPrz8SerW08virAviKKWbNnMX359SvkpELCx+P6Vsc5OXZ6eUrPj3fSp2ppStuIF1dkrJ0i23U9PK9q/M7wtnHwuVFOaOtBwAAOBI7O8EjrYLAQAA4Ch9POsCmI1K7D3K3HsWXPzl/R8PBM/tGwEAAADHUGXWBQAAAACHruj//f4fAAAAPNnS7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xs793CYORHEAfjZ4Yf9p0Wrv28reoIwtYY97jCggTVBADqSFNEAN5JYSIojwOAQiDpE8tpXo+yRnMpb58QbBYWakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv31Xpxe/X7um3Obt9OntEAAAAAl2yr9aL+Z5b6X5v735tbP5t+ERFlRFyau4/i01nmqMmpXp6/OX2+elXDXUSdcHiPSXN9iYg/zfX4o+tPAQAAAD6uzXI1T7P19Gc2dEH0KS3alN/+ZsorIqKaPWRKKw95vzKF1d/vcfzPlFYvYE0zhaUlt3GutDepf+7HVbvpSVOkprz4smOR2cYOAAD0aHTW9DsLAQAAoE//hi6AYRTxvJV53AqcpKbZ3vt81gMAAADeoWLoAgAAAIDO1fP/ns7/2zv/DwAAAIaRzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqvdgsV/O2Obt9O3lGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MT+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xpHFQcA/M3MztZWxTXKHiKi4EEvdrutrb2JByV48E8QQrqtsVt/tDnYUsRcvEnOvYgeRQQl3vo/5JxALvGWwx4ieFZmdiY7+QGuv2Y2yecDb953h2He981CyHfeSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS6O1JnGSHzjiOi3Obew+Xsn7rUJ95vLY9n7UsjupM+mR4sfoh6jaXCAAAAGdHUtb3IYSddH0h6+NOXv+n5TVZzf/t0+O4rOcP1/1lX9b+Wfvl593n9wfqjMfJbnpzeTi4dDSV1v83y9n2zF9e0cqffP7uJcm/kPi91edGaf48o683Nt5p5+G5OrIFAP6Ji2VfBOXvQ1nfbzIxAM6MVqXwLuv/pNNsTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1GK2GJ8s4CiHMtyZxZmvv4dJx/eO17fmyXXv0aC18Oblndos0hHBzeTi4VOtsZtu9+w9uLw6Hg7v1By+FEJoa/a1i+rc/mOLiEBp5PoL/KIiLL3tW8jkZQYM/lAAAOJXSomV1/U66vpCdi+ZC+OO7g/X/q5U4TFn/7354bbM6VrX+79c2w9nXW7nzae/e/QevL99ZvDW4Nfj4jcv9N/tXrl+9er2XvyvpeWMCAADAv9MuWrX+j+eOrv9fqMRhyvr/s2/6X1THStT/x5os+jWdCQAAwNn27Mu//xYdcz5qt8Pniysrd/vj4/7ny+NjA6n+beeKVq3/k7mmswIAAADqMFqNDqz/36jEYcr1/6e+f+HH6j2TEML5Yv3/4tInwxv1TWem1fHnxE3PEQAAgGadL1p1/T/N9//H+1se4hDCa6+M4+LfAE5V/yfvfvVDdazq/v8r9U1xJsXd8fPI+24IrW7TGQEAAHCaPVG0rNj/NV1f+OinC++37f8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNufAQAA//9hGz6T") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x9e30}], 0x1f, 0x1200, 0x30, 0x3) 7m53.027040271s ago: executing program 2 (id=3353): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000180)={0x0, 0x9, 0x1, 'w'}, 0x0, 0x0}) 7m52.316637907s ago: executing program 48 (id=3353): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000180)={0x0, 0x9, 0x1, 'w'}, 0x0, 0x0}) 3m37.100039907s ago: executing program 0 (id=4239): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x5a2, 0x3, 0x7, 0xa0, 0xdc63]}, &(0x7f0000000000)=0x54) 3m33.982178254s ago: executing program 0 (id=4251): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x5a2, 0x3, 0x7, 0xa0, 0xdc63]}, &(0x7f0000000000)=0x54) 3m30.28378446s ago: executing program 0 (id=4262): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x5a2, 0x3, 0x7, 0xa0, 0xdc63]}, &(0x7f0000000000)=0x54) 3m28.805986884s ago: executing program 0 (id=4267): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc, 0x8c4, 0xf, 0x7, 0x5, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="a637016f65de46fc56", 0x9}], 0x1}}], 0x1, 0x800) 3m25.147564196s ago: executing program 0 (id=4275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0xffffffff, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9"}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@prjquota}]}, 0x1, 0x56c, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='signal_generate\x00'}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00', @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x86, &(0x7f0000000140)={@remote, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast2}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0c00000000000800e4000000000001", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 3m23.281519587s ago: executing program 0 (id=4281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x8000}) sendto$inet(r1, 0x0, 0x0, 0x24000080, 0x0, 0x0) listen(r1, 0x2) sendto$inet(r1, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) r4 = socket(0x1, 0x80000, 0x9) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x30000001}) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x3) 3m7.691293543s ago: executing program 49 (id=4281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x8000}) sendto$inet(r1, 0x0, 0x0, 0x24000080, 0x0, 0x0) listen(r1, 0x2) sendto$inet(r1, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) r4 = socket(0x1, 0x80000, 0x9) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x30000001}) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x3) 2m48.575220179s ago: executing program 5 (id=4373): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) socket$l2tp6(0xa, 0x2, 0x73) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$char_usb(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800106a, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000240)=ANY=[@ANYBLOB='#syz1:syRz0.readonli'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 2m46.272677571s ago: executing program 5 (id=4379): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0xc000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001900)={0x0, 0x9, 0x6, 0x2, 0x4, 0x3, 0xa64, 0x8, 0x9d}) 2m45.342211875s ago: executing program 5 (id=4381): pipe(&(0x7f0000000340)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x6, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"}) syz_open_pts(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) unshare(0x4000400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001880)={0x0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m44.393011453s ago: executing program 5 (id=4386): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m43.862338819s ago: executing program 5 (id=4387): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, 'bridge0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) unshare(0x62040200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x5a2, 0x3, 0x7, 0xa0, 0xdc63]}, &(0x7f0000000000)=0x54) r8 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) fdatasync(r7) dup(r8) 2m39.956805125s ago: executing program 5 (id=4398): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) accept4$unix(r2, &(0x7f0000000340)=@abs, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m24.278073434s ago: executing program 50 (id=4398): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) accept4$unix(r2, &(0x7f0000000340)=@abs, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 28.358508647s ago: executing program 1 (id=4743): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES64=r1, @ANYRESHEX], 0x20) 27.268296896s ago: executing program 3 (id=4746): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) fcntl$dupfd(r0, 0x0, r0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x400, 0x4, 0x236}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 27.138511011s ago: executing program 1 (id=4747): socket$inet6(0xa, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,errors=remount-ro,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',discard,iocharset=iso8859-6,keep_last_dots,keep_last_dots,\x00'], 0x1, 0x152d, &(0x7f00000034c0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff"], 0x528}}, 0xc000) 26.832729593s ago: executing program 3 (id=4751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) 25.764320602s ago: executing program 1 (id=4754): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0xc000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001900)={0x0, 0x9, 0x6, 0x2, 0x4, 0x3, 0xa64, 0x8, 0x9d}) 25.077872528s ago: executing program 1 (id=4756): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000480)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r11 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x3c, r12, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 24.811420706s ago: executing program 3 (id=4757): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f00000004c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0xa, 0x0, 0x0, 0xa, 0x20, 0x0, 0x2e}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 23.006997383s ago: executing program 3 (id=4764): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="26000000030000000000000000000000040000000000000005000000000000003a254fa12124202b5d7d400030819a54449f54"], 0x26) syz_open_dev$vim2m(0x0, 0x8, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r4, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) setitimer(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, 0x0, 0x0) 21.90185651s ago: executing program 1 (id=4766): socket$inet6(0xa, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,errors=remount-ro,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',discard,iocharset=iso8859-6,keep_last_dots,keep_last_dots,\x00'], 0x1, 0x152d, &(0x7f00000034c0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff04"], 0x528}}, 0xc000) 20.838376249s ago: executing program 3 (id=4767): socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x73f02000) openat$rfkill(0xffffff9c, 0x0, 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x63, 0x800) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x3c, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@TCA_RATE={0x6}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_CHAIN={0x8, 0xb, 0xfffffffd}]}, 0x3c}}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xc5}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) 19.368023268s ago: executing program 1 (id=4769): r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$igmp6(0xa, 0x3, 0x3a) socketpair(0x1, 0x20000000000001, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fef870c100000000fcffffff8500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x0) lseek(r1, 0xae7d, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 17.710095383s ago: executing program 7 (id=4779): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) syz_clone(0x184000011, 0x0, 0x2b, 0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) syz_io_uring_setup(0x3dfc, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, &(0x7f0000000100), 0x0) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) 15.629640559s ago: executing program 9 (id=4785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000980}, 0x20040005) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0) 14.911189628s ago: executing program 4 (id=4786): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000003c0)={[{@discard}, {@norecovery}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x32, 0x61, 0x39, 0x34, 0x66, 0x36, 0x64], 0x2d, [0x64, 0x66, 0x31, 0x31], 0x2d, [0x35, 0x64, 0x30, 0x39], 0x2d, [0x36, 0x66, 0x63, 0x32], 0x2d, [0x63, 0x61, 0x69, 0x34, 0x30, 0x0, 0x63, 0x38]}}}, {@smackfsroot}]}, 0x1, 0x7be, &(0x7f0000001380)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x107842, 0x42) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000140)={0x0, 0x0, "c8a2e19937e5571000000009000000cc"}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r7 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000080), 0xfffffe13) close_range(r7, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x94, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x4, 0x8, r3, r4, 0xa000, '\x00', 0x1, 0x4, 0x9, 0x6, {0x6, 0x6}, {0x4}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x80000b, 0x4, 0x3}}}}) write$FUSE_INIT(r0, 0x0, 0x0) 14.473700553s ago: executing program 7 (id=4788): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000200)={0x4, [0x7f, 0x8, 0x9, 0x1c, 0x3, 0x9, 0x4, 0x6, 0xffff, 0x800, 0x4, 0xfffd, 0x7, 0x7, 0x1, 0x85, 0x5, 0xfd, 0x40, 0x0, 0x2, 0x300, 0xd539, 0x5, 0x1, 0x31b, 0x2, 0x1, 0x4, 0x7, 0x7f, 0x5, 0x2, 0x1cbf, 0x7, 0x2, 0x336, 0x13, 0x10, 0x80, 0x8, 0x7, 0x402, 0x9, 0x8, 0xa, 0x1, 0x601], 0x5}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ptrace(0x10, r1) ptrace$getregs(0xe, r1, 0x200000000008, &(0x7f0000000440)=""/201) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xec}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_dest={0x18, 0x114, 0x2, {0x5, 0xff}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4a}}], 0x48}, 0x0) 13.119125108s ago: executing program 3 (id=4790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 11.084341118s ago: executing program 4 (id=4791): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2e, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 10.866172572s ago: executing program 9 (id=4792): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="26000000030000000000000000000000040000000000000005000000000000003a254fa12124202b5d7d400030819a54449f54"], 0x26) syz_open_dev$vim2m(0x0, 0x8, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r4, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) setitimer(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, 0x0, 0x0) 10.791349374s ago: executing program 7 (id=4793): r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$igmp6(0xa, 0x3, 0x3a) socketpair(0x1, 0x20000000000001, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fef870c100000000fcffffff8500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x0) lseek(r1, 0xae7d, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 9.744295373s ago: executing program 9 (id=4794): socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@dioread_lock}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=""/52, 0x34) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010001805", @ANYRES32=0x0, @ANYBLOB="3503000001c40000240012800b0001006d616373656300001400028005000c000100000005000b0000000000"], 0x44}}, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) 9.185288339s ago: executing program 4 (id=4796): syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="000227bd7000fddbdf250600000008000b007d0b00000a000900aaaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="05a7d800060000eb0691b1096e38a6b4f47e5f571e66dbf79b55279138fa48bc9c88755f11"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x11) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000900000074000000080026008009000008009f0003"], 0x40}}, 0x20000000) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x10, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x7e}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x801) fcntl$setstatus(r0, 0x4, 0x40800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$I2C(&(0x7f0000004800), 0x0, 0x2) ioctl$I2C_SLAVE(r7, 0x703, 0x3eb) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280"], 0x48}}, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x9) open_by_handle_at(r7, &(0x7f0000000240)=@xfs={0x1c, 0x81, {0xfffffffffffffffd, 0x7f8, 0x3, 0x62b3}}, 0x24000) bind$llc(r8, &(0x7f0000000200)={0x1a, 0x303, 0x81, 0xc, 0x8, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x100400000000007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000180)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r10, 0xc058565d, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x2, 0x9, 0x0, 0x0, "6a77ec24"}, 0x0, 0x1, {0x0}}) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 8.581604193s ago: executing program 8 (id=4797): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000180)={[{@force}, {@force}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nobarrier}, {}, {@nls={'nls', 0x3d, 'macgreek'}}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="220000ff", @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000000000005008a0004000000"], 0x30}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.338165032s ago: executing program 4 (id=4798): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4000810) syz_usb_disconnect(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)) socket$inet_dccp(0x2, 0x6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 7.397321175s ago: executing program 8 (id=4799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 6.689435117s ago: executing program 8 (id=4800): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='lp\x00', 0x54) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000040000000400000022bf200000000000", @ANYRES8, @ANYBLOB="030000000000000000", @ANYRES32], 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) shutdown(r2, 0x2) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) 5.760910091s ago: executing program 7 (id=4801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="414c5450434d0a50484f4e45495220274d69632043617074757265272030303030303030303030303030303030303030300a50484f4e45494e20274d617374657230506c61796261636b20566f6c756d65272030303030303030303030303030303030303030300a4449474954414c33202743442730303030303030303030300a535045414b4552202743442720303030e125714606a90c463030303030300000000052"], 0xe6) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fsmount(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f0000000100)={0x2, 0x6, 0x401}) r8 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r8, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400}}, @IFLA_VLAN_QOS_MAPPING={0xfffffffffffffdd8, 0x1, {0x6, 0x9}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 5.540205634s ago: executing program 4 (id=4802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) 5.4925126s ago: executing program 9 (id=4803): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="26000000030000000000000000000000040000000000000005000000000000003a254fa12124202b5d7d400030819a54449f54"], 0x26) syz_open_dev$vim2m(0x0, 0x8, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r4, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) setitimer(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, 0x0, 0x0) 5.488102969s ago: executing program 8 (id=4804): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000200)={0x4, [0x7f, 0x8, 0x9, 0x1c, 0x3, 0x9, 0x4, 0x6, 0xffff, 0x800, 0x4, 0xfffd, 0x7, 0x7, 0x1, 0x85, 0x5, 0xfd, 0x40, 0x0, 0x2, 0x300, 0xd539, 0x5, 0x1, 0x31b, 0x2, 0x1, 0x4, 0x7, 0x7f, 0x5, 0x2, 0x1cbf, 0x7, 0x2, 0x336, 0x13, 0x10, 0x80, 0x8, 0x7, 0x402, 0x9, 0x8, 0xa, 0x1, 0x601], 0x5}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ptrace(0x10, r1) ptrace$getregs(0xe, r1, 0x200000000008, &(0x7f0000000440)=""/201) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xec}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_dest={0x18, 0x114, 0x2, {0x5, 0xff}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4a}}], 0x48}, 0x0) 3.891490972s ago: executing program 4 (id=4805): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, 0x0, 0x0, 0x20044000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080), 0x8) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8001}]}}}]}, 0x4c}}, 0x0) 2.628643397s ago: executing program 9 (id=4806): socket$nl_generic(0x10, 0x3, 0x10) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9b", 0x6, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000880, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x31001, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x0, 0x222}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 1.715932061s ago: executing program 7 (id=4807): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)=r2}, 0x20) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 1.668517977s ago: executing program 8 (id=4808): iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 857.885341ms ago: executing program 9 (id=4809): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x0, 0x2, 0x4, 0x0, @void}, "d15a061597"}}}}}}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) socket$caif_stream(0x25, 0x1, 0x1) 812.355881ms ago: executing program 8 (id=4810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000980}, 0x20040005) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) 0s ago: executing program 7 (id=4811): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.0.3716'. [ 1375.019539][T22451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'. [ 1375.629104][ T48] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1375.663337][T22462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1375.828704][ T48] usb 9-1: Using ep0 maxpacket: 32 [ 1375.850665][ T48] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.882166][ T48] usb 9-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 1375.893484][T22467] loop0: detected capacity change from 0 to 256 [ 1375.919965][ T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.965132][ T48] usb 9-1: config 0 descriptor?? [ 1376.187903][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3721'. [ 1376.209053][T22477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1376.360718][ T48] usbhid 9-1:0.0: can't add hid device: -71 [ 1376.363693][ T48] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1376.403931][ T48] usb 9-1: USB disconnect, device number 48 [ 1376.951864][T22482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3722'. [ 1376.952415][T22482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3722'. [ 1378.904646][T15951] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1379.085819][T22489] loop5: detected capacity change from 0 to 1024 [ 1379.282154][T22498] loop8: detected capacity change from 0 to 128 [ 1379.891675][T22504] loop3: detected capacity change from 0 to 512 [ 1380.063300][T22504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1380.192686][T22504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1380.205346][T22504] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1380.210516][T22498] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1380.818359][T22498] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1380.849599][ T30] audit: type=1800 audit(1742126371.645:179): pid=22504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3728" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1380.982222][ T30] audit: type=1800 audit(1742126371.665:180): pid=22510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3728" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1381.013555][ T6969] hfsplus: b-tree write err: -5, ino 4 [ 1381.035351][T20156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.343285][T22519] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3731'. [ 1381.354016][T22519] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3731'. [ 1381.467374][T22515] ALSA: seq fatal error: cannot create timer (-19) [ 1382.086507][T15951] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1382.206572][T22531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1382.344800][T22539] loop3: detected capacity change from 0 to 128 [ 1382.459476][T22539] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1382.570261][T22539] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1383.936030][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3738'. [ 1384.224551][T22562] loop8: detected capacity change from 0 to 512 [ 1384.346109][T22568] loop5: detected capacity change from 0 to 512 [ 1384.432969][T22571] loop0: detected capacity change from 0 to 128 [ 1384.460226][T22568] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1384.460676][T20156] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1384.533635][T22568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1384.545604][T22571] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1384.622717][T22568] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3742: corrupted in-inode xattr: e_value size too large [ 1384.656842][T22571] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1384.765431][T22568] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3742: couldn't read orphan inode 15 (err -117) [ 1384.881299][T22568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.743243][T22593] loop8: detected capacity change from 0 to 512 [ 1385.762190][T22593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1385.834847][T22593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.847652][T22593] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.889062][ T5945] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1387.089272][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 1387.142663][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1387.154134][ T5945] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 1387.167560][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.171729][T15951] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.178086][ T5945] usb 1-1: config 0 descriptor?? [ 1387.254553][T22602] netlink: 'syz.3.3745': attribute type 1 has an invalid length. [ 1387.263055][T22602] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3745'. [ 1387.295154][T22602] 9pnet_fd: Insufficient options for proto=fd [ 1388.007949][T20906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.101997][ T5945] usbhid 1-1:0.0: can't add hid device: -71 [ 1388.132865][ T5945] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1388.213553][T20277] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1388.222872][ T5945] usb 1-1: USB disconnect, device number 35 [ 1389.045455][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3753'. [ 1389.055160][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3753'. [ 1390.568925][T22627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1392.026453][T22648] loop5: detected capacity change from 0 to 512 [ 1392.639713][T22648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1392.747582][T22648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1392.760382][T22648] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1392.837339][ T30] audit: type=1800 audit(1742126383.625:181): pid=22647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3756" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1393.135348][T22660] loop3: detected capacity change from 0 to 512 [ 1393.172337][T20906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.181468][T22660] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1393.380434][T22670] netlink: 'syz.0.3763': attribute type 1 has an invalid length. [ 1393.388375][T22670] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1393.566152][T22660] EXT4-fs (loop3): 1 truncate cleaned up [ 1393.596459][T22670] 9pnet_fd: Insufficient options for proto=fd [ 1393.927721][T22660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1395.423704][T20156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.775111][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3769'. [ 1395.796450][T22690] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 1395.979204][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'. [ 1395.989211][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'. [ 1396.173415][T22702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1396.264890][T22702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1396.606241][T22712] netlink: 1284 bytes leftover after parsing attributes in process `syz.7.3776'. [ 1396.615530][T22712] openvswitch: netlink: Flow actions attr not present in new flow. [ 1396.879380][T22724] loop3: detected capacity change from 0 to 1024 [ 1396.931604][T22708] loop0: detected capacity change from 0 to 8192 [ 1397.449749][ T6969] hfsplus: b-tree write err: -5, ino 4 [ 1399.289396][T22752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3785'. [ 1399.882269][T22752] loop0: detected capacity change from 0 to 1024 [ 1401.124843][T22761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3786'. [ 1401.133823][T22761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3786'. [ 1401.402866][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1401.592712][T22780] loop8: detected capacity change from 0 to 1024 [ 1401.954602][T22789] loop0: detected capacity change from 0 to 1024 [ 1402.320024][ T6969] hfsplus: b-tree write err: -5, ino 4 [ 1402.333515][T22796] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.3794'. [ 1402.345304][T22796] openvswitch: netlink: Flow actions attr not present in new flow. [ 1405.213474][T22819] loop3: detected capacity change from 0 to 512 [ 1405.249123][T22819] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1405.652143][T22132] hfsplus: b-tree write err: -5, ino 4 [ 1405.696975][T22819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1405.709714][T22819] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1405.766425][ T30] audit: type=1800 audit(1742126396.555:182): pid=22817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3798" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1405.822617][T22824] ALSA: seq fatal error: cannot create timer (-19) [ 1405.852604][T22824] loop8: detected capacity change from 0 to 1024 [ 1406.174265][T22824] hfsplus: bad catalog folder entry [ 1406.196740][T20156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.658381][T22841] loop0: detected capacity change from 0 to 512 [ 1408.598245][T22841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1408.701991][T22841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1408.714709][T22841] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.809302][ T30] audit: type=1800 audit(1742126399.545:183): pid=22838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3801" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1408.811895][T22848] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1409.046110][T20277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.247242][T22851] loop3: detected capacity change from 0 to 2048 [ 1409.310029][T22851] ext2: Unknown parameter 'fsuuid' [ 1409.462727][T22864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.487105][T22862] loop0: detected capacity change from 0 to 512 [ 1409.487788][T22864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.545038][T22862] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1409.642648][T22864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.690063][T22862] EXT4-fs (loop0): 1 truncate cleaned up [ 1409.696700][T22862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1409.730499][T22864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.931763][T22876] loop5: detected capacity change from 0 to 512 [ 1410.065940][T22876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1410.190525][T22876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.203563][T22876] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1410.360470][ T30] audit: type=1800 audit(1742126401.075:184): pid=22876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3811" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1410.902606][T20906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.060715][T22884] loop3: detected capacity change from 0 to 1024 [ 1412.889775][ T5935] hfsplus: b-tree write err: -5, ino 4 [ 1413.244764][T20277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.125491][T22912] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3821'. [ 1414.182812][T22917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3822'. [ 1414.247295][T22912] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3821'. [ 1414.261671][T22917] loop3: detected capacity change from 0 to 1024 [ 1414.329400][T22917] hfsplus: bad catalog entry type [ 1415.181076][T22930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3826'. [ 1415.261849][ T3438] hfsplus: b-tree write err: -5, ino 4 [ 1415.339312][T22934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.380426][T22930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3826'. [ 1415.391072][T22934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.491546][T22938] loop3: detected capacity change from 0 to 128 [ 1415.531209][T22938] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1415.555879][T22940] loop0: detected capacity change from 0 to 256 [ 1415.589945][T22947] loop8: detected capacity change from 0 to 512 [ 1415.603772][T22947] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1415.615823][T22938] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1415.727499][T22947] EXT4-fs (loop8): 1 truncate cleaned up [ 1415.802935][T22947] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1416.989160][ T5945] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1417.149236][T22965] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1417.158567][T22965] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1417.189478][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 1417.232767][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.251741][ T5945] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 1417.282763][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.451608][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'. [ 1417.461511][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'. [ 1417.462647][ T5945] usb 4-1: config 0 descriptor?? [ 1418.929685][T22991] loop5: detected capacity change from 0 to 1024 [ 1419.061390][ T5945] usbhid 4-1:0.0: can't add hid device: -71 [ 1419.067422][ T5945] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1419.067481][T22986] hfsplus: bad catalog entry type [ 1419.082516][ T5945] usb 4-1: USB disconnect, device number 35 [ 1419.220866][T20156] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1419.378192][T15951] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.452642][ T3438] hfsplus: b-tree write err: -5, ino 4 [ 1420.655062][T23019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3851'. [ 1420.664010][T23019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3851'. [ 1421.846156][T23041] loop0: detected capacity change from 0 to 512 [ 1421.860708][T23041] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1421.916554][T23041] EXT4-fs (loop0): 1 truncate cleaned up [ 1421.933393][T23041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.656529][T23068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3861'. [ 1422.772159][T23067] loop3: detected capacity change from 0 to 4096 [ 1422.800841][T23067] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1422.907444][T23067] ntfs3(loop3): ino=0, mi_enum_attr [ 1422.978398][T23071] loop5: detected capacity change from 0 to 512 [ 1422.989510][T23067] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1423.029198][T23071] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1423.058000][T23067] ntfs3(loop3): volume is dirty and "force" flag is not set! [ 1423.087085][T23071] EXT4-fs (loop5): 1 truncate cleaned up [ 1423.104552][T23068] bond0: (slave bond_slave_1): Releasing backup interface [ 1423.160124][T23071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1423.411014][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3866'. [ 1423.419972][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3866'. [ 1424.535841][T20906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.687608][T23087] loop3: detected capacity change from 0 to 256 [ 1425.201406][T20277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.353762][T23108] loop5: detected capacity change from 0 to 128 [ 1425.889813][T23108] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1426.187516][T23108] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.597694][T23125] loop8: detected capacity change from 0 to 1024 [ 1426.650110][T23125] hfsplus: bad catalog entry type [ 1426.959472][ T5997] hfsplus: b-tree write err: -5, ino 4 [ 1427.330696][T23151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1427.372375][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3881'. [ 1427.381433][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3881'. [ 1428.868475][T20906] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1428.969109][ T972] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1429.177730][T23170] loop5: detected capacity change from 0 to 256 [ 1429.192850][ T972] usb 1-1: Using ep0 maxpacket: 32 [ 1429.219800][ T972] usb 1-1: config 0 has an invalid interface number: 65 but max is 0 [ 1429.229146][ T972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.266580][ T972] usb 1-1: config 0 has no interface number 0 [ 1429.295195][ T972] usb 1-1: config 0 interface 65 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1429.333024][ T972] usb 1-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1429.381629][ T972] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=b4.c6 [ 1429.395849][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.407968][ T972] usb 1-1: Product: syz [ 1429.418804][ T972] usb 1-1: Manufacturer: syz [ 1429.425313][ T972] usb 1-1: SerialNumber: syz [ 1429.529310][ T972] usb 1-1: config 0 descriptor?? [ 1430.564419][T23189] xt_ecn: cannot match TCP bits for non-tcp packets [ 1430.661790][T23189] loop8: detected capacity change from 0 to 2048 [ 1430.707735][T23189] ext2: Unknown parameter 'fsuuid' [ 1430.955956][ T972] usb 1-1: USB disconnect, device number 36 [ 1431.038769][T23198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1431.090476][T23204] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.3891'. [ 1431.099711][T23204] openvswitch: netlink: Flow actions attr not present in new flow. [ 1431.500100][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3895'. [ 1431.509964][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3895'. [ 1432.146161][T23215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1432.224959][T23219] loop0: detected capacity change from 0 to 128 [ 1432.341904][T23219] netlink: 'syz.0.3898': attribute type 8 has an invalid length. [ 1434.104187][T23237] loop5: detected capacity change from 0 to 4096 [ 1434.176955][T23237] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1434.258641][T23252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3907'. [ 1434.312533][T23252] bridge_slave_1: left allmulticast mode [ 1434.327312][T23243] loop8: detected capacity change from 0 to 8192 [ 1434.345976][T23252] bridge_slave_1: left promiscuous mode [ 1434.395628][T23252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.521313][T23252] bridge_slave_0: left allmulticast mode [ 1434.550464][T23252] bridge_slave_0: left promiscuous mode [ 1434.581701][T23252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.831175][T23258] xt_ecn: cannot match TCP bits for non-tcp packets [ 1434.947380][T23258] loop5: detected capacity change from 0 to 2048 [ 1434.989779][T23258] ext2: Unknown parameter 'fsuuid' [ 1435.381636][T23276] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3910'. [ 1435.413724][T23276] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1435.631391][T23277] loop0: detected capacity change from 0 to 256 [ 1435.645489][T23277] msdos: Unknown parameter 'no' [ 1436.197919][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3913'. [ 1436.206956][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3913'. [ 1438.625408][T23320] xt_ecn: cannot match TCP bits for non-tcp packets [ 1438.657796][T23324] loop0: detected capacity change from 0 to 1024 [ 1438.770888][T23319] hfsplus: bad catalog entry type [ 1439.044162][T23299] could not allocate digest TFM handle blake2s-128-arm [ 1439.077310][ T5997] hfsplus: b-tree write err: -5, ino 4 [ 1439.090612][T23330] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.3926'. [ 1439.102197][T23330] openvswitch: netlink: Flow actions attr not present in new flow. [ 1439.291417][T23337] loop0: detected capacity change from 0 to 1024 [ 1439.330407][T23338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3929'. [ 1439.339482][T23338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3929'. [ 1439.657705][T23341] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3930'. [ 1439.708236][T23341] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3930'. [ 1439.780465][T23341] bridge_slave_1: left allmulticast mode [ 1439.787015][T23341] bridge_slave_1: left promiscuous mode [ 1439.821180][T23341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.924794][T23341] bridge_slave_0: left allmulticast mode [ 1439.967691][T23341] bridge_slave_0: left promiscuous mode [ 1439.982189][T23341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.236649][T15994] hfsplus: b-tree write err: -5, ino 4 [ 1440.914985][T23373] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1440.924033][T23373] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1441.012037][T23379] loop8: detected capacity change from 0 to 1024 [ 1441.242393][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3943'. [ 1441.260814][T23382] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1441.302011][T23379] hfsplus: bad catalog entry type [ 1442.705268][T23378] Can't find ip_set type hash:ip,m [ 1443.189763][T22893] hfsplus: b-tree write err: -5, ino 4 [ 1443.242142][T23401] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3946'. [ 1443.251406][T23401] openvswitch: netlink: Flow actions attr not present in new flow. [ 1443.262520][T23400] loop3: detected capacity change from 0 to 128 [ 1443.324907][T23400] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00e50002) [ 1443.386557][T23400] FAT-fs (loop3): Filesystem has been set read-only [ 1443.415514][ T30] audit: type=1326 audit(1742126434.205:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23403 comm="syz.5.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ee38d169 code=0x7ffc0000 [ 1443.475329][ T30] audit: type=1326 audit(1742126434.235:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23403 comm="syz.5.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ee38d169 code=0x7ffc0000 [ 1443.590856][ T30] audit: type=1326 audit(1742126434.235:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23403 comm="syz.5.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fa0ee38d169 code=0x7ffc0000 [ 1443.629577][T23410] loop5: detected capacity change from 0 to 128 [ 1443.732634][ T30] audit: type=1326 audit(1742126434.235:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23403 comm="syz.5.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ee38d169 code=0x7ffc0000 [ 1443.871190][ T30] audit: type=1326 audit(1742126434.245:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23403 comm="syz.5.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ee38d169 code=0x7ffc0000 [ 1443.993193][ T30] audit: type=1326 audit(1742126434.245:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23403 comm="syz.5.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa0ee38d169 code=0x7ffc0000 [ 1444.261764][T23419] loop3: detected capacity change from 0 to 4096 [ 1444.300650][T23419] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1444.310261][ T5945] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1444.325924][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3955'. [ 1444.392473][T23419] ntfs3(loop3): ino=0, mi_enum_attr [ 1444.407795][T23419] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1444.475477][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1444.502154][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3957'. [ 1444.511431][ T5945] usb 9-1: Using ep0 maxpacket: 32 [ 1444.527521][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3955'. [ 1444.547287][ T5945] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.584760][ T5945] usb 9-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 1444.606515][ T5945] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.614919][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1444.628381][T23419] ntfs3(loop3): volume is dirty and "force" flag is not set! [ 1444.635356][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3957'. [ 1444.701124][ T5945] usb 9-1: config 0 descriptor?? [ 1445.275007][T23442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3959'. [ 1445.316494][T23442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3959'. [ 1445.348225][T23442] bridge_slave_1: left allmulticast mode [ 1445.371812][T23445] loop3: detected capacity change from 0 to 1024 [ 1445.397435][T23442] bridge_slave_1: left promiscuous mode [ 1445.409859][T23442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.458550][T23442] bridge_slave_0: left allmulticast mode [ 1445.474401][T23442] bridge_slave_0: left promiscuous mode [ 1445.480623][T23442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.563122][ T3438] hfsplus: b-tree write err: -5, ino 4 [ 1445.608421][ T5945] usbhid 9-1:0.0: can't add hid device: -71 [ 1445.628391][ T5945] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1445.702883][ T5945] usb 9-1: USB disconnect, device number 49 [ 1446.021441][T23455] overlayfs: failed to clone upperpath [ 1447.125713][T23468] loop0: detected capacity change from 0 to 128 [ 1447.229751][T23468] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1447.329097][T11240] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1447.350292][T23468] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1447.519292][T11240] usb 4-1: Using ep0 maxpacket: 8 [ 1447.533759][T11240] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1447.574257][T11240] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1447.606512][T11240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.635097][T11240] usb 4-1: Product: syz [ 1447.703241][T11240] usb 4-1: Manufacturer: syz [ 1447.720679][T23480] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3970'. [ 1447.749912][T11240] usb 4-1: SerialNumber: syz [ 1447.785923][T11240] usb 4-1: config 0 descriptor?? [ 1447.810506][T23480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3970'. [ 1447.849550][T23480] bridge_slave_1: left allmulticast mode [ 1447.889255][T23480] bridge_slave_1: left promiscuous mode [ 1447.898510][T23480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.948442][T20277] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1447.958001][T23483] netlink: 1284 bytes leftover after parsing attributes in process `syz.8.3968'. [ 1447.967520][T23483] openvswitch: netlink: Flow actions attr not present in new flow. [ 1447.977144][T23480] bridge_slave_0: left allmulticast mode [ 1448.002541][T23480] bridge_slave_0: left promiscuous mode [ 1448.027224][T23480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.570478][T23494] bond0: (slave bond_slave_1): Releasing backup interface [ 1449.648218][T23535] __nla_validate_parse: 1 callbacks suppressed [ 1449.648241][T23535] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3980'. [ 1450.014048][T23535] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3980'. [ 1450.748290][ T5906] usb 4-1: USB disconnect, device number 36 [ 1451.053862][T23557] loop3: detected capacity change from 0 to 1024 [ 1451.125025][T23557] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 1451.268758][T23563] loop0: detected capacity change from 0 to 1024 [ 1452.931754][T23557] bridge0: port 3(syz_tun) entered blocking state [ 1452.938554][T23557] bridge0: port 3(syz_tun) entered disabled state [ 1452.946090][T23557] syz_tun: entered allmulticast mode [ 1452.953752][T23557] syz_tun: entered promiscuous mode [ 1452.960285][T23557] bridge0: port 3(syz_tun) entered blocking state [ 1452.967040][T23557] bridge0: port 3(syz_tun) entered forwarding state [ 1453.762104][ T5996] hfsplus: b-tree write err: -5, ino 4 [ 1454.058612][T23581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3989'. [ 1454.199568][T23589] overlayfs: failed to clone upperpath [ 1454.788718][ T30] audit: type=1326 audit(1742126445.575:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23593 comm="syz.8.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1454.883131][ T30] audit: type=1326 audit(1742126445.605:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23593 comm="syz.8.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1454.911800][T23597] loop8: detected capacity change from 0 to 128 [ 1454.969212][ T30] audit: type=1326 audit(1742126445.635:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23593 comm="syz.8.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1455.049821][ T30] audit: type=1326 audit(1742126445.635:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23593 comm="syz.8.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1455.098666][T23581] bond0: (slave bond_slave_1): Releasing backup interface [ 1455.262417][ T30] audit: type=1326 audit(1742126445.635:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23593 comm="syz.8.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1455.426800][ T30] audit: type=1326 audit(1742126445.635:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23593 comm="syz.8.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1455.461840][ T30] audit: type=1800 audit(1742126445.975:197): pid=23597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3993" name="bus" dev="loop8" ino=177 res=0 errno=0 [ 1456.949640][T23634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3998'. [ 1456.997284][T23639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3997'. [ 1457.018457][T23642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3998'. [ 1458.534758][ T5848] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1458.580557][T23664] loop3: detected capacity change from 0 to 1024 [ 1458.629785][ T5848] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1458.640058][T23664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1458.673220][T23664] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1458.726113][T23674] loop5: detected capacity change from 0 to 1024 [ 1458.749558][T23664] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 1459.203521][ T5996] hfsplus: b-tree write err: -5, ino 4 [ 1460.783064][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4010'. [ 1460.891696][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4011'. [ 1460.901153][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4011'. [ 1462.206032][T23716] loop8: detected capacity change from 0 to 512 [ 1462.316815][T23716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1462.383616][T23716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1462.396854][T23716] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1463.060910][ T30] audit: type=1800 audit(1742126453.745:198): pid=23716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4015" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1463.144702][T15951] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.420136][T23722] loop5: detected capacity change from 0 to 40427 [ 1463.479280][T23722] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 1463.489331][T23722] F2FS-fs (loop5): invalid crc value [ 1463.532820][T23722] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1463.583225][T23722] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1463.681160][T23722] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x195/0xb80 [ 1463.743153][T23722] syz.5.4016: attempt to access beyond end of device [ 1463.743153][T23722] loop5: rw=2049, sector=77824, nr_sectors = 208 limit=40427 [ 1463.800711][T23722] syz.5.4016: attempt to access beyond end of device [ 1463.800711][T23722] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 1464.467296][T20906] syz-executor: attempt to access beyond end of device [ 1464.467296][T20906] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1464.490536][T20906] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1464.766287][ T5906] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1464.779572][T23748] loop8: detected capacity change from 0 to 1024 [ 1464.786705][T23748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1464.849523][ T5906] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1464.906032][T23748] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1464.945894][T23748] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 1465.191817][T23759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4026'. [ 1465.200784][T23759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4026'. [ 1465.554246][T23766] loop8: detected capacity change from 0 to 256 [ 1465.561114][T23766] msdos: Unknown parameter 'no' [ 1467.465652][T23746] loop3: detected capacity change from 0 to 32768 [ 1467.931095][T23746] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop3": -EINTR [ 1469.782100][T23807] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1469.959143][T23817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4038'. [ 1470.035337][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4039'. [ 1470.045279][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4039'. [ 1471.561045][T23827] loop3: detected capacity change from 0 to 256 [ 1471.600947][T23827] msdos: Unknown parameter 'no' [ 1474.531370][T23847] loop3: detected capacity change from 0 to 32768 [ 1474.612736][T23847] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 1474.650082][T23847] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1474.806941][T23883] bridge_slave_0: left allmulticast mode [ 1474.813734][T23883] bridge_slave_0: left promiscuous mode [ 1474.820260][T23883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.903941][T23847] XFS (loop3): Ending clean mount [ 1474.917591][T23847] XFS (loop3): Quotacheck needed: Please wait. [ 1474.986814][T23847] XFS (loop3): Quotacheck: Done. [ 1474.995841][T23883] bridge_slave_1: left allmulticast mode [ 1475.047034][T23883] bridge_slave_1: left promiscuous mode [ 1475.067477][T23883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.149699][T23883] bond0: (slave bond_slave_0): Releasing backup interface [ 1475.192568][T20156] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1475.301969][T23883] team0: Port device team_slave_0 removed [ 1475.371465][T23889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4053'. [ 1475.400955][T23883] team0: Port device team_slave_1 removed [ 1475.476898][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4053'. [ 1475.757728][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4055'. [ 1475.767339][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4055'. [ 1476.682833][T23908] xt_ecn: cannot match TCP bits for non-tcp packets [ 1476.911637][T23912] netem: change failed [ 1477.379493][T23908] fuse: Bad value for 'fd' [ 1477.849818][T23938] dccp_close: ABORT with 20 bytes unread [ 1480.380042][T23955] loop0: detected capacity change from 0 to 32768 [ 1480.437062][T23955] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4070 (23955) [ 1480.468161][T23955] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1480.478548][T23955] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 1480.487506][T23955] BTRFS info (device loop0): using free-space-tree [ 1480.791651][T23955] BTRFS info (device loop0): checking UUID tree [ 1481.881510][T23998] loop3: detected capacity change from 0 to 128 [ 1481.899743][T20277] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1482.016190][T23998] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1482.055025][T23998] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1482.183146][T24011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4077'. [ 1482.202286][T24008] xt_ecn: cannot match TCP bits for non-tcp packets [ 1482.370108][T24008] fuse: Bad value for 'fd' [ 1482.593416][T24023] dccp_close: ABORT with 20 bytes unread [ 1483.095095][T24037] bond0: (slave bond_slave_0): Releasing backup interface [ 1483.197277][T24037] bond0: (slave bond_slave_1): Releasing backup interface [ 1483.218616][T20156] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1484.062373][T24045] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4082'. [ 1484.148287][T24050] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4082'. [ 1484.236579][T24037] team0: Port device team_slave_0 removed [ 1484.547886][T24037] team0: Port device team_slave_1 removed [ 1484.671602][T24064] loop3: detected capacity change from 0 to 256 [ 1485.657882][T24064] FAT-fs (loop3): codepage cp86 not found [ 1486.022122][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4087'. [ 1486.031169][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4087'. [ 1486.518645][T24081] xt_ecn: cannot match TCP bits for non-tcp packets [ 1486.608798][T24081] loop0: detected capacity change from 0 to 2048 [ 1486.639864][T24081] ext2: Unknown parameter 'fsuuid' [ 1488.206140][T24112] loop5: detected capacity change from 0 to 1024 [ 1488.303599][T24112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1488.870571][T24131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4102'. [ 1488.879520][T24131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4102'. [ 1489.168645][T20906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.312319][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4105'. [ 1489.521711][T24146] bond0: (slave bond_slave_0): Releasing backup interface [ 1489.661611][T24146] team0: Port device team_slave_0 removed [ 1489.724835][T24146] team0: Port device team_slave_1 removed [ 1489.751656][T24146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.775039][T24146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.810274][T24146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.844995][T24146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.054788][T24144] bond0: (slave bond_slave_1): Releasing backup interface [ 1492.665190][T24187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4115'. [ 1492.726226][T24191] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1492.841041][T24196] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4118'. [ 1493.352116][T24217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4122'. [ 1493.753676][T24225] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4125'. [ 1493.911528][T24232] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1493.919243][T24232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1494.601050][T24230] loop5: detected capacity change from 0 to 512 [ 1494.783808][T24230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1494.863203][T24243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4131'. [ 1494.881968][T24230] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1494.887160][T24230] EXT4-fs: failed to create workqueue [ 1494.896643][T24244] loop0: detected capacity change from 0 to 1024 [ 1494.913933][T24244] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1494.979450][T24243] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1495.021510][T24244] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1495.039614][T24230] EXT4-fs (loop5): mount failed [ 1495.060664][T24253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4133'. [ 1495.100098][T24244] EXT4-fs (loop0): too many log groups per flexible block group [ 1495.159787][T24244] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 1495.169451][T24244] EXT4-fs (loop0): mount failed [ 1495.570816][T24242] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1495.577835][T24242] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1495.703234][T24242] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1495.759975][T24242] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1495.870073][T24242] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1495.889116][T24242] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1495.889153][T24271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4138'. [ 1496.205384][T24270] bond0: (slave bond_slave_0): Releasing backup interface [ 1496.226123][T24242] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1496.264349][T24242] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1496.363272][T24242] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1496.397006][T24242] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1496.404597][T24270] team0: Port device team_slave_0 removed [ 1496.443711][T24270] team0: Port device team_slave_1 removed [ 1496.452484][T24242] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1496.458475][T24242] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1496.815004][T24287] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1496.815559][T24242] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1496.822823][T24287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.869293][T20015] Bluetooth: hci3: command 0x0406 tx timeout [ 1497.218441][T24293] netlink: 'syz.8.4143': attribute type 4 has an invalid length. [ 1497.726613][T24315] bond0: (slave bond_slave_0): Releasing backup interface [ 1497.750313][T20015] Bluetooth: hci6: command 0x0406 tx timeout [ 1497.788835][T24315] bond0: (slave bond_slave_1): Releasing backup interface [ 1497.909349][T20015] Bluetooth: hci0: command 0x0406 tx timeout [ 1497.930711][T24315] team0: Port device team_slave_0 removed [ 1498.030301][T24315] team0: Port device team_slave_1 removed [ 1498.229892][T20015] Bluetooth: hci4: command 0x0406 tx timeout [ 1498.390353][T20015] Bluetooth: hci2: command 0x0406 tx timeout [ 1498.471906][T20015] Bluetooth: hci1: command 0x0c1a tx timeout [ 1498.616539][T24299] loop0: detected capacity change from 0 to 32768 [ 1498.674647][T24299] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4145 (24299) [ 1498.753277][T24299] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1498.803208][T24299] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1498.839730][T24299] BTRFS info (device loop0): using free-space-tree [ 1498.949099][T20015] Bluetooth: hci3: command 0x0406 tx timeout [ 1498.956944][T24342] netlink: 'syz.5.4153': attribute type 4 has an invalid length. [ 1499.049343][T24299] BTRFS info (device loop0): rebuilding free space tree [ 1499.162845][T24299] BTRFS info (device loop0): checking UUID tree [ 1499.850366][T20015] Bluetooth: hci6: command 0x0406 tx timeout [ 1500.282746][T20015] Bluetooth: hci0: command 0x0406 tx timeout [ 1500.309123][T20015] Bluetooth: hci4: command 0x0406 tx timeout [ 1500.469100][T20015] Bluetooth: hci2: command 0x0406 tx timeout [ 1500.555467][T20015] Bluetooth: hci1: command 0x0c1a tx timeout [ 1500.580423][T20277] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1502.694304][T20015] Bluetooth: hci1: command 0x0c1a tx timeout [ 1503.270848][T24429] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1503.760845][T24455] loop3: detected capacity change from 0 to 128 [ 1503.886800][T24455] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1504.003762][T24455] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1504.319832][T20156] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1507.924829][T24509] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1507.979112][ T30] audit: type=1326 audit(1742126498.765:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24522 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63ab8d169 code=0x7ffc0000 [ 1508.098753][T24530] loop3: detected capacity change from 0 to 128 [ 1508.112064][T24509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1508.193682][ T30] audit: type=1326 audit(1742126498.765:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24522 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63ab8d169 code=0x7ffc0000 [ 1508.349325][ T30] audit: type=1326 audit(1742126498.795:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24522 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa63ab8d169 code=0x7ffc0000 [ 1508.523561][ T30] audit: type=1800 audit(1742126499.285:202): pid=24530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4194" name="bus" dev="loop3" ino=178 res=0 errno=0 [ 1510.283765][T24551] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1510.444486][T24551] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1513.680562][T24601] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1514.767086][T24625] bridge0: port 3(syz_tun) entered disabled state [ 1514.914982][T24625] syz_tun (unregistering): left allmulticast mode [ 1514.939710][T24625] syz_tun (unregistering): left promiscuous mode [ 1514.959091][T24625] bridge0: port 3(syz_tun) entered disabled state [ 1517.707873][T24674] loop3: detected capacity change from 0 to 1024 [ 1517.727076][T24673] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1517.753027][T24674] EXT4-fs: Ignoring removed bh option [ 1517.758444][T24674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1517.867974][T24674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1517.923254][T24686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4228'. [ 1518.320314][T24696] loop0: detected capacity change from 0 to 1024 [ 1518.868011][T21864] hfsplus: b-tree write err: -5, ino 4 [ 1519.593938][T24729] loop5: detected capacity change from 0 to 256 [ 1519.688560][T24729] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1521.077545][T20156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.458749][T24747] loop5: detected capacity change from 0 to 1024 [ 1521.498804][T24749] bridge_slave_0: left allmulticast mode [ 1521.555000][T24749] bridge_slave_0: left promiscuous mode [ 1521.568065][T24747] hfsplus: bad catalog entry type [ 1521.581251][T24749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.671852][T24749] bridge_slave_1: left allmulticast mode [ 1521.687788][T24749] bridge_slave_1: left promiscuous mode [ 1521.720857][T24749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.728216][ T81] hfsplus: b-tree write err: -5, ino 4 [ 1521.784796][T24749] bond0: (slave bond_slave_0): Releasing backup interface [ 1521.932605][T24749] team0: Port device team_slave_0 removed [ 1521.991038][T24749] team0: Port device team_slave_1 removed [ 1521.997534][T24763] xt_hashlimit: size too large, truncated to 1048576 [ 1522.018743][T24749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1522.037772][T24749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.081995][T24749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.098679][T24749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.873485][T24773] netlink: 212 bytes leftover after parsing attributes in process `syz.7.4247'. [ 1522.902911][T24777] loop5: detected capacity change from 0 to 1024 [ 1522.980336][T24777] hfsplus: Unknown parameter 'barier' [ 1524.170771][T24777] loop5: detected capacity change from 0 to 4096 [ 1526.245579][T24777] ntfs3(loop5): Failed to read $UpCase (-4). [ 1526.852008][T24826] loop5: detected capacity change from 0 to 1024 [ 1526.946538][T24826] EXT4-fs: Ignoring removed bh option [ 1526.992558][T24826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1527.960745][T24826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1529.954305][T24856] overlayfs: failed to resolve './file0': -2 [ 1530.061496][T20906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1531.691169][T24872] loop3: detected capacity change from 0 to 256 [ 1531.706431][T24872] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1532.766180][T24882] loop0: detected capacity change from 0 to 1024 [ 1532.783925][T24882] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 1533.128306][T24893] loop3: detected capacity change from 0 to 1024 [ 1533.196240][T24893] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1533.249351][T24893] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1533.266226][T24893] EXT4-fs (loop3): too many log groups per flexible block group [ 1533.284954][T24893] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 1533.300719][T24893] EXT4-fs (loop3): mount failed [ 1533.641806][T24905] netlink: 'syz.1.4279': attribute type 4 has an invalid length. [ 1533.807659][T24889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1533.849624][T24889] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1533.855763][T24889] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1534.004533][T24914] netlink: 'syz.8.4280': attribute type 4 has an invalid length. [ 1534.338597][T24889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1534.856746][T24889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1534.980440][T24889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1535.824679][T20015] Bluetooth: hci3: command 0x0406 tx timeout [ 1536.504876][T20015] Bluetooth: hci0: command 0x0406 tx timeout [ 1536.510984][T20015] Bluetooth: hci6: command 0x0406 tx timeout [ 1536.517003][T20015] Bluetooth: hci4: command 0x0406 tx timeout [ 1536.755288][T24928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4284'. [ 1536.834956][T24928] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1536.897704][T24928] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1536.923724][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 1537.062438][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 1537.205102][T24936] loop3: detected capacity change from 0 to 1024 [ 1537.266585][T24936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1537.502869][T24936] siw: device registration error -23 [ 1538.462986][T20156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1538.639230][T24909] syz.0.4281: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1538.724671][T24909] CPU: 1 UID: 0 PID: 24909 Comm: syz.0.4281 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 1538.724706][T24909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1538.724723][T24909] Call Trace: [ 1538.724733][T24909] [ 1538.724743][T24909] dump_stack_lvl+0x241/0x360 [ 1538.724781][T24909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1538.724810][T24909] ? __pfx__printk+0x10/0x10 [ 1538.724841][T24909] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1538.724876][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.724918][T24909] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1538.724956][T24909] warn_alloc+0x278/0x410 [ 1538.724989][T24909] ? __pfx_warn_alloc+0x10/0x10 [ 1538.725023][T24909] ? translate_table+0x181/0x2370 [ 1538.725065][T24909] ? __get_vm_area_node+0x1c8/0x2d0 [ 1538.725105][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.725153][T24909] ? __get_vm_area_node+0x25c/0x2d0 [ 1538.725201][T24909] __vmalloc_node_range_noprof+0x62f/0x1380 [ 1538.725246][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.725314][T24909] ? rcu_is_watching+0x15/0xb0 [ 1538.725344][T24909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1538.725389][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.725429][T24909] ? rcu_is_watching+0x15/0xb0 [ 1538.725459][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.725500][T24909] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 1538.725537][T24909] ? __kvmalloc_node_noprof+0x72/0x190 [ 1538.725583][T24909] __kvmalloc_node_noprof+0x142/0x190 [ 1538.725624][T24909] ? translate_table+0x181/0x2370 [ 1538.725668][T24909] translate_table+0x181/0x2370 [ 1538.725723][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.725765][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.725812][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.725858][T24909] ? __pfx_translate_table+0x10/0x10 [ 1538.725904][T24909] ? __might_fault+0xaa/0x120 [ 1538.725931][T24909] ? __pfx_lock_release+0x10/0x10 [ 1538.725978][T24909] ? __virt_addr_valid+0x183/0x530 [ 1538.726006][T24909] ? __might_fault+0xaa/0x120 [ 1538.726029][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.726070][T24909] ? __might_fault+0xc6/0x120 [ 1538.726098][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.726141][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.726186][T24909] ? copy_from_sockptr_offset+0x6b/0xb0 [ 1538.726216][T24909] do_ipt_set_ctl+0xe3d/0x1250 [ 1538.726248][T24909] ? nf_setsockopt+0x240/0x2c0 [ 1538.726280][T24909] ? do_ip_setsockopt+0x2824/0x3ae0 [ 1538.726322][T24909] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1538.726349][T24909] ? rcu_is_watching+0x15/0xb0 [ 1538.726379][T24909] ? trace_contention_end+0x3c/0x120 [ 1538.726419][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.726460][T24909] ? __mutex_unlock_slowpath+0x227/0x800 [ 1538.726511][T24909] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1538.726556][T24909] ? __pfx___mutex_lock+0x10/0x10 [ 1538.726606][T24909] nf_setsockopt+0x297/0x2c0 [ 1538.726642][T24909] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1538.726684][T24909] smc_setsockopt+0x277/0xd10 [ 1538.726725][T24909] ? __pfx_smc_setsockopt+0x10/0x10 [ 1538.726760][T24909] ? aa_sock_opt_perm+0x79/0x120 [ 1538.726803][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.726847][T24909] ? __pfx_smc_setsockopt+0x10/0x10 [ 1538.726880][T24909] do_sock_setsockopt+0x3b1/0x720 [ 1538.726914][T24909] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1538.726946][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.726986][T24909] ? __fget_files+0x395/0x410 [ 1538.727024][T24909] ? __fget_files+0x2a/0x410 [ 1538.727072][T24909] __x64_sys_setsockopt+0x1ee/0x280 [ 1538.727106][T24909] do_syscall_64+0xf3/0x230 [ 1538.727158][T24909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.727195][T24909] RIP: 0033:0x7f1081b8d169 [ 1538.727217][T24909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1538.727239][T24909] RSP: 002b:00007f1082987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1538.727266][T24909] RAX: ffffffffffffffda RBX: 00007f1081da5fa0 RCX: 00007f1081b8d169 [ 1538.727286][T24909] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 1538.727304][T24909] RBP: 00007f1081c0e2a0 R08: 0000000000000298 R09: 0000000000000000 [ 1538.727322][T24909] R10: 0000400000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1538.727339][T24909] R13: 0000000000000000 R14: 00007f1081da5fa0 R15: 00007ffe9a7b12c8 [ 1538.727375][T24909] [ 1538.727386][T24909] Mem-Info: [ 1539.207314][T24909] active_anon:32747 inactive_anon:0 isolated_anon:0 [ 1539.207314][T24909] active_file:21599 inactive_file:39021 isolated_file:0 [ 1539.207314][T24909] unevictable:17105 dirty:180 writeback:0 [ 1539.207314][T24909] slab_reclaimable:7317 slab_unreclaimable:114880 [ 1539.207314][T24909] mapped:41383 shmem:25747 pagetables:1579 [ 1539.207314][T24909] sec_pagetables:0 bounce:0 [ 1539.207314][T24909] kernel_misc_reclaimable:0 [ 1539.207314][T24909] free:1222743 free_pcp:1870 free_cma:0 [ 1539.389244][T24909] Node 0 active_anon:140652kB inactive_anon:0kB active_file:86396kB inactive_file:155968kB unevictable:66884kB isolated(anon):0kB isolated(file):0kB mapped:175312kB dirty:720kB writeback:0kB shmem:111132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12812kB pagetables:6412kB sec_pagetables:0kB all_unreclaimable? no [ 1540.179610][T24909] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1540.240263][T24909] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.339059][T24909] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 1540.365313][T24909] Node 0 DMA32 free:954888kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:129120kB inactive_anon:0kB active_file:86396kB inactive_file:155652kB unevictable:66884kB writepending:720kB present:3129332kB managed:2549828kB mlocked:0kB bounce:0kB free_pcp:24380kB local_pcp:5856kB free_cma:0kB [ 1540.494389][T24909] lowmem_reserve[]: 0 0 0 0 0 [ 1540.520458][T24909] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.624077][T24909] lowmem_reserve[]: 0 0 0 0 0 [ 1540.630681][T24909] Node 1 Normal free:3904572kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.718993][T24909] lowmem_reserve[]: 0 0 0 0 0 [ 1540.734149][T24909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1540.788239][T24909] Node 0 DMA32: 22*4kB (UE) 55*8kB (ME) 2*16kB (ME) 144*32kB (UME) 171*64kB (UME) 112*128kB (UME) 64*256kB (UME) 25*512kB (UME) 56*1024kB (UME) 10*2048kB (UME) 201*4096kB (UM) = 960752kB [ 1540.857909][T24909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1540.922836][T24909] Node 1 Normal: 257*4kB (UME) 67*8kB (UME) 38*16kB (UME) 226*32kB (UME) 106*64kB (UME) 34*128kB (UME) 16*256kB (UME) 10*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3904572kB [ 1540.947601][T24909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1540.960814][T24909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1540.996617][T24909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1541.840638][T24909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1541.854467][T24909] 105078 total pagecache pages [ 1541.860530][T24909] 0 pages in swap cache [ 1541.864702][T24909] Free swap = 124744kB [ 1541.868870][T24909] Total swap = 124996kB [ 1541.917108][T24909] 2097051 pages RAM [ 1541.940088][T24909] 0 pages HighMem/MovableOnly [ 1541.959267][T24909] 427872 pages reserved [ 1541.963437][T24909] 0 pages cma reserved [ 1549.959283][T25064] bond_slave_1: entered promiscuous mode [ 1550.037144][T25064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4317'. [ 1550.505637][T25073] loop3: detected capacity change from 0 to 512 [ 1551.379040][T25073] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1552.192112][T25073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1552.205395][T25073] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1552.662776][T24909] syz.0.4281: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1552.702108][T20156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.746957][T24909] CPU: 1 UID: 0 PID: 24909 Comm: syz.0.4281 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 1552.746986][T24909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1552.747001][T24909] Call Trace: [ 1552.747010][T24909] [ 1552.747020][T24909] dump_stack_lvl+0x241/0x360 [ 1552.747054][T24909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1552.747081][T24909] ? __pfx__printk+0x10/0x10 [ 1552.747111][T24909] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1552.747144][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.747191][T24909] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1552.747226][T24909] warn_alloc+0x278/0x410 [ 1552.747256][T24909] ? __pfx_warn_alloc+0x10/0x10 [ 1552.747288][T24909] ? translate_table+0x181/0x2370 [ 1552.747326][T24909] ? __get_vm_area_node+0x1c8/0x2d0 [ 1552.747363][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.747399][T24909] ? __get_vm_area_node+0x25c/0x2d0 [ 1552.747444][T24909] __vmalloc_node_range_noprof+0x62f/0x1380 [ 1552.747485][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.747549][T24909] ? rcu_is_watching+0x15/0xb0 [ 1552.747577][T24909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1552.747616][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.747652][T24909] ? rcu_is_watching+0x15/0xb0 [ 1552.747678][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.747716][T24909] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 1552.747751][T24909] ? __kvmalloc_node_noprof+0x72/0x190 [ 1552.747793][T24909] __kvmalloc_node_noprof+0x142/0x190 [ 1552.747832][T24909] ? translate_table+0x181/0x2370 [ 1552.747872][T24909] translate_table+0x181/0x2370 [ 1552.747924][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.747962][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.748006][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.748048][T24909] ? __pfx_translate_table+0x10/0x10 [ 1552.748088][T24909] ? __might_fault+0xaa/0x120 [ 1552.748112][T24909] ? __pfx_lock_release+0x10/0x10 [ 1552.748161][T24909] ? __virt_addr_valid+0x183/0x530 [ 1552.748186][T24909] ? __might_fault+0xaa/0x120 [ 1552.748207][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.748245][T24909] ? __might_fault+0xc6/0x120 [ 1552.748270][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.748310][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.748347][T24909] ? copy_from_sockptr_offset+0x6b/0xb0 [ 1552.748375][T24909] do_ipt_set_ctl+0xe3d/0x1250 [ 1552.748406][T24909] ? nf_setsockopt+0x240/0x2c0 [ 1552.748435][T24909] ? do_ip_setsockopt+0x2824/0x3ae0 [ 1552.748473][T24909] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1552.748498][T24909] ? rcu_is_watching+0x15/0xb0 [ 1552.748526][T24909] ? trace_contention_end+0x3c/0x120 [ 1552.748565][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.748601][T24909] ? __mutex_unlock_slowpath+0x227/0x800 [ 1552.748649][T24909] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1552.748691][T24909] ? __pfx___mutex_lock+0x10/0x10 [ 1552.748739][T24909] nf_setsockopt+0x297/0x2c0 [ 1552.748774][T24909] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1552.748813][T24909] smc_setsockopt+0x277/0xd10 [ 1552.748852][T24909] ? __pfx_smc_setsockopt+0x10/0x10 [ 1552.748884][T24909] ? aa_sock_opt_perm+0x79/0x120 [ 1552.748930][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.748971][T24909] ? __pfx_smc_setsockopt+0x10/0x10 [ 1552.749001][T24909] do_sock_setsockopt+0x3b1/0x720 [ 1552.749034][T24909] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1552.749064][T24909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.749101][T24909] ? __fget_files+0x395/0x410 [ 1552.749137][T24909] ? __fget_files+0x2a/0x410 [ 1552.749187][T24909] __x64_sys_setsockopt+0x1ee/0x280 [ 1552.749220][T24909] do_syscall_64+0xf3/0x230 [ 1552.749261][T24909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.749295][T24909] RIP: 0033:0x7f1081b8d169 [ 1552.749316][T24909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1552.749337][T24909] RSP: 002b:00007f1082987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1552.749363][T24909] RAX: ffffffffffffffda RBX: 00007f1081da5fa0 RCX: 00007f1081b8d169 [ 1552.749382][T24909] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 1552.749398][T24909] RBP: 00007f1081c0e2a0 R08: 0000000000000298 R09: 0000000000000000 [ 1552.749413][T24909] R10: 0000400000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1552.749429][T24909] R13: 0000000000000000 R14: 00007f1081da5fa0 R15: 00007ffe9a7b12c8 [ 1552.749464][T24909] [ 1553.209432][T25086] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4323'. [ 1553.221527][T24909] Mem-Info: [ 1553.224706][T24909] active_anon:29711 inactive_anon:0 isolated_anon:0 [ 1553.224706][T24909] active_file:21599 inactive_file:39019 isolated_file:0 [ 1553.224706][T24909] unevictable:17105 dirty:241 writeback:0 [ 1553.224706][T24909] slab_reclaimable:7318 slab_unreclaimable:116329 [ 1553.224706][T24909] mapped:41242 shmem:22578 pagetables:1477 [ 1553.224706][T24909] sec_pagetables:0 bounce:0 [ 1553.224706][T24909] kernel_misc_reclaimable:0 [ 1553.224706][T24909] free:1219416 free_pcp:1908 free_cma:0 [ 1553.271414][T24909] Node 0 active_anon:121144kB inactive_anon:0kB active_file:86396kB inactive_file:156000kB unevictable:66884kB isolated(anon):0kB isolated(file):0kB mapped:167268kB dirty:960kB writeback:0kB shmem:91076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12688kB pagetables:5908kB sec_pagetables:0kB all_unreclaimable? no [ 1553.379020][T24909] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1553.612085][T24909] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1553.834883][T24909] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 1553.871371][T24909] Node 0 DMA32 free:925620kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:129636kB inactive_anon:0kB active_file:86396kB inactive_file:155720kB unevictable:66884kB writepending:984kB present:3129332kB managed:2549828kB mlocked:0kB bounce:0kB free_pcp:6404kB local_pcp:1304kB free_cma:0kB [ 1554.023270][T24909] lowmem_reserve[]: 0 0 0 0 0 [ 1554.028101][T24909] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1554.059223][T25098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1554.118479][T24909] lowmem_reserve[]: 0 0 0 0 0 [ 1554.132050][T24909] Node 1 Normal free:3904572kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1554.222537][T20015] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1554.237419][T25106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1554.249408][T25106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1554.258438][T25108] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1554.278797][T25106] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1554.294073][T25106] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1554.303015][T25106] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1554.303972][T24909] lowmem_reserve[]: 0 0 0 0 0 [ 1554.383556][T24909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1554.409076][T24909] Node 0 DMA32: 1570*4kB (ME) 1172*8kB (UME) 513*16kB (M) 228*32kB (UME) 184*64kB (ME) 111*128kB (ME) 65*256kB (UME) 25*512kB (UME) 11*1024kB (ME) 9*2048kB (UME) 201*4096kB (UM) = 939576kB [ 1554.454098][T24909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1554.487205][T24909] Node 1 Normal: 257*4kB (UME) 67*8kB (UME) 38*16kB (UME) 226*32kB (UME) 106*64kB (UME) 34*128kB (UME) 16*256kB (UME) 10*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3904572kB [ 1554.507501][T24909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1554.517162][T24909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1554.569041][T24909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1554.588833][T24909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1554.605800][T24909] 99346 total pagecache pages [ 1554.616138][T24909] 0 pages in swap cache [ 1554.647017][T25118] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4329'. [ 1554.675007][T24909] Free swap = 124744kB [ 1554.694258][T24909] Total swap = 124996kB [ 1554.705633][T24909] 2097051 pages RAM [ 1554.749183][T24909] 0 pages HighMem/MovableOnly [ 1554.753913][T24909] 427872 pages reserved [ 1554.758078][T24909] 0 pages cma reserved [ 1556.344889][T25140] netlink: 'syz.8.4334': attribute type 4 has an invalid length. [ 1556.419657][T25106] Bluetooth: hci5: command tx timeout [ 1556.632417][T25101] chnl_net:caif_netlink_parms(): no params data found [ 1556.776333][T25156] netlink: set zone limit has 8 unknown bytes [ 1556.842483][T25154] netlink: 'syz.5.4336': attribute type 4 has an invalid length. [ 1557.210463][T25101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.248046][T25101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.281847][T25101] bridge_slave_0: entered allmulticast mode [ 1557.311520][T25101] bridge_slave_0: entered promiscuous mode [ 1557.371156][T25101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.459049][T25101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.507314][T25101] bridge_slave_1: entered allmulticast mode [ 1557.934885][T25101] bridge_slave_1: entered promiscuous mode [ 1558.522982][T25106] Bluetooth: hci5: command tx timeout [ 1558.998753][T25189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4343'. [ 1559.031769][T25101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.104305][T25101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.169853][T25199] loop3: detected capacity change from 0 to 1024 [ 1559.267149][T25199] hfsplus: bad catalog entry type [ 1559.428124][ T5997] hfsplus: b-tree write err: -5, ino 4 [ 1559.753370][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4348'. [ 1559.762649][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4348'. [ 1560.307859][T25101] team0: Port device team_slave_0 added [ 1560.549108][T25106] Bluetooth: hci5: command tx timeout [ 1560.617788][ T30] audit: type=1326 audit(1742126551.405:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25214 comm="syz.5.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ee38d169 code=0x7ffc0000 [ 1560.674594][T25220] loop5: detected capacity change from 0 to 128 [ 1560.682212][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.742000][ T30] audit: type=1326 audit(1742126551.405:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25214 comm="syz.5.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ee38d169 code=0x7ffc0000 [ 1560.831074][T25101] team0: Port device team_slave_1 added [ 1560.843645][ T30] audit: type=1326 audit(1742126551.405:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25214 comm="syz.5.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fa0ee38d169 code=0x7ffc0000 [ 1560.886711][ T30] audit: type=1326 audit(1742126551.405:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25214 comm="syz.5.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ee38d169 code=0x7ffc0000 [ 1560.910459][ T30] audit: type=1326 audit(1742126551.405:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25214 comm="syz.5.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa0ee38d169 code=0x7ffc0000 [ 1560.932701][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.940267][ T30] audit: type=1800 audit(1742126551.535:208): pid=25220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4349" name="bus" dev="loop5" ino=179 res=0 errno=0 [ 1561.030661][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.122145][T25101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.146690][T25101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.172692][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.223153][T25101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.237244][T25101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.245696][T25101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.271638][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.446196][T25101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.667147][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.133960][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.230368][T25101] hsr_slave_0: entered promiscuous mode [ 1562.256454][T25101] hsr_slave_1: entered promiscuous mode [ 1562.284207][T25101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1562.311433][T25101] Cannot create hsr debugfs directory [ 1562.629259][T25106] Bluetooth: hci5: command tx timeout [ 1564.538621][T25281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1564.548876][T25281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1565.108838][T25287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4364'. [ 1565.179012][T25293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4364'. [ 1568.080943][ T81] bond0 (unregistering): Released all slaves [ 1568.418257][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4372'. [ 1568.439304][T25322] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1570.467950][T25332] loop3: detected capacity change from 0 to 1024 [ 1570.524745][T25332] hfsplus: Unknown parameter 'barier' [ 1570.801843][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4379'. [ 1570.811439][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4379'. [ 1571.358177][T25332] loop3: detected capacity change from 0 to 4096 [ 1571.534926][ T81] hsr_slave_0: left promiscuous mode [ 1571.539806][ T30] audit: type=1800 audit(1742126562.325:209): pid=25349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4377" name="file0" dev="loop3" ino=0 res=0 errno=0 [ 1571.560798][ C0] vkms_vblank_simulate: vblank timer overrun [ 1571.594018][ T81] hsr_slave_1: left promiscuous mode [ 1571.638111][ T81] veth1_macvtap: left promiscuous mode [ 1571.652978][ T81] veth0_macvtap: left promiscuous mode [ 1571.664236][ T81] veth1_vlan: left promiscuous mode [ 1571.685012][ T81] veth0_vlan: left promiscuous mode [ 1571.906971][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4384'. [ 1571.962997][T25357] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4384'. [ 1572.017029][ T5945] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1572.179095][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 1572.202513][ T5945] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1572.214203][ T5945] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.226826][ T5945] usb 4-1: config 6 has no interface number 0 [ 1572.234167][ T5945] usb 4-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1572.245361][ T5945] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1572.261114][ T5945] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1572.272032][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.280409][ T5945] usb 4-1: Product: syz [ 1572.284757][ T5945] usb 4-1: Manufacturer: syz [ 1572.289874][ T5945] usb 4-1: SerialNumber: syz [ 1572.304411][ T5945] hso 4-1:6.2: Failed to find INT IN ep [ 1574.118327][ T5906] usb 4-1: USB disconnect, device number 37 [ 1576.159767][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4392'. [ 1576.168652][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4392'. [ 1576.521694][T25394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4395'. [ 1577.080076][T25398] netlink: 'syz.1.4396': attribute type 4 has an invalid length. [ 1577.843998][T25403] loop5: detected capacity change from 0 to 128 [ 1580.538690][T25101] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1581.886962][T25101] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1581.914364][T25422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1581.937854][T25101] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1581.948000][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4405'. [ 1581.956924][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4405'. [ 1582.218824][T25428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1582.400945][T25430] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1582.629921][T25101] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1582.924364][T25439] netlink: zone id is out of range [ 1582.932050][T25439] netlink: set zone limit has 8 unknown bytes [ 1583.012335][T25436] team0: Mode changed to "loadbalance" [ 1583.148786][T25101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.225407][T25444] siw: device registration error -23 [ 1583.258703][T25101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.314852][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.322018][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.373597][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.380736][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.503703][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4413'. [ 1583.587366][T25450] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1583.629234][T25450] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1584.032636][T25464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'. [ 1584.041794][T25464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'. [ 1584.276066][T25101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.376388][T25472] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1584.856517][T25485] netlink: zone id is out of range [ 1584.863811][T25485] netlink: set zone limit has 8 unknown bytes [ 1584.979021][ T30] audit: type=1326 audit(1742126575.765:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25484 comm="syz.7.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a3f8d169 code=0x7ffc0000 [ 1585.102819][ T30] audit: type=1326 audit(1742126575.805:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25484 comm="syz.7.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75a3f8d169 code=0x7ffc0000 [ 1586.231072][ T30] audit: type=1326 audit(1742126575.805:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25484 comm="syz.7.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a3f8d169 code=0x7ffc0000 [ 1587.942518][ T30] audit: type=1326 audit(1742126575.805:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25484 comm="syz.7.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f75a3f8d169 code=0x7ffc0000 [ 1587.979089][ T30] audit: type=1326 audit(1742126575.805:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25484 comm="syz.7.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a3f8d169 code=0x7ffc0000 [ 1588.853826][ T30] audit: type=1326 audit(1742126575.815:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25484 comm="syz.7.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75a3f8d169 code=0x7ffc0000 [ 1588.879979][ T30] audit: type=1326 audit(1742126575.815:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25484 comm="syz.7.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a3f8d169 code=0x7ffc0000 [ 1588.957770][ T30] audit: type=1326 audit(1742126575.815:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25484 comm="syz.7.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a3f8d169 code=0x7ffc0000 [ 1588.990267][T25509] loop3: detected capacity change from 0 to 128 [ 1589.072792][ T30] audit: type=1326 audit(1742126575.815:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25484 comm="syz.7.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f75a3f8d169 code=0x7ffc0000 [ 1589.203469][ T30] audit: type=1326 audit(1742126575.845:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25484 comm="syz.7.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a3f8d169 code=0x7ffc0000 [ 1589.361925][T25101] veth0_vlan: entered promiscuous mode [ 1589.404549][T25101] veth1_vlan: entered promiscuous mode [ 1589.692173][T25101] veth0_macvtap: entered promiscuous mode [ 1589.706880][T25101] veth1_macvtap: entered promiscuous mode [ 1591.331212][T25101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1591.341968][T25101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.352038][T25101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1591.365578][T25101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.378105][T25101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1591.389376][T25101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.636509][T25101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1591.647977][T25101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1591.658705][T25101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.677491][T25101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1591.689569][T25101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.708852][T25101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1592.076912][T25101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.099195][T25101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1592.351809][T25101] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.400783][T25101] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.457323][T25101] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.488959][T25101] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.435372][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1594.487227][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1594.504116][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.528818][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1594.536524][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.556819][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1594.700519][ T5861] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1594.727965][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1594.980027][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.018815][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.740955][T25580] netlink: 'syz.7.4443': attribute type 4 has an invalid length. [ 1596.794140][ T5861] Bluetooth: hci2: command tx timeout [ 1597.279180][T25558] chnl_net:caif_netlink_parms(): no params data found [ 1599.309106][ T5861] Bluetooth: hci2: command tx timeout [ 1599.457744][T25607] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4447'. [ 1599.568527][T25614] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4448'. [ 1601.369575][ T5861] Bluetooth: hci2: command tx timeout [ 1601.776125][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1601.776146][ T30] audit: type=1326 audit(1742126592.565:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25631 comm="syz.8.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1601.864791][T25558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.894100][T25558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.909222][T25558] bridge_slave_0: entered allmulticast mode [ 1601.923382][ T30] audit: type=1326 audit(1742126592.565:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25631 comm="syz.8.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1601.966996][T25558] bridge_slave_0: entered promiscuous mode [ 1601.996655][T25558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.010812][ T30] audit: type=1326 audit(1742126592.565:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25631 comm="syz.8.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1602.040362][T25558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.057965][T25558] bridge_slave_1: entered allmulticast mode [ 1602.074578][T25558] bridge_slave_1: entered promiscuous mode [ 1602.101056][T25637] loop9: detected capacity change from 0 to 1024 [ 1602.117308][ T30] audit: type=1326 audit(1742126592.565:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25631 comm="syz.8.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1602.159769][T25637] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1602.216603][ T30] audit: type=1326 audit(1742126592.565:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25631 comm="syz.8.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1602.217418][T25637] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1602.256142][ T30] audit: type=1326 audit(1742126592.595:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25631 comm="syz.8.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1602.288347][ T30] audit: type=1326 audit(1742126592.595:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25631 comm="syz.8.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1602.311801][ T30] audit: type=1326 audit(1742126592.595:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25631 comm="syz.8.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1602.337340][ T30] audit: type=1326 audit(1742126592.595:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25631 comm="syz.8.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1602.361297][ T30] audit: type=1326 audit(1742126592.595:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25631 comm="syz.8.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1602.381787][T25558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1602.385864][T25637] EXT4-fs (loop9): too many log groups per flexible block group [ 1602.481634][T25637] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 1602.505904][T25558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1602.545483][T25637] EXT4-fs (loop9): mount failed [ 1602.815754][T25558] team0: Port device team_slave_0 added [ 1602.866964][T25558] team0: Port device team_slave_1 added [ 1602.928981][T25636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1602.952080][T25636] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1603.027630][T25636] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1603.058559][T25636] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1603.069480][T25636] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1603.075628][T25636] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1603.155834][T25558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.172140][T25636] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1603.175737][T25558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1603.239009][T25558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.254857][T25636] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1603.267010][T25666] overlayfs: failed to clone upperpath [ 1603.292499][T25558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.293988][T25636] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1603.308969][T25558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1603.369197][T25636] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1603.375429][T25669] loop3: detected capacity change from 0 to 1024 [ 1603.407033][T25558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.469362][T25636] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1603.857582][T25558] hsr_slave_0: entered promiscuous mode [ 1604.180003][T25558] hsr_slave_1: entered promiscuous mode [ 1604.235205][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 1604.468226][T25690] overlayfs: failed to clone upperpath [ 1604.779823][T25694] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4466'. [ 1604.832755][T25695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4467'. [ 1605.029072][ T5861] Bluetooth: hci0: command 0x0406 tx timeout [ 1605.029468][T25106] Bluetooth: hci6: command 0x0406 tx timeout [ 1605.109262][T25106] Bluetooth: hci5: command 0x0c1a tx timeout [ 1605.115330][T25106] Bluetooth: hci1: command 0x0c1a tx timeout [ 1605.121648][T25106] Bluetooth: hci4: command 0x0406 tx timeout [ 1605.153692][T25558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.349092][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 1605.376327][T25558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.389140][ T969] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1605.548004][T25558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.579124][ T969] usb 10-1: Using ep0 maxpacket: 32 [ 1605.610176][ T969] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1605.674098][ T969] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1605.895937][ T969] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1606.828277][ T969] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.901312][ T969] usb 10-1: config 0 descriptor?? [ 1607.180165][ T969] hub 10-1:0.0: bad descriptor, ignoring hub [ 1607.186222][ T969] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1607.197580][ T5861] Bluetooth: hci5: command 0x0c1a tx timeout [ 1607.199119][ T969] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1607.229929][ T5935] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.331720][T25734] netlink: 'syz.8.4476': attribute type 4 has an invalid length. [ 1607.431427][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 1608.175389][T25706] loop9: detected capacity change from 0 to 256 [ 1608.210052][T25706] vfat: Unknown parameter '' [ 1609.273340][ T5861] Bluetooth: hci5: command 0x0c1a tx timeout [ 1609.516161][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 1610.429397][T25558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.446800][T22132] hfsplus: b-tree write err: -5, ino 4 [ 1611.659503][T25751] netlink: 'syz.7.4477': attribute type 4 has an invalid length. [ 1612.086937][ T972] usb 10-1: USB disconnect, device number 25 [ 1612.294350][ T5935] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.440915][ T5935] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.745518][ T5935] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.216514][T25558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1616.339612][T25558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1616.561982][T25558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1616.636161][T25558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1616.672051][T25790] syz.7.4491 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1618.280365][T25813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4500'. [ 1619.069170][T25829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1619.085122][T25830] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4503'. [ 1619.302979][T25818] loop9: detected capacity change from 0 to 1024 [ 1620.641695][T22132] hfsplus: b-tree write err: -5, ino 4 [ 1620.797288][T25846] netlink: 'syz.1.4507': attribute type 4 has an invalid length. [ 1621.586232][T25855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4509'. [ 1622.013901][ T5935] bond0 (unregistering): Released all slaves [ 1622.058352][T25813] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1622.106130][T25813] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1622.120485][T25558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1622.184919][T25558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.251946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.259091][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1623.311248][T25886] loop9: detected capacity change from 0 to 512 [ 1623.359675][T25886] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1623.871943][T25886] EXT4-fs (loop9): 1 truncate cleaned up [ 1623.909778][T25886] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1623.924265][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.931406][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1624.638027][T25901] netlink: zone id is out of range [ 1624.644907][T25901] netlink: set zone limit has 8 unknown bytes [ 1625.781803][T25558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1626.761026][T25927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4525'. [ 1627.190691][ T5935] hsr_slave_0: left promiscuous mode [ 1627.235731][ T5935] hsr_slave_1: left promiscuous mode [ 1628.369349][ T5935] veth1_macvtap: left promiscuous mode [ 1628.374915][ T5935] veth0_macvtap: left promiscuous mode [ 1628.381366][ T5935] veth1_vlan: left promiscuous mode [ 1628.386674][ T5935] veth0_vlan: left promiscuous mode [ 1628.764455][T25944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4529'. [ 1628.799243][T25101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.828695][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4529'. [ 1630.212300][T25558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1630.346258][T25964] loop3: detected capacity change from 0 to 1024 [ 1630.390567][T25968] loop9: detected capacity change from 0 to 1024 [ 1630.500867][T25964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1630.548488][T25968] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1630.581266][T25968] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1630.681038][T25964] siw: device registration error -23 [ 1630.915662][T20156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1631.090018][T25558] veth0_vlan: entered promiscuous mode [ 1631.123510][T25558] veth1_vlan: entered promiscuous mode [ 1631.224637][T25558] veth0_macvtap: entered promiscuous mode [ 1631.250731][T25558] veth1_macvtap: entered promiscuous mode [ 1631.279292][T25995] loop3: detected capacity change from 0 to 1024 [ 1631.346892][T25558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1631.396700][T25558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1631.438381][T25558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1631.466754][T25558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1631.606363][T25558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1631.619182][T25558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1631.629113][T25558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1631.639590][T25558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.449682][T25977] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1632.571057][T25558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1632.709307][ T81] hfsplus: b-tree write err: -5, ino 4 [ 1632.773179][T25558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1632.839678][T25558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.880753][T25558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1632.959826][T25558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.984464][T25558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.059095][T25558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.089066][T25558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.128991][T25558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.149221][T26011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4544'. [ 1633.169376][T25558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.199730][T25558] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.208458][T25558] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.252341][T25558] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.261322][T25558] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.272997][T26011] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1633.351585][T26011] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1633.449371][ T7146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1633.494887][ T7146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1633.609524][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1633.628289][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.008573][T26030] xt_ecn: cannot match TCP bits for non-tcp packets [ 1634.209195][T26030] loop4: detected capacity change from 0 to 2048 [ 1634.267211][T26030] ext2: Unknown parameter 'fsuuid' [ 1634.357564][T26036] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4548'. [ 1635.608197][T25101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1635.714906][T26057] loop3: detected capacity change from 0 to 1024 [ 1635.821123][T26054] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1637.179694][ T81] hfsplus: b-tree write err: -5, ino 4 [ 1637.381625][T26083] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4559'. [ 1640.200029][T26117] xt_ecn: cannot match TCP bits for non-tcp packets [ 1640.241773][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 1640.241792][ T30] audit: type=1326 audit(1742126631.035:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26109 comm="syz.8.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1640.394373][T26117] loop4: detected capacity change from 0 to 2048 [ 1640.441475][T26117] ext2: Unknown parameter 'fsuuid' [ 1640.455465][T26120] team0: Mode changed to "loadbalance" [ 1640.462088][ T30] audit: type=1326 audit(1742126631.065:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26109 comm="syz.8.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1640.633876][ T30] audit: type=1326 audit(1742126631.085:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26109 comm="syz.8.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1640.815420][ T30] audit: type=1326 audit(1742126631.085:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26109 comm="syz.8.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1640.916156][T26134] loop9: detected capacity change from 0 to 1024 [ 1640.942539][ T30] audit: type=1326 audit(1742126631.085:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26109 comm="syz.8.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1641.118990][ T30] audit: type=1326 audit(1742126631.085:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26109 comm="syz.8.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1641.380448][ T30] audit: type=1326 audit(1742126631.085:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26109 comm="syz.8.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1641.403493][ T30] audit: type=1326 audit(1742126631.085:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26109 comm="syz.8.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1641.544033][ T30] audit: type=1326 audit(1742126631.085:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26109 comm="syz.8.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1642.289202][ T30] audit: type=1326 audit(1742126631.085:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26109 comm="syz.8.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac478d169 code=0x7ffc0000 [ 1643.358243][T26155] netlink: zone id is out of range [ 1643.365507][T26155] netlink: set zone limit has 8 unknown bytes [ 1643.589415][T22132] hfsplus: b-tree write err: -5, ino 4 [ 1646.545304][T26186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1646.638780][T26186] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1646.654476][T26190] xt_ecn: cannot match TCP bits for non-tcp packets [ 1646.687656][T26186] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1646.748537][T26190] loop4: detected capacity change from 0 to 2048 [ 1646.796030][T26190] ext2: Unknown parameter 'fsuuid' [ 1646.873988][T26198] loop9: detected capacity change from 0 to 512 [ 1646.903843][T26198] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1646.991627][T26198] EXT4-fs (loop9): 1 truncate cleaned up [ 1646.998370][T26198] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1648.909175][T25101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.475654][T26277] xt_ecn: cannot match TCP bits for non-tcp packets [ 1655.496251][T26277] loop4: detected capacity change from 0 to 2048 [ 1655.540100][T26277] ext2: Unknown parameter 'fsuuid' [ 1655.739972][T26287] overlayfs: failed to clone upperpath [ 1655.977382][T26292] loop9: detected capacity change from 0 to 256 [ 1656.025103][T26292] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1656.380324][T26302] netlink: 1284 bytes leftover after parsing attributes in process `syz.9.4610'. [ 1656.389802][T26302] openvswitch: netlink: Flow actions attr not present in new flow. [ 1659.541864][T26318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4619'. [ 1660.020851][T26335] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4622'. [ 1662.001222][T26345] loop4: detected capacity change from 0 to 1024 [ 1662.498938][T26345] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 1662.716562][T26358] loop3: detected capacity change from 0 to 256 [ 1662.720635][T26345] bridge0: port 3(syz_tun) entered blocking state [ 1662.729561][T26345] bridge0: port 3(syz_tun) entered disabled state [ 1662.734133][T26358] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1662.736169][T26345] syz_tun: entered allmulticast mode [ 1662.756493][T26345] syz_tun: entered promiscuous mode [ 1662.762368][T26345] bridge0: port 3(syz_tun) entered blocking state [ 1662.768855][T26345] bridge0: port 3(syz_tun) entered forwarding state [ 1663.073217][T26363] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.4628'. [ 1663.082575][T26363] openvswitch: netlink: Flow actions attr not present in new flow. [ 1663.953633][T26368] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1664.190499][T26371] loop4: detected capacity change from 0 to 1024 [ 1667.699204][T26403] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4640'. [ 1669.544214][T26417] netlink: 1284 bytes leftover after parsing attributes in process `syz.8.4644'. [ 1669.553488][T26417] openvswitch: netlink: Flow actions attr not present in new flow. [ 1670.514201][ T6969] hfsplus: b-tree write err: -5, ino 4 [ 1670.579494][T26409] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4642'. [ 1671.968655][T26422] netlink: zone id is out of range [ 1671.975522][T26422] netlink: set zone limit has 8 unknown bytes [ 1672.123910][T26429] netlink: 'syz.8.4648': attribute type 49 has an invalid length. [ 1673.280684][T26435] loop9: detected capacity change from 0 to 1024 [ 1673.410708][T26435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1673.840483][T26467] loop3: detected capacity change from 0 to 256 [ 1674.093380][T26467] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1674.387538][T25101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.034679][T26483] openvswitch: netlink: Flow actions attr not present in new flow. [ 1676.092487][T26498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4668'. [ 1679.400405][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807db20400: rx timeout, send abort [ 1679.908736][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807db20400: abort rx timeout. Force session deactivation [ 1681.471802][T26539] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4675'. [ 1684.069762][T26554] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1684.356921][T26558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4678'. [ 1684.501234][T26564] loop3: detected capacity change from 0 to 1024 [ 1684.604813][T26564] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 1688.921064][T26594] autofs: Unknown parameter 'fd0x0000000000000000' [ 1690.218162][T26591] loop4: detected capacity change from 0 to 1024 [ 1690.308569][T26600] overlayfs: missing 'lowerdir' [ 1690.809040][T26591] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 1692.125384][T26624] team0: Mode changed to "loadbalance" [ 1692.363333][T26630] xt_ecn: cannot match TCP bits for non-tcp packets [ 1692.391021][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4682'. [ 1692.406488][ T5861] Bluetooth: hci5: unexpected event for opcode 0x0c2d [ 1692.440446][T26633] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1692.455961][T26637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4701'. [ 1692.474860][T26639] loop3: detected capacity change from 0 to 1024 [ 1692.492759][T26639] hfsplus: Unknown parameter 'barier' [ 1692.568545][T26637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4701'. [ 1692.577630][T26633] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1692.828339][T26639] loop3: detected capacity change from 0 to 4096 [ 1693.068825][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1693.068847][ T30] audit: type=1800 audit(1742126683.855:392): pid=26639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4704" name="file0" dev="loop3" ino=0 res=0 errno=0 [ 1693.434547][T26659] autofs: Unknown parameter 'fd0x0000000000000000' [ 1695.169048][T16079] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1695.704202][T16079] usb 4-1: Using ep0 maxpacket: 8 [ 1695.732768][T16079] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1695.748675][T16079] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.761790][T26666] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4709'. [ 1695.802603][T16079] usb 4-1: config 6 has no interface number 0 [ 1695.822362][T16079] usb 4-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1695.853541][T16079] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1695.947223][T16079] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1696.188973][T16079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.479183][ T5861] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1696.491038][ T5861] Bluetooth: hci5: Injecting HCI hardware error event [ 1696.501801][T25106] Bluetooth: hci5: hardware error 0x00 [ 1697.101815][T16079] usb 4-1: Product: syz [ 1697.106035][T16079] usb 4-1: Manufacturer: syz [ 1697.268555][T16079] usb 4-1: SerialNumber: syz [ 1697.309421][T16079] usb 4-1: can't set config #6, error -71 [ 1697.331068][T16079] usb 4-1: USB disconnect, device number 38 [ 1697.423927][T26685] overlayfs: failed to clone upperpath [ 1698.199553][T26706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1698.895105][T25106] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1699.057167][T26711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4718'. [ 1700.929064][T26724] xt_ecn: cannot match TCP bits for non-tcp packets [ 1700.973217][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4719'. [ 1701.086268][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4719'. [ 1702.338103][T26743] loop3: detected capacity change from 0 to 1024 [ 1703.925607][T15994] hfsplus: b-tree write err: -5, ino 4 [ 1703.952836][T26761] loop4: detected capacity change from 0 to 256 [ 1703.966612][T26761] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1704.282317][T26768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1705.860338][T26770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4729'. [ 1708.514287][T26799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4741'. [ 1708.526728][T26803] xt_ecn: cannot match TCP bits for non-tcp packets [ 1708.573193][T26799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4741'. [ 1709.827853][T26825] netlink: 'syz.9.4745': attribute type 4 has an invalid length. [ 1710.262732][T26844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1711.639259][T26849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1711.648192][T26849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1711.783201][T26842] loop4: detected capacity change from 0 to 4096 [ 1711.887426][T26842] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1711.933750][T26842] ntfs3(loop4): ino=0, mi_enum_attr [ 1711.956117][T26842] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1712.205090][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4755'. [ 1712.719972][T26842] ntfs3(loop4): volume is dirty and "force" flag is not set! [ 1712.933478][T26868] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4757'. [ 1712.938201][T26857] netlink: 'syz.1.4756': attribute type 4 has an invalid length. [ 1714.836550][T26879] xt_ecn: cannot match TCP bits for non-tcp packets [ 1716.727601][T26905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1718.027960][T26931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4773'. [ 1718.843850][T26933] loop9: detected capacity change from 0 to 1024 [ 1718.968330][T26933] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1719.252930][T26950] team0: No ports can be present during mode change [ 1719.307727][T26953] overlayfs: failed to clone upperpath [ 1719.399914][T25101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.799266][T26961] loop4: detected capacity change from 0 to 1024 [ 1719.802839][T26964] loop9: detected capacity change from 0 to 256 [ 1720.091222][T26964] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1720.472218][T26972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1721.673709][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1721.684509][T26968] netlink: zone id is out of range [ 1721.691820][T26968] netlink: set zone limit has 8 unknown bytes [ 1721.723031][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1721.872757][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1721.919793][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1721.925565][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1721.946245][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1721.955281][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1722.198275][T26984] xt_ecn: cannot match TCP bits for non-tcp packets [ 1722.404794][T26984] loop4: detected capacity change from 0 to 2048 [ 1723.438823][T26984] ext2: Unknown parameter 'fsuuid' [ 1723.989623][ T5861] Bluetooth: hci1: command tx timeout [ 1726.097811][ T5861] Bluetooth: hci1: command tx timeout [ 1726.858499][T26973] chnl_net:caif_netlink_parms(): no params data found [ 1726.967755][T27015] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1727.376017][T27028] loop9: detected capacity change from 0 to 512 [ 1727.519757][T27028] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1727.722630][T27028] EXT4-fs (loop9): 1 truncate cleaned up [ 1727.771506][T27028] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1727.789790][T27039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1728.162058][ T5861] Bluetooth: hci1: command tx timeout [ 1728.187082][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1729.451841][T27001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1729.518816][T27001] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1730.254983][ T5861] Bluetooth: hci1: command tx timeout [ 1731.246712][T26973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.278986][T26973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.305265][T26973] bridge_slave_0: entered allmulticast mode [ 1731.324514][T25101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1731.330191][T26973] bridge_slave_0: entered promiscuous mode [ 1731.596475][T26973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.603663][T26973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.610923][T26973] bridge_slave_1: entered allmulticast mode [ 1731.618132][T26973] bridge_slave_1: entered promiscuous mode [ 1732.761018][T27090] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4801'. [ 1734.759359][T27001] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1734.855987][T27001] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1735.062969][T26973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.803944][T26973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.884719][T27106] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1735.909900][T27115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4807'. [ 1736.716906][T27001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1736.758338][T27001] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1736.767867][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 1736.780625][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1736.789026][ C0] CPU: 0 UID: 0 PID: 17 Comm: ksoftirqd/0 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 1736.799612][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1736.809667][ C0] RIP: 0010:dst_dev_put+0x27/0x290 [ 1736.814776][ C0] Code: 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 60 d5 f2 f7 4d 89 ec 49 c1 ec 03 <43> 80 3c 3c 00 74 08 4c 89 ef e8 5a 0e 5a f8 4d 8b 75 00 49 8d 7d [ 1736.834387][ C0] RSP: 0018:ffffc900001678d8 EFLAGS: 00010256 [ 1736.840463][ C0] RAX: ffffffff89cf0a70 RBX: 0000000000000001 RCX: ffff88801d6f0000 [ 1736.848437][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1736.856406][ C0] RBP: 1ffffffff1caa64a R08: ffffffff8a77f869 R09: 1ffff1100d56a0c0 [ 1736.864381][ C0] R10: dffffc0000000000 R11: ffffed100d56a0c1 R12: 0000000000000000 [ 1736.872356][ C0] R13: 0000000000000001 R14: 00000000fffffff8 R15: dffffc0000000000 [ 1736.880332][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1736.889262][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1736.895841][ C0] CR2: 00007f540a1a2378 CR3: 00000000278de000 CR4: 0000000000350ef0 [ 1736.903809][ C0] Call Trace: [ 1736.907081][ C0] [ 1736.910006][ C0] ? __die_body+0x5f/0xb0 [ 1736.914358][ C0] ? die_addr+0xb0/0xe0 [ 1736.918530][ C0] ? exc_general_protection+0x3dd/0x5d0 [ 1736.924095][ C0] ? asm_exc_general_protection+0x26/0x30 [ 1736.929827][ C0] ? fib_nh_common_release+0x199/0x420 [ 1736.935302][ C0] ? dst_dev_put+0x20/0x290 [ 1736.939811][ C0] ? dst_dev_put+0x27/0x290 [ 1736.944309][ C0] ? dst_dev_put+0x20/0x290 [ 1736.948808][ C0] fib_nh_common_release+0x1fc/0x420 [ 1736.954113][ C0] ? __pfx_fib6_info_destroy_rcu+0x10/0x10 [ 1736.959932][ C0] fib6_info_destroy_rcu+0xc0/0x1b0 [ 1736.965141][ C0] ? rcu_core+0xa37/0x17a0 [ 1736.969556][ C0] ? __pfx_fib6_info_destroy_rcu+0x10/0x10 [ 1736.975375][ C0] rcu_core+0xaac/0x17a0 [ 1736.979627][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1736.984304][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.989950][ C0] ? rcu_qs+0xf1/0x190 [ 1736.994018][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 1736.998522][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.004165][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1737.010156][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1737.016505][ C0] handle_softirqs+0x2d6/0x9b0 [ 1737.021278][ C0] ? run_ksoftirqd+0xca/0x130 [ 1737.025962][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1737.031252][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.036895][ C0] run_ksoftirqd+0xca/0x130 [ 1737.041404][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1737.046519][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 1737.052248][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.057895][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1737.063010][ C0] smpboot_thread_fn+0x546/0xa30 [ 1737.067957][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 1737.072991][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1737.078455][ C0] kthread+0x7ab/0x920 [ 1737.082539][ C0] ? __pfx_kthread+0x10/0x10 [ 1737.087141][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1737.092608][ C0] ? __pfx_kthread+0x10/0x10 [ 1737.097208][ C0] ? __pfx_kthread+0x10/0x10 [ 1737.101808][ C0] ? __pfx_kthread+0x10/0x10 [ 1737.106406][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1737.111608][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.117265][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1737.122475][ C0] ? __pfx_kthread+0x10/0x10 [ 1737.127082][ C0] ret_from_fork+0x4d/0x80 [ 1737.131511][ C0] ? __pfx_kthread+0x10/0x10 [ 1737.136110][ C0] ret_from_fork_asm+0x1a/0x30 [ 1737.140886][ C0] [ 1737.143902][ C0] Modules linked in: [ 1737.147888][ C0] ---[ end trace 0000000000000000 ]--- [ 1737.153369][ C0] RIP: 0010:dst_dev_put+0x27/0x290 [ 1737.158479][ C0] Code: 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 60 d5 f2 f7 4d 89 ec 49 c1 ec 03 <43> 80 3c 3c 00 74 08 4c 89 ef e8 5a 0e 5a f8 4d 8b 75 00 49 8d 7d [ 1737.178103][ C0] RSP: 0018:ffffc900001678d8 EFLAGS: 00010256 [ 1737.184203][ C0] RAX: ffffffff89cf0a70 RBX: 0000000000000001 RCX: ffff88801d6f0000 [ 1737.192195][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1737.200181][ C0] RBP: 1ffffffff1caa64a R08: ffffffff8a77f869 R09: 1ffff1100d56a0c0 [ 1737.208186][ C0] R10: dffffc0000000000 R11: ffffed100d56a0c1 R12: 0000000000000000 [ 1737.216168][ C0] R13: 0000000000000001 R14: 00000000fffffff8 R15: dffffc0000000000 [ 1737.224163][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1737.233103][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1737.239691][ C0] CR2: 00007f540a1a2378 CR3: 00000000278de000 CR4: 0000000000350ef0 [ 1737.247666][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1737.255082][ C0] Kernel Offset: disabled [ 1737.259405][ C0] Rebooting in 86400 seconds..