last executing test programs: 13m27.114151728s ago: executing program 0 (id=146): mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000000c0)="4688081fa304324e12c68c6e8737b98e", 0x10) 13m25.037299897s ago: executing program 0 (id=149): syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2f95000090780000"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') chdir(&(0x7f0000000280)='./file0\x00') socket$inet6_sctp(0xa, 0x801, 0x84) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) 13m22.829165148s ago: executing program 0 (id=153): landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r4}}, 0x18) 13m21.03852346s ago: executing program 0 (id=157): syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2f95000090780000"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') chdir(&(0x7f0000000280)='./file0\x00') socket$inet6_sctp(0xa, 0x801, 0x84) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(0xffffffffffffffff) 13m14.050627924s ago: executing program 0 (id=167): landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r5}}, 0x18) 13m13.030039698s ago: executing program 0 (id=169): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=r0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 12m57.800439545s ago: executing program 32 (id=169): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=r0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 8m34.718315808s ago: executing program 3 (id=787): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) getrlimit(0xb, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1, 0x2000000, 0x300}, 0x38) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) 8m32.982230629s ago: executing program 3 (id=791): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='0x1d6b\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='0x0104', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='super-speed\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) 8m30.940481516s ago: executing program 3 (id=795): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2710, @hyper}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x4, 0x800) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0xc0f, 0x8, 0x9, 0x1, 0x0, 0xfff}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet6(r2, 0x0, 0x0, 0x4000001) open$dir(&(0x7f0000000280)='./file1\x00', 0x202001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000022a00)={0x8000001, 0x0, 0x0, 0x0, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3fffd}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 8m27.82255991s ago: executing program 3 (id=801): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) getrlimit(0xb, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1, 0x2000000, 0x300}, 0x38) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) 8m25.68672142s ago: executing program 3 (id=804): landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) 8m23.125580279s ago: executing program 3 (id=809): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 8m7.243486931s ago: executing program 33 (id=809): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 8.930523482s ago: executing program 1 (id=2324): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) 6.255676984s ago: executing program 1 (id=2327): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0xc042) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000300002400240000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4.7453828s ago: executing program 1 (id=2334): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffe73) 4.579106274s ago: executing program 2 (id=2338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c000280080001", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x1, 0x0, 0x0, 0xff, 0x100, @void}, "b68ed34f131c03e57e518e4d0800000040"}}}}, 0xfdef) 4.520849175s ago: executing program 1 (id=2340): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5a, 0x2f}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x24}, {0x4, 0x1}, {0x48}, {0xc, 0x1}, {0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040015}, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet(0x2, 0xa, 0x80000001) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x4f}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r5, 0x1, 0x12, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 4.373652068s ago: executing program 4 (id=2342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0xc042) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000000002400240000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4.183778353s ago: executing program 1 (id=2343): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204c08, &(0x7f00000000c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@compress}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 4.079893585s ago: executing program 2 (id=2344): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0xc042) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000300002400240000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 3.88945505s ago: executing program 4 (id=2346): syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff200140600fe800000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2f950000907800"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') chdir(&(0x7f0000000280)='./file0\x00') socket$inet6_sctp(0xa, 0x801, 0x84) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) 3.88848592s ago: executing program 6 (id=2347): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x7ff}, 0x8) 3.734653753s ago: executing program 5 (id=2348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x4000, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0xe, 0x4, 0x3, 0x2, 0x8000, 0x68, 0x2f, 0x5, 0x6, 0x1, @private=0xa010100, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xaf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x7ff}, {@empty}, {@private=0xa010101, 0x3}]}]}}}}}, 0x62) 2.899169693s ago: executing program 4 (id=2349): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004c8c0) sendto$inet6(r0, &(0x7f0000000700)="cedca7", 0x3, 0x3b00, 0x0, 0x0) 2.841542214s ago: executing program 6 (id=2350): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000003c0)) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)=@random={'security.', 'vfat\x00'}, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 2.840904894s ago: executing program 2 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x7ff, 0x10000000, 0x1}, @rand_addr=0x64010102, @private=0xa010101, 0x9751304b5dc4b606, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) 2.724636767s ago: executing program 4 (id=2352): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) 2.705150938s ago: executing program 5 (id=2353): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5a, 0x2f}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x24}, {0x4, 0x1}, {0x48}, {0xc, 0x1}, {0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040015}, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet(0x2, 0xa, 0x80000001) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x4f}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r5, 0x1, 0x12, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.629756979s ago: executing program 6 (id=2354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c000280080001", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x1, 0x0, 0x0, 0xff, 0x100, @void}, "b68ed34f131c03e57e518e4d0800000040"}}}}, 0xfdef) 2.472938033s ago: executing program 2 (id=2355): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f00000002c0), &(0x7f0000000380)}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001e00), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={0xffffffffffffffff, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001ec0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000001f80)=[{}, {}], 0x10, 0x10, &(0x7f0000001fc0), &(0x7f0000002000), 0x8, 0xa, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000021c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000023c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002340), &(0x7f0000002380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x9, 0x27, &(0x7f00000007c0)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x889, 0x1000, &(0x7f0000000e00)=""/4096, 0x41000, 0x20, '\x00', r2, @cgroup_sock=0xd, r7, 0x8, &(0x7f0000001e40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001e80)={0x5, 0xf, 0x2, 0x80000001}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f0000002400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r9], 0x0, 0x10, 0x10}, 0x94) 2.370789365s ago: executing program 5 (id=2356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0xc042) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000000002400240000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.101516892s ago: executing program 6 (id=2357): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0xc, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2000) 2.018773124s ago: executing program 5 (id=2358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="a1e0afd9525b"}) write$tun(r0, &(0x7f0000000300)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@esp={{0x5, 0x4, 0x1, 0x7, 0x49, 0x68, 0x0, 0x2, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x4d3, 0x3, @cc={0x1, 0x0, 0xe8, 0x7fff, 0x80000001, 0xfffffffe, 0x4, [@runt="61df21792c76a4bb9e084f4cac75bfb67665"]}, "97", 0x1}}}}, 0x57) 1.944681555s ago: executing program 2 (id=2359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = semget$private(0x0, 0x6, 0x3b1) semop(r6, 0x0, 0x0) semctl$GETZCNT(r6, 0x0, 0xf, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.583990223s ago: executing program 4 (id=2360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x8}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 1.579888554s ago: executing program 1 (id=2361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0x9c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x9c}}, 0x0) 774.167063ms ago: executing program 6 (id=2362): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0xc042) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000300002400240000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 621.817696ms ago: executing program 2 (id=2363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x4000, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0xe, 0x4, 0x3, 0x2, 0x8000, 0x68, 0x2f, 0x5, 0x6, 0x1, @private=0xa010100, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xaf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x7ff}, {@empty}, {@private=0xa010102, 0x5}]}]}}}}}, 0x62) 595.526767ms ago: executing program 5 (id=2364): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2) 109.821658ms ago: executing program 5 (id=2365): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5a, 0x2f}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x24}, {0x4, 0x1}, {0x48}, {0xc, 0x1}, {0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040015}, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet(0x2, 0xa, 0x80000001) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x4f}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r5, 0x1, 0x12, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 9.568311ms ago: executing program 6 (id=2366): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5a, 0x2f}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x24}, {0x4, 0x1}, {0x48}, {0xc, 0x1}, {0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040015}, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet(0x2, 0xa, 0x80000001) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x4f}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r5, 0x1, 0x12, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 0s ago: executing program 4 (id=2367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x1, 0x0, 0x0, 0xff, 0x100, @void}, "b68ed34f131c03e57e518e4d0800000040"}}}}, 0xfdef) kernel console output (not intermixed with test programs): config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.853778][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 508.881194][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 508.884034][ T127] usb 3-1: config 0 has no interface number 0 [ 508.900476][ T5296] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.907570][ T5296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.936062][ T127] usb 3-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 508.984268][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 508.989652][ T127] usb 3-1: config 0 interface 1 has no altsetting 0 [ 508.998296][ T127] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 509.024020][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 509.055587][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.082125][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.089269][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.090446][ T5296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.126305][ T127] usb 3-1: config 0 descriptor?? [ 509.151348][ T127] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 509.246122][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 509.286353][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 509.315548][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 509.350913][ T5554] usb 3-1: USB disconnect, device number 6 [ 509.366370][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 509.430540][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 509.479069][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 509.514982][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 509.554112][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 509.600976][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 510.147903][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 510.207306][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 510.239110][ T7720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 512.790266][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.797771][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.857671][ T7720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.143831][ T7955] loop1: detected capacity change from 0 to 32768 [ 513.317352][ T7955] XFS (loop1): Mounting V5 Filesystem [ 513.422225][ T7955] XFS (loop1): log mount failed [ 513.761273][ T7986] Invalid ELF header magic: != ELF [ 514.622908][ T7990] device syzkaller0 entered promiscuous mode [ 514.845740][ T53] block nbd5: Attempted send on invalid socket [ 514.852063][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 516.591648][ T8019] Invalid ELF header magic: != ELF [ 517.199309][ T5554] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 517.326305][ T8021] loop4: detected capacity change from 0 to 40427 [ 517.402401][ T8021] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 517.410379][ T8021] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 517.422300][ T8021] F2FS-fs (loop4): invalid crc value [ 517.456077][ T8021] F2FS-fs (loop4): Found nat_bits in checkpoint [ 517.548970][ T8021] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 517.556880][ T8021] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 517.599441][ T5554] usb 6-1: Using ep0 maxpacket: 8 [ 517.607420][ T5554] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.760259][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 517.779179][ T5554] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.762719][ T8032] Invalid ELF header magic: != ELF [ 518.799824][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 518.862654][ T5554] usb 6-1: config 0 has no interface number 0 [ 518.868804][ T5554] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 518.951368][ T5554] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 519.036949][ T7720] device veth0_vlan entered promiscuous mode [ 519.043201][ T5554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.078461][ T5554] usb 6-1: config 0 descriptor?? [ 519.142395][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 519.170065][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 519.183370][ T7720] device veth1_vlan entered promiscuous mode [ 519.192120][ T5554] usb 6-1: can't set config #0, error -71 [ 519.215953][ T5554] usb 6-1: USB disconnect, device number 7 [ 519.224633][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 519.241885][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 519.317337][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 519.346530][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 519.412315][ T7720] device veth0_macvtap entered promiscuous mode [ 519.446180][ T7720] device veth1_macvtap entered promiscuous mode [ 520.754919][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 520.780471][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 520.824943][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.909290][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.919147][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.989899][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.004116][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.017438][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.057335][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.156010][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.305592][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.334200][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 521.630261][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 521.671782][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.698450][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.736926][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.791594][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.969375][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.035769][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.118584][ T8068] Invalid ELF header magic: != ELF [ 522.417589][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.769245][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.840356][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.851576][ T8054] device syzkaller0 entered promiscuous mode [ 523.033056][ T7720] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.062342][ T7720] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.092678][ T7720] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.119324][ T7720] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.170245][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 523.199337][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.431999][ T5301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.454354][ T5301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.586455][ T5301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.609265][ T5301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.641688][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 523.665039][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 523.756504][ T8084] Invalid ELF header magic: != ELF [ 524.279278][ T4336] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 524.479385][ T4336] usb 2-1: Using ep0 maxpacket: 8 [ 524.487081][ T4336] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 524.518201][ T8087] loop5: detected capacity change from 0 to 512 [ 524.539374][ T4336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.594823][ T4336] usb 2-1: config 0 has no interface number 0 [ 524.628075][ T4336] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.670831][ T8087] EXT4-fs (loop5): 1 orphan inode deleted [ 524.679431][ T8087] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 524.704215][ T4336] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 524.716341][ T8087] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.767538][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.967259][ T4336] usb 2-1: config 0 descriptor?? [ 524.977285][ T5292] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 525.022135][ T5292] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:30: Failed to release dquot type 1 [ 525.434793][ T4336] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 525.515505][ T4324] usb 2-1: USB disconnect, device number 6 [ 525.544554][ T5057] EXT4-fs (loop5): unmounting filesystem. [ 525.562063][ T5292] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 525.605279][ T5292] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:30: Failed to release dquot type 1 [ 526.803081][ T8121] Invalid ELF header magic: != ELF [ 527.530575][ T8123] device syzkaller0 entered promiscuous mode [ 527.758778][ T8128] Invalid ELF header magic: != ELF [ 529.923318][ T8148] Invalid ELF header magic: != ELF [ 531.606411][ T8156] dns_resolver: Unsupported content type (89) [ 531.736241][ T8161] Invalid ELF header magic: != ELF [ 531.743129][ T4336] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 532.397400][ T8156] loop6: detected capacity change from 0 to 256 [ 532.999102][ T4336] usb 3-1: Using ep0 maxpacket: 8 [ 533.040643][ T4336] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 533.123014][ T4336] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.183255][ T4336] usb 3-1: config 0 has no interface number 0 [ 533.214253][ T4336] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.292276][ T4336] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 533.508918][ T8173] Invalid ELF header magic: != ELF [ 533.523430][ T4336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.542546][ T4336] usb 3-1: config 0 descriptor?? [ 533.560931][ T4336] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 533.769416][ T4336] usb 3-1: USB disconnect, device number 7 [ 534.410881][ T8182] device syzkaller0 entered promiscuous mode [ 534.974344][ T8194] Invalid ELF header magic: != ELF [ 537.177114][ T8206] Invalid ELF header magic: != ELF [ 539.156055][ T8227] Invalid ELF header magic: != ELF [ 539.644783][ T8229] device syzkaller0 entered promiscuous mode [ 539.699346][ T127] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 539.891367][ T127] usb 7-1: Using ep0 maxpacket: 8 [ 539.898283][ T127] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 539.933826][ T127] usb 7-1: config 0 has no interface number 0 [ 539.953609][ T127] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.987368][ T127] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 540.028940][ T127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.057294][ T127] usb 7-1: config 0 descriptor?? [ 540.128268][ T8237] Invalid ELF header magic: != ELF [ 540.613532][ T127] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 540.681715][ T8239] Invalid ELF header magic: != ELF [ 540.816416][ T127] usb 7-1: USB disconnect, device number 2 [ 540.932670][ T6675] block nbd1: Attempted send on invalid socket [ 540.938971][ T6675] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 541.011449][ T8246] netlink: 348 bytes leftover after parsing attributes in process `syz.2.958'. [ 541.020526][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 541.090262][ T8246] loop2: detected capacity change from 0 to 4096 [ 541.236446][ T8246] ntfs3: loop2: Failed to load $AttrDef -> 0 [ 541.745354][ T8254] Invalid ELF header magic: != ELF [ 544.147358][ T8277] Invalid ELF header magic: != ELF [ 544.854888][ T8278] device syzkaller0 entered promiscuous mode [ 545.256042][ T8292] Invalid ELF header magic: != ELF [ 546.036776][ T8294] loop4: detected capacity change from 0 to 32768 [ 546.186336][ T8294] XFS (loop4): Mounting V5 Filesystem [ 546.304065][ T8294] XFS (loop4): Ending clean mount [ 546.481920][ T5554] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 547.384229][ T4272] XFS (loop4): Unmounting Filesystem [ 547.549366][ T5554] usb 7-1: Using ep0 maxpacket: 8 [ 547.560992][ T5554] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 547.569021][ T5554] usb 7-1: config 0 has no interface number 0 [ 547.613317][ T5554] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.924352][ T5554] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 548.152010][ T5554] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.241654][ T5554] usb 7-1: config 0 descriptor?? [ 548.312497][ T5554] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 548.495995][ T5554] usb 7-1: USB disconnect, device number 3 [ 549.862039][ T8345] Invalid ELF header magic: != ELF [ 550.934299][ T8342] Invalid ELF header magic: != ELF [ 551.489324][ T5554] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 551.523751][ T8365] Invalid ELF header magic: != ELF [ 551.681277][ T5554] usb 6-1: config 0 interface 0 has no altsetting 0 [ 551.709907][ T5554] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 551.718993][ T5554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.795433][ T5554] usb 6-1: config 0 descriptor?? [ 551.860877][ T8373] netlink: 'syz.2.990': attribute type 4 has an invalid length. [ 552.399493][ T5554] usbhid 6-1:0.0: can't add hid device: -71 [ 552.415853][ T5554] usbhid: probe of 6-1:0.0 failed with error -71 [ 552.477579][ T5554] usb 6-1: USB disconnect, device number 8 [ 552.483819][ T4260] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 552.769378][ T4260] usb 3-1: Using ep0 maxpacket: 8 [ 552.779899][ T4260] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 552.787963][ T4260] usb 3-1: config 0 has no interface number 0 [ 552.801699][ T4260] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 552.819667][ T4260] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 552.829109][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.859351][ T4260] usb 3-1: config 0 descriptor?? [ 552.867102][ T4260] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 553.073845][ T4260] usb 3-1: USB disconnect, device number 8 [ 554.011417][ T8392] loop6: detected capacity change from 0 to 512 [ 554.205874][ T8392] EXT4-fs (loop6): 1 orphan inode deleted [ 554.436792][ T8407] Invalid ELF header magic: != ELF [ 554.447157][ T5273] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 554.792117][ T8392] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 555.090152][ T8392] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.111090][ T5273] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:25: Failed to release dquot type 1 [ 555.392016][ T8414] device syzkaller0 entered promiscuous mode [ 556.403690][ T8428] netlink: 'syz.5.1001': attribute type 4 has an invalid length. [ 556.614075][ T7720] EXT4-fs (loop6): unmounting filesystem. [ 556.644422][ T5298] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 556.679795][ T5298] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:33: Failed to release dquot type 1 [ 557.710275][ T4324] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 557.945738][ T8455] Invalid ELF header magic: != ELF [ 558.019525][ T4324] usb 3-1: Using ep0 maxpacket: 8 [ 558.064980][ T4324] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.490233][ T4324] usb 3-1: config 0 has no interface number 0 [ 558.496528][ T4324] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 558.512875][ T4324] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 558.522712][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.612183][ T4324] usb 3-1: config 0 descriptor?? [ 558.621046][ T4324] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 558.922699][ T4336] usb 3-1: USB disconnect, device number 9 [ 558.988105][ T8467] Invalid ELF header magic: != ELF [ 560.035578][ T8470] device syzkaller0 entered promiscuous mode [ 560.104875][ T8474] loop1: detected capacity change from 0 to 512 [ 560.218725][ T8474] EXT4-fs (loop1): 1 orphan inode deleted [ 560.230246][ T5115] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 560.259464][ T8474] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 560.277102][ T5115] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:18: Failed to release dquot type 1 [ 560.317449][ T8474] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.375606][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 560.391918][ T5298] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 560.430061][ T5298] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:33: Failed to release dquot type 1 [ 560.480129][ T8482] netlink: 'syz.2.1015': attribute type 4 has an invalid length. [ 561.384975][ T8493] loop1: detected capacity change from 0 to 4096 [ 561.394488][ T8493] ntfs3: Unknown parameter 'windows_names' [ 563.199667][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.217538][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.282801][ T8513] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 564.249311][ T4324] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 564.439510][ T4324] usb 2-1: Using ep0 maxpacket: 8 [ 564.452859][ T4324] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 564.589316][ T4324] usb 2-1: config 0 has no interface number 0 [ 564.597031][ T4324] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 564.609646][ T4324] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 564.618824][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.208015][ T4324] usb 2-1: config 0 descriptor?? [ 565.226114][ T8535] device syzkaller0 entered promiscuous mode [ 565.319495][ T4324] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 565.470091][ T4324] usb 2-1: USB disconnect, device number 7 [ 566.240985][ T8553] Invalid ELF header magic: != ELF [ 566.973466][ T8560] comedi comedi0: Minor 3 could not be opened [ 569.497630][ T26] audit: type=1800 audit(1787183681.527:183): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1038" name="idVendor" dev="configfs" ino=45660 res=0 errno=0 [ 570.316032][ T26] audit: type=1800 audit(1787183681.557:184): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1038" name="idProduct" dev="configfs" ino=45661 res=0 errno=0 [ 570.504035][ T26] audit: type=1800 audit(1787183681.567:185): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1038" name="max_speed" dev="configfs" ino=45662 res=0 errno=0 [ 571.382163][ T8590] device syzkaller0 entered promiscuous mode [ 571.491319][ T26] audit: type=1800 audit(1787183681.577:186): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1038" name="UDC" dev="configfs" ino=45663 res=0 errno=0 [ 571.633379][ T26] audit: type=1800 audit(1787183683.567:187): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1041" name="idVendor" dev="configfs" ino=44926 res=0 errno=0 [ 571.660729][ T26] audit: type=1800 audit(1787183683.567:188): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1041" name="idProduct" dev="configfs" ino=44927 res=0 errno=0 [ 571.699564][ T26] audit: type=1800 audit(1787183683.567:189): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1041" name="max_speed" dev="configfs" ino=44928 res=0 errno=0 [ 571.740475][ T26] audit: type=1800 audit(1787183683.567:190): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1041" name="UDC" dev="configfs" ino=44929 res=0 errno=0 [ 571.891338][ T22] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 572.132461][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 572.160388][ T22] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 572.168500][ T22] usb 6-1: config 0 has no interface number 0 [ 572.231993][ T22] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 572.290584][ T22] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 572.345582][ T8619] loop4: detected capacity change from 0 to 1024 [ 572.373005][ T8619] EXT4-fs: Ignoring removed nobh option [ 572.391905][ T8619] EXT4-fs: Ignoring removed bh option [ 572.405153][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.467304][ T22] usb 6-1: config 0 descriptor?? [ 572.494776][ T8619] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 572.522976][ T8619] System zones: 0-1, 3-12 [ 572.529312][ T22] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 572.601419][ T8619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 572.744633][ T8619] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 572.758672][ T127] usb 6-1: USB disconnect, device number 9 [ 572.988380][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 573.143398][ T8638] loop4: detected capacity change from 0 to 128 [ 573.184871][ T8638] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 573.278880][ T26] audit: type=1800 audit(1787183685.307:191): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1048" name="file1" dev="loop4" ino=121 res=0 errno=0 [ 573.557349][ T8641] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 575.963675][ T8646] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input11 [ 576.028803][ T8649] loop4: detected capacity change from 0 to 512 [ 577.042278][ T26] audit: type=1800 audit(1787183689.077:192): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1054" name="idVendor" dev="configfs" ino=45743 res=0 errno=0 [ 577.104793][ T26] audit: type=1800 audit(1787183689.097:193): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1054" name="idProduct" dev="configfs" ino=45744 res=0 errno=0 [ 577.162419][ T26] audit: type=1800 audit(1787183689.097:194): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1054" name="max_speed" dev="configfs" ino=45745 res=0 errno=0 [ 577.187697][ T26] audit: type=1800 audit(1787183689.097:195): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1054" name="UDC" dev="configfs" ino=45746 res=0 errno=0 [ 577.229232][ T8649] EXT4-fs (loop4): 1 orphan inode deleted [ 577.235008][ T8649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 577.249347][ T5294] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 577.273703][ T5294] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:31: Failed to release dquot type 1 [ 577.293231][ T8649] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.393850][ T8666] device syzkaller0 entered promiscuous mode [ 577.539946][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 577.581088][ T5244] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 577.600035][ T5244] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:21: Failed to release dquot type 1 [ 580.070439][ T4289] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 580.079077][ T4289] Bluetooth: hci5: Injecting HCI hardware error event [ 580.090487][ T4291] Bluetooth: hci5: hardware error 0x00 [ 581.258639][ T8689] loop2: detected capacity change from 0 to 512 [ 581.341497][ T8689] EXT4-fs (loop2): Test dummy encryption mode enabled [ 581.389406][ T8689] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 581.465203][ T8689] EXT4-fs (loop2): 1 truncate cleaned up [ 581.474024][ T8689] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 581.659359][ T4329] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 582.341555][ T8701] loop1: detected capacity change from 0 to 128 [ 582.415968][ T8701] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 582.429538][ T4329] usb 5-1: Using ep0 maxpacket: 8 [ 582.440723][ T4329] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.476356][ T4329] usb 5-1: config 0 has no interface number 0 [ 582.486921][ T26] audit: type=1800 audit(1787183694.517:196): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1061" name="file1" dev="loop1" ino=121 res=0 errno=0 [ 582.785552][ T8703] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 582.789300][ T4329] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.811709][ T4329] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 582.821859][ T4329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.835836][ T4329] usb 5-1: config 0 descriptor?? [ 582.943581][ T4329] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 583.029487][ T4291] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 583.791395][ T4329] usb 5-1: USB disconnect, device number 12 [ 584.102062][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 584.991951][ T8721] loop5: detected capacity change from 0 to 512 [ 585.132910][ T8721] EXT4-fs (loop5): 1 orphan inode deleted [ 585.179342][ T8721] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 585.189510][ T5294] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 585.205131][ T8721] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.220691][ T8728] device syzkaller0 entered promiscuous mode [ 585.227130][ T5294] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:31: Failed to release dquot type 1 [ 585.449530][ T5057] EXT4-fs (loop5): unmounting filesystem. [ 585.478106][ T5294] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 585.499974][ T5294] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:31: Failed to release dquot type 1 [ 586.722562][ T4291] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 586.755315][ T8758] binder: 8757:8758 ioctl 4018620d 0 returned -22 [ 587.640765][ T8763] loop5: detected capacity change from 0 to 128 [ 587.802169][ T8763] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 587.862763][ T26] audit: type=1800 audit(1787183699.897:197): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1074" name="file1" dev="loop5" ino=121 res=0 errno=0 [ 588.230263][ T8766] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 589.385608][ T8779] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1073'. [ 589.454129][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 589.598500][ T8788] device syzkaller0 entered promiscuous mode [ 589.758863][ T8783] loop1: detected capacity change from 0 to 4096 [ 590.386005][ T8783] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 591.772198][ T8814] binder: 8811:8814 ioctl 4018620d 0 returned -22 [ 593.046565][ T8824] loop4: detected capacity change from 0 to 128 [ 593.120614][ T8824] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 593.333176][ T26] audit: type=1800 audit(1787183705.367:198): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1091" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 593.617359][ T8824] UDF-fs: bad mount option "./bus" or missing value [ 594.104746][ T8841] device syzkaller0 entered promiscuous mode [ 595.482398][ T4291] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 597.441136][ T8856] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1099'. [ 597.481849][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 597.604025][ T8856] loop1: detected capacity change from 0 to 4096 [ 597.619616][ T8856] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 597.677661][ T8890] loop5: detected capacity change from 0 to 128 [ 597.704765][ T8890] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 597.887998][ T26] audit: type=1800 audit(1787183709.917:199): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1108" name="file1" dev="loop5" ino=94 res=0 errno=0 [ 597.898038][ T8890] UDF-fs: bad mount option "./bus" or missing value [ 602.727197][ T8948] netlink: 348 bytes leftover after parsing attributes in process `syz.6.1120'. [ 602.736380][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1120'. [ 602.823378][ T8949] loop6: detected capacity change from 0 to 4096 [ 603.809203][ T8949] ntfs3: loop6: Failed to load $AttrDef -> 0 [ 603.826770][ T8951] loop1: detected capacity change from 0 to 128 [ 603.908074][ T8951] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 603.958075][ T26] audit: type=1800 audit(1787183715.987:200): pid=8951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1123" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 603.973664][ T8951] UDF-fs: bad mount option "./bus" or missing value [ 606.103513][ T8970] device syzkaller0 entered promiscuous mode [ 607.071445][ T8977] loop2: detected capacity change from 0 to 512 [ 607.210944][ T8977] EXT4-fs (loop2): 1 orphan inode deleted [ 607.216771][ T8977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 607.254499][ T8977] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.265376][ T5301] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 607.306648][ T5301] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:35: Failed to release dquot type 1 [ 607.619490][ T8993] Invalid ELF header magic: != ELF [ 608.358583][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 608.449930][ T41] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 608.524498][ T8994] device dummy0 entered promiscuous mode [ 608.655066][ T41] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1 [ 610.419014][ T26] audit: type=1800 audit(1787183722.447:201): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1137" name="idVendor" dev="configfs" ino=47129 res=0 errno=0 [ 611.069276][ T4336] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 611.154192][ T26] audit: type=1800 audit(1787183722.487:202): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1137" name="idProduct" dev="configfs" ino=47130 res=0 errno=0 [ 611.175764][ T26] audit: type=1800 audit(1787183722.487:203): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1137" name="max_speed" dev="configfs" ino=47131 res=0 errno=0 [ 611.197813][ T26] audit: type=1800 audit(1787183722.487:204): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1137" name="UDC" dev="configfs" ino=47132 res=0 errno=0 [ 611.270716][ T4336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 611.282810][ T4336] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 611.332523][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.373747][ T4336] usb 2-1: config 0 descriptor?? [ 611.501997][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1139'. [ 611.849472][ T9025] device bridge_slave_1 left promiscuous mode [ 611.867745][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.998930][ T9025] device bridge_slave_0 left promiscuous mode [ 612.067025][ T9025] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.477083][ T9035] device syzkaller0 entered promiscuous mode [ 612.771630][ T9041] loop2: detected capacity change from 0 to 512 [ 612.891767][ T9041] EXT4-fs (loop2): 1 orphan inode deleted [ 612.909536][ T9] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 612.929444][ T9041] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 612.950418][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 1 [ 613.034473][ T9041] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.206487][ T9050] Invalid ELF header magic: != ELF [ 614.462715][ T4336] usbhid 2-1:0.0: can't add hid device: -71 [ 614.468715][ T4336] usbhid: probe of 2-1:0.0 failed with error -71 [ 614.487593][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 614.550281][ T4336] usb 2-1: USB disconnect, device number 8 [ 614.741685][ T5285] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 614.807616][ T5285] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:27: Failed to release dquot type 1 [ 614.969649][ T9059] netlink: 'syz.5.1148': attribute type 1 has an invalid length. [ 615.457432][ T26] audit: type=1800 audit(1787183727.487:205): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1150" name="idVendor" dev="configfs" ino=47173 res=0 errno=0 [ 615.909398][ T26] audit: type=1800 audit(1787183727.517:206): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1150" name="idProduct" dev="configfs" ino=47174 res=0 errno=0 [ 615.930574][ T26] audit: type=1800 audit(1787183727.517:207): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1150" name="max_speed" dev="configfs" ino=47175 res=0 errno=0 [ 615.967148][ T26] audit: type=1800 audit(1787183727.517:208): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1150" name="UDC" dev="configfs" ino=47176 res=0 errno=0 [ 616.071083][ T9059] device bond1 entered promiscuous mode [ 616.091666][ T9059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 616.938509][ T9063] bond1: (slave erspan1): making interface the new active one [ 617.031384][ T9063] device erspan1 entered promiscuous mode [ 617.047792][ T9063] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 617.069477][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 618.296106][ T9063] syz.5.1148 (9063) used greatest stack depth: 19952 bytes left [ 618.787319][ T9110] Invalid ELF header magic: != ELF [ 620.874121][ T26] audit: type=1800 audit(1787183732.907:209): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1161" name="idVendor" dev="configfs" ino=47229 res=0 errno=0 [ 621.640575][ T26] audit: type=1800 audit(1787183732.927:210): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1161" name="idProduct" dev="configfs" ino=47230 res=0 errno=0 [ 621.821901][ T26] audit: type=1800 audit(1787183732.937:211): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1161" name="max_speed" dev="configfs" ino=47231 res=0 errno=0 [ 621.967664][ T26] audit: type=1800 audit(1787183732.937:212): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1161" name="UDC" dev="configfs" ino=47232 res=0 errno=0 [ 623.324562][ T9140] loop1: detected capacity change from 0 to 32768 [ 623.353110][ T9140] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1167 (9140) [ 623.374591][ T9140] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 623.384890][ T9140] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 623.393920][ T9140] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 623.403359][ T9140] BTRFS info (device loop1): use zstd compression, level 3 [ 623.410578][ T9140] BTRFS info (device loop1): force clearing of disk cache [ 623.417704][ T9140] BTRFS info (device loop1): enabling disk space caching [ 623.424840][ T9140] BTRFS info (device loop1): disk space caching is enabled [ 624.030860][ T9140] BTRFS info (device loop1): enabling ssd optimizations [ 624.041438][ T9140] BTRFS info (device loop1): rebuilding free space tree [ 624.063424][ T9140] BTRFS info (device loop1): disabling free space tree [ 624.070428][ T9140] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 624.080152][ T9140] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 624.148935][ T9140] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 624.159894][ T9140] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 624.245179][ T9140] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 624.631826][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.638400][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.703204][ T7674] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop1 scanned by udevd (7674) [ 624.777741][ T9183] loop4: detected capacity change from 0 to 1024 [ 624.996135][ T9183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 625.020393][ T9194] Invalid ELF header magic: != ELF [ 625.543281][ T9183] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.657063][ T9183] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.1169: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.743887][ T9196] device syzkaller0 entered promiscuous mode [ 626.379228][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 626.709347][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 628.720918][ T22] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 629.511194][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.524119][ T22] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 629.729337][ T9231] loop1: detected capacity change from 0 to 32768 [ 629.750023][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.779425][ T22] usb 5-1: config 0 descriptor?? [ 629.788893][ T9231] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 629.799295][ T9231] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 629.808014][ T9231] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 629.817503][ T9231] BTRFS info (device loop1): use zstd compression, level 3 [ 629.824863][ T9231] BTRFS info (device loop1): force clearing of disk cache [ 629.832144][ T9231] BTRFS info (device loop1): enabling disk space caching [ 629.839349][ T9231] BTRFS info (device loop1): disk space caching is enabled [ 630.077219][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 630.083911][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 630.190288][ T22] usb 5-1: USB disconnect, device number 13 [ 630.331566][ T9231] BTRFS info (device loop1): enabling ssd optimizations [ 630.342450][ T9231] BTRFS info (device loop1): rebuilding free space tree [ 630.353782][ T9231] BTRFS info (device loop1): disabling free space tree [ 630.361971][ T9231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 630.371669][ T9231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 630.392645][ T9231] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 630.401844][ T9231] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 630.475669][ T9231] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 631.722064][ T9290] Invalid ELF header magic: != ELF [ 632.264215][ T9298] loop6: detected capacity change from 0 to 256 [ 635.649257][ T22] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 635.872493][ T22] usb 6-1: config 0 interface 0 has no altsetting 0 [ 635.898854][ T22] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 636.470893][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.575787][ T22] usb 6-1: config 0 descriptor?? [ 636.979592][ T22] usbhid 6-1:0.0: can't add hid device: -71 [ 636.985662][ T22] usbhid: probe of 6-1:0.0 failed with error -71 [ 637.009311][ T9277] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 637.033144][ T22] usb 6-1: USB disconnect, device number 10 [ 637.096231][ T9349] Invalid ELF header magic: != ELF [ 637.220954][ T9277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.253073][ T9277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.306963][ T9277] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 637.338043][ T9277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.780533][ T9277] usb 3-1: config 0 descriptor?? [ 638.290306][ T9277] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 638.314692][ T9277] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 638.347304][ T9277] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 638.379916][ T9277] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 638.412795][ T9277] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 638.445702][ T9277] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 638.480611][ T9277] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 638.696386][ T9277] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 638.894376][ T9277] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 638.919266][ T22] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 639.124394][ T22] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 639.189367][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.197436][ T22] usb 6-1: Product: syz [ 639.271477][ T22] usb 6-1: Manufacturer: syz [ 639.342220][ T22] usb 6-1: SerialNumber: syz [ 639.351998][ T9277] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71 [ 639.431379][ T22] usb 6-1: USB2VGA dongle found at address 11 [ 639.438577][ T9277] usb 3-1: USB disconnect, device number 10 [ 639.475975][ T9372] loop1: detected capacity change from 0 to 256 [ 639.541405][ T22] usb 6-1: Allocated 8 output buffers [ 639.763307][ T22] usb 6-1: Failed to early initialize device [ 639.820637][ T22] usb 6-1: USB disconnect, device number 11 [ 640.542854][ T9373] fido_id[9373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 640.920393][ T9391] loop4: detected capacity change from 0 to 1024 [ 640.937627][ T9391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 641.905936][ T9391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 641.915669][ T9391] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.275887][ T9400] loop1: detected capacity change from 0 to 256 [ 642.569280][ T9276] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 642.624306][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 642.655768][ T9413] Invalid ELF header magic: != ELF [ 643.728265][ T9276] usb 7-1: config 0 interface 0 has no altsetting 0 [ 643.767419][ T9276] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 643.795606][ T9425] loop2: detected capacity change from 0 to 256 [ 643.805770][ T9276] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.826111][ T9276] usb 7-1: config 0 descriptor?? [ 644.794820][ T9276] usbhid 7-1:0.0: can't add hid device: -71 [ 644.807037][ T9276] usbhid: probe of 7-1:0.0 failed with error -71 [ 644.829542][ T9276] usb 7-1: USB disconnect, device number 4 [ 645.241738][ T9422] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 645.252638][ T9422] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 645.826025][ T26] audit: type=1326 audit(1787183757.857:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.2.1221" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca079e0d9 code=0x7fc00000 [ 645.939022][ T26] audit: type=1326 audit(1787183757.887:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.2.1221" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca079e0d9 code=0x7fc00000 [ 646.239348][ T26] audit: type=1326 audit(1787183757.887:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.2.1221" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca079e0d9 code=0x7fc00000 [ 647.239540][ T26] audit: type=1326 audit(1787183757.887:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.2.1221" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca079e0d9 code=0x7fc00000 [ 648.223486][ T26] audit: type=1326 audit(1787183757.887:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.2.1221" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca079e0d9 code=0x7fc00000 [ 648.432970][ T26] audit: type=1326 audit(1787183757.887:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.2.1221" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca079e0d9 code=0x7fc00000 [ 648.579232][ T26] audit: type=1326 audit(1787183757.887:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.2.1221" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca079e0d9 code=0x7fc00000 [ 648.681533][ T26] audit: type=1326 audit(1787183757.887:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.2.1221" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca079e0d9 code=0x7fc00000 [ 648.816980][ T9476] Invalid ELF header magic: != ELF [ 648.839000][ T26] audit: type=1326 audit(1787183757.887:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.2.1221" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca079e0d9 code=0x7fc00000 [ 648.929832][ T26] audit: type=1326 audit(1787183757.887:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.2.1221" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca079e0d9 code=0x7fc00000 [ 649.017099][ T9482] loop1: detected capacity change from 0 to 256 [ 650.222428][ T9276] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 650.706905][ T9276] usb 7-1: config 0 interface 0 has no altsetting 0 [ 651.149212][ T9276] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 651.188747][ T9276] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.320196][ T9276] usb 7-1: config 0 descriptor?? [ 651.587457][ T9276] usbhid 7-1:0.0: can't add hid device: -71 [ 651.602736][ T9276] usbhid: probe of 7-1:0.0 failed with error -71 [ 651.685499][ T9276] usb 7-1: USB disconnect, device number 5 [ 653.116453][ T9516] device bridge0 entered promiscuous mode [ 659.609282][ T9277] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 659.813039][ T9277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 660.131326][ T9277] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 660.141015][ T9277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.158719][ T9277] usb 2-1: config 0 descriptor?? [ 660.377862][ T9277] usbhid 2-1:0.0: can't add hid device: -71 [ 660.393871][ T9277] usbhid: probe of 2-1:0.0 failed with error -71 [ 660.459710][ T9277] usb 2-1: USB disconnect, device number 9 [ 661.845541][ T9592] Invalid ELF header magic: != ELF [ 662.786206][ T9602] loop5: detected capacity change from 0 to 256 [ 662.996255][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 662.996356][ T26] audit: type=1800 audit(1787183775.027:280): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1261" name="idVendor" dev="configfs" ino=48184 res=0 errno=0 [ 663.772240][ T26] audit: type=1800 audit(1787183775.057:281): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1261" name="idProduct" dev="configfs" ino=48185 res=0 errno=0 [ 663.793498][ T26] audit: type=1800 audit(1787183775.057:282): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1261" name="max_speed" dev="configfs" ino=48186 res=0 errno=0 [ 663.814417][ T26] audit: type=1800 audit(1787183775.067:283): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1261" name="UDC" dev="configfs" ino=48187 res=0 errno=0 [ 664.196473][ T9608] sg_write: data in/out 92/14 bytes for SCSI command 0x0-- guessing data in; [ 664.196473][ T9608] program syz.4.1263 not setting count and/or reply_len properly [ 667.159263][ T4325] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 667.385671][ T26] audit: type=1800 audit(1787183779.417:284): pid=9642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1273" name="idVendor" dev="configfs" ino=48248 res=0 errno=0 [ 667.461956][ T4325] usb 5-1: config 0 interface 0 has no altsetting 0 [ 667.469061][ T26] audit: type=1800 audit(1787183779.447:285): pid=9642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1273" name="idProduct" dev="configfs" ino=48249 res=0 errno=0 [ 667.618007][ T26] audit: type=1800 audit(1787183779.447:286): pid=9642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1273" name="max_speed" dev="configfs" ino=48250 res=0 errno=0 [ 667.757825][ T26] audit: type=1800 audit(1787183779.447:287): pid=9642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1273" name="UDC" dev="configfs" ino=48251 res=0 errno=0 [ 668.204370][ T4325] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 668.213810][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.255700][ T4325] usb 5-1: config 0 descriptor?? [ 669.261146][ T9649] loop1: detected capacity change from 0 to 256 [ 669.270813][ T4325] usbhid 5-1:0.0: can't add hid device: -71 [ 669.276858][ T4325] usbhid: probe of 5-1:0.0 failed with error -71 [ 669.518512][ T4325] usb 5-1: USB disconnect, device number 14 [ 670.426080][ T9665] Invalid ELF header magic: != ELF [ 672.639332][ T9674] Invalid ELF header magic: != ELF [ 674.524182][ T26] audit: type=1800 audit(1787183786.557:288): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1285" name="idVendor" dev="configfs" ino=47691 res=0 errno=0 [ 675.566744][ T26] audit: type=1800 audit(1787183786.577:289): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1285" name="idProduct" dev="configfs" ino=47692 res=0 errno=0 [ 675.609698][ T26] audit: type=1800 audit(1787183786.587:290): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1285" name="max_speed" dev="configfs" ino=47693 res=0 errno=0 [ 675.631098][ T26] audit: type=1800 audit(1787183786.587:291): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1285" name="UDC" dev="configfs" ino=47694 res=0 errno=0 [ 675.733214][ T9697] loop2: detected capacity change from 0 to 256 [ 676.029637][ T22] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 676.781469][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.804321][ T22] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 676.848857][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.876076][ T22] usb 5-1: config 0 descriptor?? [ 677.136112][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 677.148451][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 677.195047][ T22] usb 5-1: USB disconnect, device number 15 [ 679.113808][ T26] audit: type=1800 audit(1787183791.147:292): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1298" name="idVendor" dev="configfs" ino=47737 res=0 errno=0 [ 679.376495][ T26] audit: type=1800 audit(1787183791.177:293): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1298" name="idProduct" dev="configfs" ino=47738 res=0 errno=0 [ 679.919345][ T26] audit: type=1800 audit(1787183791.187:294): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1298" name="max_speed" dev="configfs" ino=47739 res=0 errno=0 [ 679.983557][ T26] audit: type=1800 audit(1787183791.187:295): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1298" name="UDC" dev="configfs" ino=47740 res=0 errno=0 [ 681.238303][ T9748] loop2: detected capacity change from 0 to 256 [ 681.350817][ T6675] block nbd5: Attempted send on invalid socket [ 681.357071][ T6675] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 682.819357][ T22] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 683.014349][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 683.025248][ T22] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 683.103537][ T26] audit: type=1800 audit(1787183795.137:296): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1311" name="idVendor" dev="configfs" ino=47777 res=0 errno=0 [ 683.889324][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.917399][ T26] audit: type=1800 audit(1787183795.167:297): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1311" name="idProduct" dev="configfs" ino=47778 res=0 errno=0 [ 683.980672][ T22] usb 5-1: config 0 descriptor?? [ 684.083065][ T26] audit: type=1800 audit(1787183795.167:298): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1311" name="max_speed" dev="configfs" ino=47779 res=0 errno=0 [ 684.125335][ T26] audit: type=1800 audit(1787183795.177:299): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1311" name="UDC" dev="configfs" ino=47780 res=0 errno=0 [ 684.199708][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 684.205686][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 684.267052][ T22] usb 5-1: USB disconnect, device number 16 [ 684.550263][ T9781] Invalid ELF header magic: != ELF [ 685.881548][ T6675] block nbd4: Attempted send on invalid socket [ 685.882843][ T9791] tipc: Started in network mode [ 685.887801][ T6675] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 685.989716][ T9791] tipc: Node identity 267289d7606f, cluster identity 4711 [ 686.067712][ T9791] tipc: Enabled bearer , priority 10 [ 686.079245][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.085840][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.247775][ T9790] tipc: Resetting bearer [ 686.842608][ T9790] tipc: Disabling bearer [ 687.235470][ T26] audit: type=1800 audit(1787183799.267:300): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1324" name="idVendor" dev="configfs" ino=47826 res=0 errno=0 [ 688.001878][ T26] audit: type=1800 audit(1787183799.287:301): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1324" name="idProduct" dev="configfs" ino=47827 res=0 errno=0 [ 688.022870][ T26] audit: type=1800 audit(1787183799.297:302): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1324" name="max_speed" dev="configfs" ino=47828 res=0 errno=0 [ 688.044802][ T26] audit: type=1800 audit(1787183799.307:303): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1324" name="UDC" dev="configfs" ino=47829 res=0 errno=0 [ 689.210688][ T9276] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 690.049036][ T6675] block nbd1: Attempted send on invalid socket [ 690.055448][ T6675] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 690.140925][ T9276] usb 3-1: config 0 interface 0 has no altsetting 0 [ 690.147650][ T9276] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 690.634807][ T9276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.771649][ T9276] usb 3-1: config 0 descriptor?? [ 690.877611][ T9854] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1333'. [ 691.032101][ T9276] usbhid 3-1:0.0: can't add hid device: -71 [ 691.050715][ T9276] usbhid: probe of 3-1:0.0 failed with error -71 [ 691.760222][ T9276] usb 3-1: USB disconnect, device number 11 [ 691.838258][ T26] audit: type=1800 audit(1787183803.867:304): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1337" name="idVendor" dev="configfs" ino=48628 res=0 errno=0 [ 692.053487][ T26] audit: type=1800 audit(1787183803.897:305): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1337" name="idProduct" dev="configfs" ino=48629 res=0 errno=0 [ 692.074380][ T26] audit: type=1800 audit(1787183803.897:306): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1337" name="max_speed" dev="configfs" ino=48630 res=0 errno=0 [ 692.095181][ T26] audit: type=1800 audit(1787183803.897:307): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1337" name="UDC" dev="configfs" ino=48631 res=0 errno=0 [ 693.346993][ T53] block nbd1: Attempted send on invalid socket [ 693.353457][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 695.077217][ T9916] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1349'. [ 695.086618][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1349'. [ 695.284926][ T9917] loop4: detected capacity change from 0 to 4096 [ 695.760714][ T9917] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 696.463547][ T26] audit: type=1800 audit(1787183808.497:308): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1351" name="idVendor" dev="configfs" ino=48725 res=0 errno=0 [ 696.508844][ T26] audit: type=1800 audit(1787183808.517:309): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1351" name="idProduct" dev="configfs" ino=48726 res=0 errno=0 [ 696.556069][ T26] audit: type=1800 audit(1787183808.517:310): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1351" name="max_speed" dev="configfs" ino=48727 res=0 errno=0 [ 696.607505][ T26] audit: type=1800 audit(1787183808.527:311): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1351" name="UDC" dev="configfs" ino=48728 res=0 errno=0 [ 697.524422][ T9905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.971266][ T9276] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 698.218716][ T9276] usb 3-1: config 0 interface 0 has no altsetting 0 [ 698.235491][ T9276] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 698.281783][ T9276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.387527][ T9276] usb 3-1: config 0 descriptor?? [ 698.713813][ T6675] block nbd5: Attempted send on invalid socket [ 698.720056][ T6675] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.736713][ T9276] usbhid 3-1:0.0: can't add hid device: -71 [ 698.763556][ T9276] usbhid: probe of 3-1:0.0 failed with error -71 [ 698.921496][ T9276] usb 3-1: USB disconnect, device number 12 [ 699.323605][ T9946] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1360'. [ 699.365159][ T9946] device syzkaller1 entered promiscuous mode [ 699.609457][ T9954] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1361'. [ 699.618583][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. [ 699.707319][ T9955] loop4: detected capacity change from 0 to 4096 [ 700.690648][ T26] audit: type=1800 audit(1787183812.727:312): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1362" name="idVendor" dev="configfs" ino=47962 res=0 errno=0 [ 700.858009][ T26] audit: type=1800 audit(1787183812.757:313): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1362" name="idProduct" dev="configfs" ino=47963 res=0 errno=0 [ 700.859805][ T9955] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 700.878553][ T26] audit: type=1800 audit(1787183812.757:314): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1362" name="max_speed" dev="configfs" ino=47964 res=0 errno=0 [ 700.878594][ T26] audit: type=1800 audit(1787183812.767:315): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1362" name="UDC" dev="configfs" ino=47965 res=0 errno=0 [ 700.945248][ T7674] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 702.132051][ T9978] Invalid ELF header magic: != ELF [ 703.446721][ T26] audit: type=1800 audit(1787183815.477:316): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1376" name="idVendor" dev="configfs" ino=48015 res=0 errno=0 [ 704.089084][ T26] audit: type=1800 audit(1787183815.507:317): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1376" name="idProduct" dev="configfs" ino=48016 res=0 errno=0 [ 704.114168][ T26] audit: type=1800 audit(1787183815.507:318): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1376" name="max_speed" dev="configfs" ino=48017 res=0 errno=0 [ 704.495959][T10003] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1377'. [ 704.505216][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 704.605744][T10004] loop4: detected capacity change from 0 to 4096 [ 705.671581][T10004] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 705.762055][ T26] audit: type=1800 audit(1787183815.517:319): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1376" name="UDC" dev="configfs" ino=48018 res=0 errno=0 [ 707.524382][T10020] Invalid ELF header magic: != ELF [ 709.433921][T10033] netlink: 'syz.5.1386': attribute type 1 has an invalid length. [ 709.472373][T10033] netlink: 'syz.5.1386': attribute type 1 has an invalid length. [ 709.733281][T10039] Invalid ELF header magic: != ELF [ 710.772634][ T4289] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 711.013804][T10049] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1390'. [ 711.023064][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 711.123842][T10050] loop1: detected capacity change from 0 to 4096 [ 711.700886][T10050] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 712.101024][ T26] audit: type=1800 audit(1787183824.137:320): pid=10062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1394" name="idVendor" dev="configfs" ino=48075 res=0 errno=0 [ 712.844851][ T26] audit: type=1800 audit(1787183824.157:321): pid=10062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1394" name="idProduct" dev="configfs" ino=48076 res=0 errno=0 [ 712.865852][ T26] audit: type=1800 audit(1787183824.157:322): pid=10062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1394" name="max_speed" dev="configfs" ino=48077 res=0 errno=0 [ 712.887210][ T26] audit: type=1800 audit(1787183824.167:323): pid=10062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1394" name="UDC" dev="configfs" ino=48078 res=0 errno=0 [ 714.650984][T10086] Invalid ELF header magic: != ELF [ 715.942961][T10106] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1405'. [ 715.952115][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1405'. [ 715.994264][T10106] loop5: detected capacity change from 0 to 4096 [ 716.005245][T10106] ntfs3: loop5: Failed to load $AttrDef -> 0 [ 717.583611][ T26] audit: type=1800 audit(1787183829.617:324): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1409" name="idProduct" dev="configfs" ino=49053 res=0 errno=0 [ 717.853287][ T26] audit: type=1800 audit(1787183829.637:325): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1409" name="max_speed" dev="configfs" ino=49054 res=0 errno=0 [ 718.126598][ T26] audit: type=1800 audit(1787183829.637:326): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1409" name="UDC" dev="configfs" ino=49055 res=0 errno=0 [ 719.066589][T10127] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1415'. [ 719.700024][T10136] Invalid ELF header magic: != ELF [ 720.807223][T10152] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1421'. [ 720.816427][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 721.026635][T10153] loop4: detected capacity change from 0 to 4096 [ 721.456859][T10153] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 721.523789][ T26] audit: type=1800 audit(1787183833.557:327): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1422" name="idProduct" dev="configfs" ino=49127 res=0 errno=0 [ 722.012019][ T26] audit: type=1800 audit(1787183833.597:328): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1422" name="max_speed" dev="configfs" ino=49128 res=0 errno=0 [ 722.183977][ T26] audit: type=1800 audit(1787183833.597:329): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1422" name="UDC" dev="configfs" ino=49129 res=0 errno=0 [ 723.448189][T10176] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1429'. [ 723.606010][T10181] Invalid ELF header magic: != ELF [ 725.280284][ T26] audit: type=1800 audit(1787183837.317:330): pid=10194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1435" name="idProduct" dev="configfs" ino=49273 res=0 errno=0 [ 725.430123][ T26] audit: type=1800 audit(1787183837.317:331): pid=10194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1435" name="max_speed" dev="configfs" ino=49274 res=0 errno=0 [ 725.451902][ T26] audit: type=1800 audit(1787183837.337:332): pid=10194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1435" name="UDC" dev="configfs" ino=49275 res=0 errno=0 [ 725.601081][T10198] netlink: 'syz.6.1437': attribute type 10 has an invalid length. [ 725.615551][T10198] device syz_tun entered promiscuous mode [ 725.668463][T10198] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 726.048444][ T53] block nbd6: Attempted send on invalid socket [ 726.054795][ T53] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 726.201902][ T4289] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 726.458281][T10210] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1440'. [ 726.467444][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 726.705404][T10211] loop1: detected capacity change from 0 to 4096 [ 727.128807][T10211] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 727.236309][T10212] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1442'. [ 727.792327][ T26] audit: type=1800 audit(1787183839.827:333): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1447" name="idVendor" dev="configfs" ino=50281 res=0 errno=0 [ 728.573751][ T26] audit: type=1800 audit(1787183839.847:334): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1447" name="idProduct" dev="configfs" ino=50282 res=0 errno=0 [ 728.639444][ T26] audit: type=1800 audit(1787183839.847:335): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1447" name="max_speed" dev="configfs" ino=50283 res=0 errno=0 [ 728.782572][ T26] audit: type=1800 audit(1787183839.847:336): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1447" name="UDC" dev="configfs" ino=50284 res=0 errno=0 [ 728.943456][ T53] block nbd6: Attempted send on invalid socket [ 728.949836][ T53] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 729.633479][T10252] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1457'. [ 730.567963][T10273] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 730.576688][T10273] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 731.334245][ T26] audit: type=1800 audit(1787183843.367:337): pid=10276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1462" name="idVendor" dev="configfs" ino=49336 res=0 errno=0 [ 732.176910][ T26] audit: type=1800 audit(1787183843.387:338): pid=10276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1462" name="idProduct" dev="configfs" ino=49337 res=0 errno=0 [ 732.368133][ T26] audit: type=1800 audit(1787183843.397:339): pid=10276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1462" name="max_speed" dev="configfs" ino=49338 res=0 errno=0 [ 732.445035][ T26] audit: type=1800 audit(1787183843.397:340): pid=10276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1462" name="UDC" dev="configfs" ino=49339 res=0 errno=0 [ 732.643112][T10280] loop2: detected capacity change from 0 to 256 [ 733.919167][ T6675] block nbd6: Attempted send on invalid socket [ 733.925418][ T6675] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 734.359765][T10295] netlink: 'syz.6.1470': attribute type 1 has an invalid length. [ 734.390901][T10295] netlink: 'syz.6.1470': attribute type 1 has an invalid length. [ 734.653565][T10307] Invalid ELF header magic: != ELF [ 735.349444][ T26] audit: type=1800 audit(1787183847.377:341): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1473" name="idVendor" dev="configfs" ino=49389 res=0 errno=0 [ 735.565268][ T26] audit: type=1800 audit(1787183847.407:342): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1473" name="idProduct" dev="configfs" ino=49390 res=0 errno=0 [ 735.586327][ T26] audit: type=1800 audit(1787183847.417:343): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1473" name="max_speed" dev="configfs" ino=49391 res=0 errno=0 [ 735.607366][ T26] audit: type=1800 audit(1787183847.417:344): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1473" name="UDC" dev="configfs" ino=49392 res=0 errno=0 [ 736.608125][T10318] loop2: detected capacity change from 0 to 256 [ 737.679226][T10350] Invalid ELF header magic: != ELF [ 738.391393][ T53] block nbd5: Attempted send on invalid socket [ 738.398480][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 740.070455][T10370] Invalid ELF header magic: != ELF [ 740.351674][T10375] loop4: detected capacity change from 0 to 256 [ 741.778876][T10390] Invalid ELF header magic: != ELF [ 742.555951][ T6675] block nbd2: Attempted send on invalid socket [ 742.562297][ T6675] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 743.891200][T10412] loop4: detected capacity change from 0 to 256 [ 746.735263][T10427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.095531][T10430] Invalid ELF header magic: != ELF [ 747.187270][T10431] Invalid ELF header magic: != ELF [ 747.708106][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.714472][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.762781][T10427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.918132][ T53] block nbd5: Attempted send on invalid socket [ 747.924521][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 748.055804][ T4289] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 749.534748][T10456] loop1: detected capacity change from 0 to 256 [ 750.567943][T10464] sctp: [Deprecated]: syz.5.1523 (pid 10464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 750.567943][T10464] Use struct sctp_sack_info instead [ 751.177342][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.348669][ T53] block nbd1: Attempted send on invalid socket [ 751.355067][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 751.454953][T10476] 9pnet_fd: Insufficient options for proto=fd [ 753.562786][T10506] loop2: detected capacity change from 0 to 256 [ 756.824655][T10520] 9pnet_fd: Insufficient options for proto=fd [ 757.025382][ T53] block nbd5: Attempted send on invalid socket [ 757.031659][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 757.144899][T10527] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1537'. [ 757.154410][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'. [ 757.328748][T10528] loop4: detected capacity change from 0 to 4096 [ 757.921185][T10528] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 757.931323][ T26] audit: type=1800 audit(1787183869.967:345): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1539" name="idVendor" dev="configfs" ino=50873 res=0 errno=0 [ 758.131536][ T26] audit: type=1800 audit(1787183869.987:346): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1539" name="idProduct" dev="configfs" ino=50874 res=0 errno=0 [ 758.152540][ T26] audit: type=1800 audit(1787183869.987:347): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1539" name="max_speed" dev="configfs" ino=50875 res=0 errno=0 [ 758.173403][ T26] audit: type=1800 audit(1787183869.987:348): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1539" name="UDC" dev="configfs" ino=50876 res=0 errno=0 [ 759.342582][T10548] loop5: detected capacity change from 0 to 256 [ 759.737122][T10556] Invalid ELF header magic: != ELF [ 760.783900][T10553] device syzkaller0 entered promiscuous mode [ 760.905102][T10562] 9pnet_fd: Insufficient options for proto=fd [ 761.224664][ T26] audit: type=1800 audit(1787183873.257:349): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1554" name="idVendor" dev="configfs" ino=49734 res=0 errno=0 [ 762.032672][ T26] audit: type=1800 audit(1787183873.277:350): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1554" name="idProduct" dev="configfs" ino=49735 res=0 errno=0 [ 762.122416][ T26] audit: type=1800 audit(1787183873.287:351): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1554" name="max_speed" dev="configfs" ino=49736 res=0 errno=0 [ 762.196315][ T6675] block nbd1: Attempted send on invalid socket [ 762.202765][ T6675] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 762.333742][ T26] audit: type=1800 audit(1787183873.287:352): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1554" name="UDC" dev="configfs" ino=49737 res=0 errno=0 [ 763.456814][T10592] loop1: detected capacity change from 0 to 256 [ 763.648165][T10598] Invalid ELF header magic: != ELF [ 764.878299][T10603] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 764.992404][ T26] audit: type=1800 audit(1787183877.027:353): pid=10608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1568" name="idVendor" dev="configfs" ino=51041 res=0 errno=0 [ 765.832085][ T26] audit: type=1800 audit(1787183877.047:354): pid=10608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1568" name="idProduct" dev="configfs" ino=51042 res=0 errno=0 [ 765.859354][ T26] audit: type=1800 audit(1787183877.047:355): pid=10608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1568" name="max_speed" dev="configfs" ino=51043 res=0 errno=0 [ 765.882880][ T26] audit: type=1800 audit(1787183877.047:356): pid=10608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1568" name="UDC" dev="configfs" ino=51044 res=0 errno=0 [ 766.034899][ T53] block nbd1: Attempted send on invalid socket [ 766.041308][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 766.463574][T10625] device syzkaller1 entered promiscuous mode [ 767.229659][T10644] Invalid ELF header magic: != ELF [ 768.648025][T10652] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1580'. [ 768.657279][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 768.898032][T10653] loop4: detected capacity change from 0 to 4096 [ 769.248933][T10653] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 770.150105][ T7674] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 770.245777][ T26] audit: type=1800 audit(1787183882.277:357): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1581" name="idVendor" dev="configfs" ino=49865 res=0 errno=0 [ 770.651603][ T26] audit: type=1800 audit(1787183882.507:359): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1581" name="max_speed" dev="configfs" ino=51115 res=0 errno=0 [ 770.680243][ T26] audit: type=1800 audit(1787183882.517:360): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1581" name="UDC" dev="configfs" ino=51116 res=0 errno=0 [ 770.734781][ T26] audit: type=1800 audit(1787183882.307:358): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1581" name="idProduct" dev="configfs" ino=49866 res=0 errno=0 [ 771.148288][ T53] block nbd6: Attempted send on invalid socket [ 771.154728][ T53] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 771.848128][T10678] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 772.193556][T10686] Invalid ELF header magic: != ELF [ 773.504399][ T26] audit: type=1800 audit(1787183885.537:361): pid=10696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1594" name="idVendor" dev="configfs" ino=51167 res=0 errno=0 [ 774.353065][ T26] audit: type=1800 audit(1787183885.567:362): pid=10696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1594" name="idProduct" dev="configfs" ino=51168 res=0 errno=0 [ 774.522953][ T26] audit: type=1800 audit(1787183885.567:363): pid=10696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1594" name="max_speed" dev="configfs" ino=51169 res=0 errno=0 [ 775.319231][ T26] audit: type=1800 audit(1787183885.567:364): pid=10696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1594" name="UDC" dev="configfs" ino=51170 res=0 errno=0 [ 775.434332][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1596'. [ 775.806813][T10719] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1597'. [ 775.816247][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'. [ 775.918724][T10720] loop2: detected capacity change from 0 to 4096 [ 776.669939][T10720] ntfs3: loop2: Failed to load $AttrDef -> 0 [ 776.751875][ T6675] block nbd1: Attempted send on invalid socket [ 776.758144][ T6675] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 777.860117][T10731] Invalid ELF header magic: != ELF [ 779.734071][ T26] audit: type=1800 audit(1787183891.767:365): pid=10753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1610" name="idVendor" dev="configfs" ino=51264 res=0 errno=0 [ 779.916805][ T26] audit: type=1800 audit(1787183891.787:366): pid=10753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1610" name="idProduct" dev="configfs" ino=51265 res=0 errno=0 [ 780.496628][T10748] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 781.400867][ T26] audit: type=1800 audit(1787183891.797:367): pid=10753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1610" name="max_speed" dev="configfs" ino=51266 res=0 errno=0 [ 781.422557][ T26] audit: type=1800 audit(1787183891.797:368): pid=10753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1610" name="UDC" dev="configfs" ino=51267 res=0 errno=0 [ 781.824261][T10772] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1615'. [ 781.833442][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 782.073225][T10773] loop1: detected capacity change from 0 to 4096 [ 782.530402][ T6675] block nbd4: Attempted send on invalid socket [ 782.536672][ T6675] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 782.549552][T10773] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 782.769990][T10775] Invalid ELF header magic: != ELF [ 783.151865][ T7674] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 785.704397][ T26] audit: type=1800 audit(1787183897.737:369): pid=10805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1626" name="idVendor" dev="configfs" ino=50088 res=0 errno=0 [ 786.549347][ T26] audit: type=1800 audit(1787183897.757:370): pid=10805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1626" name="max_speed" dev="configfs" ino=50089 res=0 errno=0 [ 786.570156][ T26] audit: type=1800 audit(1787183897.767:371): pid=10805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1626" name="UDC" dev="configfs" ino=50090 res=0 errno=0 [ 786.670082][T10807] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 786.794082][T10807] qfq: no options [ 786.974111][T10825] Invalid ELF header magic: != ELF [ 788.485973][T10838] ip_tables: iptables: counters copy to user failed while replacing table [ 790.089975][ T26] audit: type=1800 audit(1787183902.127:372): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1641" name="idVendor" dev="configfs" ino=51423 res=0 errno=0 [ 790.501791][T10862] Invalid ELF header magic: != ELF [ 791.239175][ T26] audit: type=1800 audit(1787183902.157:373): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1641" name="max_speed" dev="configfs" ino=51424 res=0 errno=0 [ 791.425521][ T4324] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 791.510761][ T4324] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 791.683723][ T26] audit: type=1800 audit(1787183902.157:374): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1641" name="UDC" dev="configfs" ino=51425 res=0 errno=0 [ 791.722263][T10877] Invalid ELF header magic: != ELF [ 793.140513][T10889] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 793.865547][T10901] Invalid ELF header magic: != ELF [ 794.929684][ T26] audit: type=1800 audit(1787183906.967:375): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1657" name="idVendor" dev="configfs" ino=51501 res=0 errno=0 [ 795.642524][ T26] audit: type=1800 audit(1787183906.987:376): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1657" name="max_speed" dev="configfs" ino=51502 res=0 errno=0 [ 795.733523][ T26] audit: type=1800 audit(1787183906.987:377): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1657" name="UDC" dev="configfs" ino=51503 res=0 errno=0 [ 796.227462][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 797.595013][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056edec00: rx timeout, send abort [ 798.104966][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056edec00: abort rx timeout. Force session deactivation [ 798.306391][T10961] Invalid ELF header magic: != ELF [ 798.329748][T10957] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1668'. [ 798.866521][T10957] device syzkaller1 entered promiscuous mode [ 798.946561][ T26] audit: type=1800 audit(1787183910.977:378): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1670" name="idProduct" dev="configfs" ino=52352 res=0 errno=0 [ 799.109673][ T26] audit: type=1800 audit(1787183911.007:379): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1670" name="UDC" dev="configfs" ino=52353 res=0 errno=0 [ 799.129922][ T26] audit: type=1800 audit(1787183911.067:380): pid=10967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1670" name="idVendor" dev="configfs" ino=52350 res=0 errno=0 [ 799.741832][ T9273] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 799.761122][ T9273] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 801.605587][T11009] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1685'. [ 801.632274][T11009] device syzkaller1 entered promiscuous mode [ 801.752026][T11012] Invalid ELF header magic: != ELF [ 802.518379][ T26] audit: type=1800 audit(1787183914.547:381): pid=11013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1683" name="idVendor" dev="configfs" ino=51654 res=0 errno=0 [ 802.896962][ T26] audit: type=1800 audit(1787183914.577:382): pid=11013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1683" name="idProduct" dev="configfs" ino=51655 res=0 errno=0 [ 802.983410][ T26] audit: type=1800 audit(1787183914.577:383): pid=11013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1683" name="UDC" dev="configfs" ino=51656 res=0 errno=0 [ 804.590902][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079737800: rx timeout, send abort [ 805.099265][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079737800: abort rx timeout. Force session deactivation [ 805.524647][ T4324] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 805.645820][ T4324] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 805.759126][T11049] Invalid ELF header magic: != ELF [ 806.667849][ T26] audit: type=1800 audit(1787183918.697:384): pid=11054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1698" name="idVendor" dev="configfs" ino=52474 res=0 errno=0 [ 807.405201][ T26] audit: type=1800 audit(1787183918.727:385): pid=11054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1698" name="idProduct" dev="configfs" ino=52475 res=0 errno=0 [ 807.426763][ T26] audit: type=1800 audit(1787183918.727:386): pid=11054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1698" name="UDC" dev="configfs" ino=52476 res=0 errno=0 [ 808.952096][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.958418][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.268381][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880588af000: rx timeout, send abort [ 809.415125][T11089] Invalid ELF header magic: != ELF [ 809.776757][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880588af000: abort rx timeout. Force session deactivation [ 810.485761][ T26] audit: type=1800 audit(1787183922.517:387): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1715" name="idVendor" dev="configfs" ino=51846 res=0 errno=0 [ 810.734926][ T26] audit: type=1800 audit(1787183922.547:388): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1715" name="idProduct" dev="configfs" ino=51847 res=0 errno=0 [ 811.159040][ T26] audit: type=1800 audit(1787183922.547:389): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1715" name="max_speed" dev="configfs" ino=51848 res=0 errno=0 [ 811.384091][T11113] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1722'. [ 811.401276][ T26] audit: type=1800 audit(1787183922.547:390): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1715" name="UDC" dev="configfs" ino=51849 res=0 errno=0 [ 812.960148][T11137] Invalid ELF header magic: != ELF [ 814.010929][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802fe9ec00: rx timeout, send abort [ 814.519335][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802fe9ec00: abort rx timeout. Force session deactivation [ 814.669407][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 815.056310][ T26] audit: type=1800 audit(1787183927.087:391): pid=11158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1732" name="idVendor" dev="configfs" ino=52600 res=0 errno=0 [ 815.812410][ T26] audit: type=1800 audit(1787183927.117:392): pid=11158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1732" name="idProduct" dev="configfs" ino=52601 res=0 errno=0 [ 815.833784][ T26] audit: type=1800 audit(1787183927.127:393): pid=11158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1732" name="max_speed" dev="configfs" ino=52602 res=0 errno=0 [ 815.855610][ T26] audit: type=1800 audit(1787183927.127:394): pid=11158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1732" name="UDC" dev="configfs" ino=52603 res=0 errno=0 [ 816.151964][T11170] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1736'. [ 816.180934][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1737'. [ 816.293115][ T6675] block nbd1: Attempted send on invalid socket [ 816.299703][ T6675] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.575885][T11195] Invalid ELF header magic: != ELF [ 819.129609][ T26] audit: type=1800 audit(1787183931.167:395): pid=11207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1747" name="idVendor" dev="configfs" ino=52647 res=0 errno=0 [ 819.931458][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1746'. [ 819.969774][ T26] audit: type=1800 audit(1787183931.187:396): pid=11207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1747" name="idProduct" dev="configfs" ino=52648 res=0 errno=0 [ 820.129777][ T26] audit: type=1800 audit(1787183931.187:397): pid=11207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1747" name="max_speed" dev="configfs" ino=52649 res=0 errno=0 [ 820.170769][T11212] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1751'. [ 820.267890][ T6675] block nbd4: Attempted send on invalid socket [ 820.274375][ T6675] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 820.478927][ T26] audit: type=1800 audit(1787183931.187:398): pid=11207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1747" name="UDC" dev="configfs" ino=52650 res=0 errno=0 [ 821.052831][T11220] device syzkaller0 entered promiscuous mode [ 821.343978][T11235] Invalid ELF header magic: != ELF [ 822.416323][T11246] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 822.424870][T11246] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 822.929952][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 823.076000][T11257] device syzkaller0 entered promiscuous mode [ 823.550067][ T26] audit: type=1800 audit(1787183935.587:399): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1763" name="idVendor" dev="configfs" ino=52722 res=0 errno=0 [ 824.321081][T11261] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1764'. [ 824.424759][ T26] audit: type=1800 audit(1787183935.607:400): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1763" name="idProduct" dev="configfs" ino=52723 res=0 errno=0 [ 824.612826][ T26] audit: type=1800 audit(1787183935.607:401): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1763" name="max_speed" dev="configfs" ino=52724 res=0 errno=0 [ 824.665805][ T6675] block nbd4: Attempted send on invalid socket [ 824.672114][ T6675] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 825.633016][T11277] Invalid ELF header magic: != ELF [ 826.347985][T11284] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 826.376682][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1769'. [ 826.395319][T11288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.741295][T11294] netlink: 'syz.1.1774': attribute type 5 has an invalid length. [ 826.842261][ T26] audit: type=1800 audit(1787183938.877:402): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1776" name="idVendor" dev="configfs" ino=52739 res=0 errno=0 [ 827.628431][ T26] audit: type=1800 audit(1787183938.897:403): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1776" name="idProduct" dev="configfs" ino=52740 res=0 errno=0 [ 827.664354][ T26] audit: type=1800 audit(1787183938.907:404): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1776" name="max_speed" dev="configfs" ino=52741 res=0 errno=0 [ 828.218930][T11298] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 828.227275][T11298] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 828.741080][ T6675] block nbd1: Attempted send on invalid socket [ 828.747375][ T6675] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 829.541982][T11317] loop2: detected capacity change from 0 to 256 [ 829.642925][T11314] tc action pedit 'at' offset 5 out of bounds [ 829.849874][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 830.212062][T11333] Invalid ELF header magic: != ELF [ 830.866899][ T26] audit: type=1800 audit(1787183942.897:405): pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1787" name="idVendor" dev="configfs" ino=53296 res=0 errno=0 [ 831.139131][T11341] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 831.175362][ T26] audit: type=1800 audit(1787183942.927:406): pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1787" name="idProduct" dev="configfs" ino=53297 res=0 errno=0 [ 831.196912][ T26] audit: type=1800 audit(1787183942.927:407): pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1787" name="max_speed" dev="configfs" ino=53298 res=0 errno=0 [ 831.430159][ T6675] block nbd2: Attempted send on invalid socket [ 831.436405][ T6675] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 831.694486][T11354] loop1: detected capacity change from 0 to 256 [ 831.863929][T11356] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1792'. [ 831.873339][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1792'. [ 832.069600][T11356] loop5: detected capacity change from 0 to 4096 [ 832.455100][T11356] ntfs3: loop5: Failed to load $AttrDef -> 0 [ 832.898300][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 833.638976][T11389] Invalid ELF header magic: != ELF [ 834.665088][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 834.823434][ T53] block nbd2: Attempted send on invalid socket [ 834.829849][ T53] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.848852][T11410] loop1: detected capacity change from 0 to 256 [ 837.096587][T11431] Invalid ELF header magic: != ELF [ 837.107867][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 837.842685][ T6675] block nbd5: Attempted send on invalid socket [ 837.849041][ T6675] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 838.995635][ T53] block nbd5: Attempted send on invalid socket [ 839.002000][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 841.242892][T11469] loop1: detected capacity change from 0 to 256 [ 842.470277][T11484] Invalid ELF header magic: != ELF [ 842.629442][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1827'. [ 843.090316][ T53] block nbd1: Attempted send on invalid socket [ 843.096607][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 843.884803][T11496] netlink: 'syz.5.1832': attribute type 1 has an invalid length. [ 844.015687][ T6675] block nbd4: Attempted send on invalid socket [ 844.022052][ T6675] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.123635][T11511] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1833'. [ 846.355360][T11526] tipc: Failed to remove unknown binding: 66,0,0/0:3404048232/3404048234 [ 846.409169][T11526] tipc: Failed to remove unknown binding: 66,0,0/0:3404048232/3404048233 [ 846.492859][T11526] tipc: Failed to remove unknown binding: 66,0,0/0:3404048232/3404048234 [ 846.569225][T11526] tipc: Failed to remove unknown binding: 66,0,0/0:3404048232/3404048233 [ 846.941863][T11540] Invalid ELF header magic: != ELF [ 847.786661][ T6675] block nbd4: Attempted send on invalid socket [ 847.793129][ T6675] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 848.903108][ T6675] block nbd5: Attempted send on invalid socket [ 848.909485][ T6675] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 851.044235][T11577] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1853'. [ 852.195606][ T6675] block nbd1: Attempted send on invalid socket [ 852.202242][ T6675] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 852.971501][T11596] Invalid ELF header magic: != ELF [ 853.479268][T11600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 853.608627][ T53] block nbd1: Attempted send on invalid socket [ 853.614928][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 855.731024][T11624] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1868'. [ 858.319133][ T53] block nbd6: Attempted send on invalid socket [ 858.325324][ T53] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 858.795027][T11659] loop6: detected capacity change from 0 to 256 [ 859.695617][T11663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1881'. [ 861.420040][ T53] block nbd5: Attempted send on invalid socket [ 861.426380][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.329825][T11693] Invalid ELF header magic: != ELF [ 864.365453][T11699] loop1: detected capacity change from 0 to 256 [ 864.902677][T11703] device syzkaller0 entered promiscuous mode [ 866.905580][T11724] device syzkaller1 entered promiscuous mode [ 867.024078][T11726] device syzkaller0 entered promiscuous mode [ 867.180236][ T6675] block nbd6: Attempted send on invalid socket [ 867.186518][ T6675] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.112583][T11735] loop1: detected capacity change from 0 to 256 [ 870.391573][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.397981][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.489390][T11736] device syzkaller0 entered promiscuous mode [ 871.325644][T11749] tipc: Failed to remove unknown binding: 66,0,0/0:2717882652/2717882654 [ 871.349961][T11749] tipc: Failed to remove unknown binding: 66,0,0/0:2717882652/2717882653 [ 871.656657][T11758] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1910'. [ 871.665998][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1910'. [ 871.755342][T11759] loop5: detected capacity change from 0 to 4096 [ 872.442076][T11759] ntfs3: loop5: Failed to load $AttrDef -> 0 [ 872.757627][T11762] device syzkaller0 entered promiscuous mode [ 873.057236][ T53] block nbd4: Attempted send on invalid socket [ 873.063999][ T53] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 876.248435][ T26] audit: type=1800 audit(1787183988.277:408): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1921" name="idVendor" dev="configfs" ino=54091 res=0 errno=0 [ 876.429722][ T26] audit: type=1800 audit(1787183988.317:409): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1921" name="idProduct" dev="configfs" ino=54092 res=0 errno=0 [ 876.611450][ T26] audit: type=1800 audit(1787183988.317:410): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1921" name="max_speed" dev="configfs" ino=54093 res=0 errno=0 [ 876.760023][ T26] audit: type=1800 audit(1787183988.317:411): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1921" name="UDC" dev="configfs" ino=54094 res=0 errno=0 [ 876.817216][T11812] 8021q: VLANs not supported on gre0 [ 878.140256][T11828] netlink: 348 bytes leftover after parsing attributes in process `syz.6.1929'. [ 878.149427][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1929'. [ 878.236630][T11829] loop6: detected capacity change from 0 to 4096 [ 879.259219][T11829] ntfs3: loop6: Failed to load $AttrDef -> 0 [ 879.552130][ T53] block nbd5: Attempted send on invalid socket [ 879.558374][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 879.887521][ T26] audit: type=1800 audit(1787183991.917:412): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1935" name="idVendor" dev="configfs" ino=54173 res=0 errno=0 [ 880.752909][ T26] audit: type=1800 audit(1787183991.947:413): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1935" name="idProduct" dev="configfs" ino=54174 res=0 errno=0 [ 880.810610][ T26] audit: type=1800 audit(1787183991.947:414): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1935" name="max_speed" dev="configfs" ino=54175 res=0 errno=0 [ 880.832250][ T26] audit: type=1800 audit(1787183991.957:415): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1935" name="UDC" dev="configfs" ino=54176 res=0 errno=0 [ 880.839934][T11850] device syzkaller0 entered promiscuous mode [ 883.421021][ T53] block nbd1: Attempted send on invalid socket [ 883.427350][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.240636][T11908] device syzkaller0 entered promiscuous mode [ 884.672722][T11925] device syzkaller0 entered promiscuous mode [ 885.974267][ T53] block nbd2: Attempted send on invalid socket [ 885.980589][ T53] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 886.269563][T11951] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1964'. [ 886.278822][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1964'. [ 886.369098][T11952] loop4: detected capacity change from 0 to 4096 [ 887.369684][T11952] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 887.386683][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 887.535618][T11954] device syzkaller0 entered promiscuous mode [ 888.158511][T11973] bond1: (slave ip6gretap1): Releasing backup interface [ 888.718390][ T53] block nbd5: Attempted send on invalid socket [ 888.724896][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 889.498608][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1977'. [ 889.699847][T11997] device syzkaller0 entered promiscuous mode [ 889.786527][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1980'. [ 889.819962][T12005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 889.850989][T12010] device macvlan2 entered promiscuous mode [ 889.862113][T12010] device bond2 entered promiscuous mode [ 889.872086][T12010] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 889.882324][T12010] team0: Port device macvlan2 added [ 892.265347][T12012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1982'. [ 892.275299][T12012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 892.642040][ T53] block nbd2: Attempted send on invalid socket [ 892.648289][ T53] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 893.422942][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 893.875873][T12069] device syzkaller0 entered promiscuous mode [ 895.943638][T12072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2000'. [ 895.954080][T12072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 896.203543][ T6675] block nbd2: Attempted send on invalid socket [ 896.210145][ T6675] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 897.153054][T12105] 0: reclassify loop, rule prio 0, protocol 03 [ 897.336162][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2012'. [ 897.424963][T12116] device syzkaller0 entered promiscuous mode [ 898.493167][ T6675] block nbd4: Attempted send on invalid socket [ 898.499713][ T6675] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 901.196148][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'. [ 901.521173][ T6675] block nbd2: Attempted send on invalid socket [ 901.527626][ T6675] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 902.388702][T12196] device syzkaller0 entered promiscuous mode [ 902.587539][T12201] device syzkaller0 entered promiscuous mode [ 903.191713][ T53] block nbd6: Attempted send on invalid socket [ 903.198062][ T53] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.513305][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2047'. [ 905.825806][T12246] device syzkaller0 entered promiscuous mode [ 906.290318][T12264] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 906.303325][T12264] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 906.978898][ T53] block nbd5: Attempted send on invalid socket [ 906.985282][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 907.953268][T12273] device syzkaller0 entered promiscuous mode [ 908.106770][T12287] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2066'. [ 908.284121][T12293] comedi comedi0: Minor 3 could not be opened [ 910.698719][ T6675] block nbd1: Attempted send on invalid socket [ 910.705282][ T6675] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 911.717211][T12318] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 911.726178][T12318] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 914.734288][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2078'. [ 914.915775][T12339] comedi comedi0: Minor 3 could not be opened [ 915.012966][T12337] device syzkaller0 entered promiscuous mode [ 915.196961][ T53] block nbd2: Attempted send on invalid socket [ 915.203459][ T53] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.562188][ T6675] block nbd5: Attempted send on invalid socket [ 919.568591][ T6675] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.618977][T12401] comedi comedi0: Minor 3 could not be opened [ 923.146336][T12443] loop1: detected capacity change from 0 to 256 [ 923.241774][T12450] comedi comedi0: Minor 3 could not be opened [ 923.341911][ T6675] block nbd4: Attempted send on invalid socket [ 923.348383][ T6675] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 925.146879][T12468] tipc: Failed to remove unknown binding: 66,0,0/0:428143768/428143769 [ 925.401055][T12478] netlink: 'syz.2.2128': attribute type 1 has an invalid length. [ 925.533255][T12478] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 925.544121][T12486] comedi comedi0: Minor 3 could not be opened [ 925.645453][T12478] device veth3 entered promiscuous mode [ 925.702238][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2130'. [ 925.719113][T12478] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 925.741881][T12490] netlink: 'syz.5.2130': attribute type 4 has an invalid length. [ 925.754750][T12490] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2130'. [ 925.790985][T12490] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 926.310045][T12508] tipc: Failed to remove unknown binding: 66,0,0/0:4234219499/4234219500 [ 926.564939][T12516] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 926.582158][T12516] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 927.941972][T12539] Invalid ELF header magic: != ELF [ 928.339066][T12542] comedi comedi0: Minor 3 could not be opened [ 928.889569][T12551] tipc: Failed to remove unknown binding: 66,0,0/0:3843144053/3843144054 [ 930.297811][T12574] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 930.305084][T12574] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 930.542166][T12585] Invalid ELF header magic: != ELF [ 931.342886][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2166'. [ 931.426193][T12591] comedi comedi0: Minor 3 could not be opened [ 931.696265][T12597] tipc: Failed to remove unknown binding: 66,0,0/0:1197698524/1197698526 [ 931.746259][T12597] tipc: Failed to remove unknown binding: 66,0,0/0:1197698524/1197698525 [ 931.831957][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.840629][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.460622][T12626] device syzkaller1 entered promiscuous mode [ 932.485442][T12619] loop4: detected capacity change from 0 to 4096 [ 932.548766][T12629] Invalid ELF header magic: != ELF [ 932.568168][T12619] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 933.009182][T12619] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 933.030051][T12619] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 933.100569][T12619] ntfs: volume version 3.1. [ 933.266678][T12633] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 933.273808][T12633] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 933.504225][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'. [ 933.699951][T12645] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 933.788311][T12645] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 934.430755][T12663] device syzkaller1 entered promiscuous mode [ 934.616844][T12670] Invalid ELF header magic: != ELF [ 935.336867][T12679] loop2: detected capacity change from 0 to 256 [ 936.267062][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2203'. [ 937.855886][T12730] loop2: detected capacity change from 0 to 256 [ 937.872411][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2213'. [ 938.030029][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller1: link becomes ready [ 939.359634][T12763] tipc: Failed to remove unknown binding: 66,0,0/0:2459966314/2459966315 [ 939.601093][T12772] loop1: detected capacity change from 0 to 256 [ 940.484155][T12776] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2222'. [ 940.629697][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2222'. [ 940.648330][T12779] device syzkaller1 entered promiscuous mode [ 941.736195][T12767] loop4: detected capacity change from 0 to 40427 [ 941.820635][T12767] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 941.828411][T12767] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 941.860665][T12775] loop2: detected capacity change from 0 to 32768 [ 941.881475][T12767] F2FS-fs (loop4): invalid crc value [ 941.956888][T12767] F2FS-fs (loop4): Found nat_bits in checkpoint [ 942.001655][T12775] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 942.055856][T12775] JBD2: Ignoring recovery information on journal [ 942.219603][T12767] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 942.226694][T12767] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 942.275835][T12775] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 942.648976][T12775] syz.2.2231 (12775) used greatest stack depth: 19200 bytes left [ 942.722629][T12805] tipc: Failed to remove unknown binding: 66,0,0/0:4019428347/4019428348 [ 942.847708][T12806] Invalid ELF header magic: != ELF [ 942.943672][ T4281] ocfs2: Unmounting device (7,2) on (node local) [ 943.062844][T12813] device syzkaller1 entered promiscuous mode [ 943.213235][T12819] overlayfs: failed to clone upperpath [ 944.173382][T12833] loop2: detected capacity change from 0 to 256 [ 944.224025][T12836] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2250'. [ 944.274940][T12836] device syzkaller1 entered promiscuous mode [ 944.731781][T12856] tipc: Failed to remove unknown binding: 66,0,0/0:3493457275/3493457276 [ 945.195611][T12867] Invalid ELF header magic: != ELF [ 946.080244][T12880] loop5: detected capacity change from 0 to 256 [ 948.208500][T12888] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2264'. [ 948.260051][T12888] device syzkaller1 entered promiscuous mode [ 948.671626][T12904] Invalid ELF header magic: != ELF [ 949.192834][T12908] Invalid ELF header magic: != ELF [ 949.765363][T12912] loop4: detected capacity change from 0 to 256 [ 950.027053][T12923] device syzkaller1 entered promiscuous mode [ 950.065963][T12920] 8021q: VLANs not supported on ip6gre0 [ 950.302421][T12931] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2281'. [ 950.353876][T12931] device syzkaller1 entered promiscuous mode [ 950.608014][T12939] Invalid ELF header magic: != ELF [ 950.706086][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801c3f9400: rx timeout, send abort [ 950.800868][T12946] Invalid ELF header magic: != ELF [ 951.206229][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888023669000: rx timeout, send abort [ 951.214659][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801c3f9400: abort rx timeout. Force session deactivation [ 951.501487][T12959] device syzkaller0 entered promiscuous mode [ 951.714584][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888023669000: abort rx timeout. Force session deactivation [ 953.472354][T13007] Invalid ELF header magic: != ELF [ 956.225618][T13043] Invalid ELF header magic: != ELF [ 956.261841][T13044] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 956.289997][T13044] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 956.327330][T13049] 8021q: VLANs not supported on ip6tnl0 [ 956.444791][T13051] lo speed is unknown, defaulting to 1000 [ 956.492977][T13051] lo speed is unknown, defaulting to 1000 [ 956.543403][T13047] loop1: detected capacity change from 0 to 4096 [ 956.556265][T13051] lo speed is unknown, defaulting to 1000 [ 956.598210][T13047] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 956.635926][T13053] device syzkaller1 entered promiscuous mode [ 956.666481][T13051] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 956.753745][T13047] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 956.793564][T13051] lo speed is unknown, defaulting to 1000 [ 956.802675][T13051] lo speed is unknown, defaulting to 1000 [ 956.809546][T13051] lo speed is unknown, defaulting to 1000 [ 956.816311][T13051] lo speed is unknown, defaulting to 1000 [ 956.830611][T13051] lo speed is unknown, defaulting to 1000 [ 956.859155][T13047] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 957.033746][T13047] ntfs: volume version 3.1. [ 957.390305][T13060] device syzkaller0 entered promiscuous mode [ 960.263428][T13087] 8021q: VLANs not supported on ip6gre0 [ 960.782857][T13100] device syzkaller1 entered promiscuous mode [ 960.860633][T13105] Invalid ELF header magic: != ELF [ 960.909444][T13102] fuse: Bad value for 'fd' [ 961.869669][T13120] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2338'. [ 961.902559][T13121] 8021q: VLANs not supported on ip6gre0 [ 961.914658][T13120] device syzkaller1 entered promiscuous mode [ 962.023830][T13125] device syzkaller0 entered promiscuous mode [ 962.658439][T13147] device syzkaller1 entered promiscuous mode [ 962.684797][T13148] Invalid ELF header magic: != ELF [ 963.620909][T13128] loop1: detected capacity change from 0 to 32768 [ 963.625062][T13162] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2354'. [ 963.661087][T13128] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2343 (13128) [ 963.676145][T13160] 8021q: VLANs not supported on ip6gre0 [ 963.692610][T13128] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 963.723829][T13128] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 963.784599][T13128] BTRFS info (device loop1): force zlib compression, level 3 [ 963.809179][T13128] BTRFS info (device loop1): force clearing of disk cache [ 963.821128][T13128] BTRFS info (device loop1): setting nodatasum [ 963.827647][T13128] BTRFS info (device loop1): use zlib compression, level 3 [ 963.853803][T13128] BTRFS info (device loop1): allowing degraded mounts [ 963.869573][T13128] BTRFS info (device loop1): enabling disk space caching [ 963.887058][T13128] BTRFS info (device loop1): disk space caching is enabled [ 964.036804][T13128] BTRFS info (device loop1): enabling ssd optimizations [ 964.064686][T13128] BTRFS info (device loop1): rebuilding free space tree [ 964.166728][T13128] BTRFS info (device loop1): disabling free space tree [ 964.195983][T13128] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 964.266077][T13128] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 964.613965][ T4271] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 964.881988][T13197] Trying to write to read-only block-device nullb0 [ 964.889950][T13197] Trying to write to read-only block-device nullb0 [ 964.896578][T13197] Trying to write to read-only block-device nullb0 [ 964.903227][T13197] Trying to write to read-only block-device nullb0 [ 964.909874][T13197] Trying to write to read-only block-device nullb0 [ 964.916500][T13197] Trying to write to read-only block-device nullb0 [ 964.923146][T13197] Trying to write to read-only block-device nullb0 [ 964.929801][T13197] Trying to write to read-only block-device nullb0 [ 964.936415][T13197] Trying to write to read-only block-device nullb0 [ 964.943076][T13197] Trying to write to read-only block-device nullb0 [ 965.825802][T13026] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop1 scanned by udevd (13026) [ 966.075027][T13215] device syzkaller1 entered promiscuous mode [ 966.234820][T13232] ------------[ cut here ]------------ [ 966.240942][T13232] WARNING: CPU: 1 PID: 13232 at net/sched/sch_taprio.c:1026 taprio_get_start_time+0x139/0x160 [ 966.251521][T13232] Modules linked in: [ 966.255486][T13232] CPU: 1 PID: 13232 Comm: syz.1.2361 Not tainted syzkaller #0 [ 966.263108][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 966.273278][T13232] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 966.279513][T13232] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9c b0 6b f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 7e 1a f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 966.299331][T13232] RSP: 0000:ffffc90005986d68 EFLAGS: 00010287 [ 966.305539][T13232] RAX: ffffffff8867b0c9 RBX: ffffc90005986e78 RCX: 0000000000080000 [ 966.313619][T13232] RDX: ffffc90005571000 RSI: 0000000000001e3e RDI: 0000000000001e3f [ 966.321701][T13232] RBP: 0000000000000001 R08: ffffffff90b1240f R09: 1ffffffff2162481 [ 966.329771][T13232] R10: dffffc0000000000 R11: fffffbfff2162482 R12: 000000e0f3579665 [ 966.337812][T13232] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.345886][T13232] FS: 00007f6b7d1f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 966.354923][T13232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.361606][T13232] CR2: 00007fef65197996 CR3: 000000005dbed000 CR4: 00000000003506e0 [ 966.369694][T13232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 966.377707][T13232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 966.385725][T13232] Call Trace: [ 966.389141][T13232] [ 966.392182][T13232] taprio_change+0x3f99/0x5390 [ 966.397065][T13232] ? taprio_destroy+0x4b0/0x4b0 [ 966.402010][T13232] ? lockdep_init_map_type+0x98/0x8d0 [ 966.407547][T13232] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 966.412827][T13232] ? memset+0x1e/0x40 [ 966.416951][T13232] ? fifo_init+0x3f6/0x6d0 [ 966.421512][T13232] ? qdisc_peek_head+0x40/0x40 [ 966.426348][T13232] ? mutex_is_locked+0xe/0x40 [ 966.431139][T13232] ? taprio_peek+0x590/0x590 [ 966.435787][T13232] qdisc_create+0x7ef/0x10c0 [ 966.440549][T13232] ? qdisc_notify+0x370/0x370 [ 966.445286][T13232] tc_modify_qdisc+0xb43/0x1de0 [ 966.450252][T13232] ? qdisc_offload_query_caps+0x150/0x150 [ 966.456072][T13232] ? qdisc_offload_query_caps+0x150/0x150 [ 966.461915][T13232] rtnetlink_rcv_msg+0x863/0xfb0 [ 966.466930][T13232] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 966.472166][T13232] ? rtnetlink_bind+0x80/0x80 [ 966.476903][T13232] ? __local_bh_enable_ip+0x136/0x1c0 [ 966.482432][T13232] ? lockdep_hardirqs_on+0x94/0x140 [ 966.487690][T13232] ? __local_bh_enable_ip+0x136/0x1c0 [ 966.493140][T13232] ? _local_bh_enable+0xa0/0xa0 [ 966.498024][T13232] ? __dev_queue_xmit+0x281/0x3810 [ 966.503223][T13232] ? __dev_queue_xmit+0x281/0x3810 [ 966.508368][T13232] ? __dev_queue_xmit+0x1d84/0x3810 [ 966.513643][T13232] ? __dev_queue_xmit+0x281/0x3810 [ 966.518809][T13232] ? ref_tracker_free+0x682/0x830 [ 966.524014][T13232] ? refcount_inc+0x70/0x70 [ 966.528566][T13232] ? memcpy+0x3c/0x60 [ 966.532625][T13232] ? __copy_skb_header+0x3ba/0x4f0 [ 966.537828][T13232] ? __skb_clone+0x446/0x6c0 [ 966.542508][T13232] netlink_rcv_skb+0x1ef/0x440 [ 966.547374][T13232] ? rtnetlink_bind+0x80/0x80 [ 966.552101][T13232] ? netlink_ack+0x1160/0x1160 [ 966.556902][T13232] ? netlink_deliver_tap+0x2e/0x1b0 [ 966.562207][T13232] netlink_unicast+0x7ad/0x920 [ 966.567014][T13232] netlink_sendmsg+0x8ad/0xbd0 [ 966.571818][T13232] ? netlink_getsockopt+0x550/0x550 [ 966.577032][T13232] ? apparmor_socket_sendmsg+0x8a/0x330 [ 966.582731][T13232] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 966.588127][T13232] ? security_socket_sendmsg+0x7c/0xa0 [ 966.593734][T13232] ? netlink_getsockopt+0x550/0x550 [ 966.598959][T13232] ____sys_sendmsg+0x5ed/0x9a0 [ 966.603897][T13232] ? __sys_sendmsg_sock+0x30/0x30 [ 966.608973][T13232] ? __import_iovec+0x306/0x510 [ 966.614029][T13232] ? import_iovec+0x6f/0xa0 [ 966.618591][T13232] ___sys_sendmsg+0x2a2/0x360 [ 966.623402][T13232] ? __sys_sendmsg+0x2a0/0x2a0 [ 966.628271][T13232] __se_sys_sendmsg+0x1c3/0x2b0 [ 966.633222][T13232] ? __x64_sys_sendmsg+0x80/0x80 [ 966.638235][T13232] ? lockdep_hardirqs_on+0x94/0x140 [ 966.643531][T13232] do_syscall_64+0x4c/0xa0 [ 966.648035][T13232] ? clear_bhb_loop+0x60/0xb0 [ 966.652889][T13232] ? clear_bhb_loop+0x60/0xb0 [ 966.657631][T13232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.663608][T13232] RIP: 0033:0x7f6b7ef9e0d9 [ 966.668078][T13232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.687811][T13232] RSP: 002b:00007f6b7d1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.696319][T13232] RAX: ffffffffffffffda RBX: 00007f6b7f225fa0 RCX: 00007f6b7ef9e0d9 [ 966.704387][T13232] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 966.712415][T13232] RBP: 00007f6b7f035024 R08: 0000000000000000 R09: 0000000000000000 [ 966.720544][T13232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.728540][T13232] R13: 00007f6b7f226038 R14: 00007f6b7f225fa0 R15: 00007fffef82b358 [ 966.736564][T13232] [ 966.739647][T13232] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 966.746925][T13232] CPU: 1 PID: 13232 Comm: syz.1.2361 Not tainted syzkaller #0 [ 966.754368][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 966.764516][T13232] Call Trace: [ 966.767806][T13232] [ 966.770736][T13232] dump_stack_lvl+0x188/0x24e [ 966.775444][T13232] ? memcpy+0x3c/0x60 [ 966.779425][T13232] ? show_regs_print_info+0x12/0x12 [ 966.784624][T13232] ? load_image+0x410/0x410 [ 966.789178][T13232] panic+0x2d3/0x710 [ 966.793113][T13232] ? bpf_jit_dump+0xd0/0xd0 [ 966.797612][T13232] __warn+0x2f8/0x4f0 [ 966.801586][T13232] ? taprio_get_start_time+0x139/0x160 [ 966.807040][T13232] ? taprio_get_start_time+0x139/0x160 [ 966.812488][T13232] report_bug+0x2ba/0x4f0 [ 966.816899][T13232] ? taprio_get_start_time+0x139/0x160 [ 966.822352][T13232] handle_bug+0x3a/0x70 [ 966.826498][T13232] exc_invalid_op+0x16/0x40 [ 966.831006][T13232] asm_exc_invalid_op+0x16/0x20 [ 966.835867][T13232] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 966.841932][T13232] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9c b0 6b f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 7e 1a f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 966.861539][T13232] RSP: 0000:ffffc90005986d68 EFLAGS: 00010287 [ 966.867606][T13232] RAX: ffffffff8867b0c9 RBX: ffffc90005986e78 RCX: 0000000000080000 [ 966.875570][T13232] RDX: ffffc90005571000 RSI: 0000000000001e3e RDI: 0000000000001e3f [ 966.883534][T13232] RBP: 0000000000000001 R08: ffffffff90b1240f R09: 1ffffffff2162481 [ 966.891498][T13232] R10: dffffc0000000000 R11: fffffbfff2162482 R12: 000000e0f3579665 [ 966.899466][T13232] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.907437][T13232] ? taprio_get_start_time+0x139/0x160 [ 966.912905][T13232] ? taprio_get_start_time+0x139/0x160 [ 966.918404][T13232] taprio_change+0x3f99/0x5390 [ 966.923180][T13232] ? taprio_destroy+0x4b0/0x4b0 [ 966.928022][T13232] ? lockdep_init_map_type+0x98/0x8d0 [ 966.933392][T13232] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 966.938517][T13232] ? memset+0x1e/0x40 [ 966.942492][T13232] ? fifo_init+0x3f6/0x6d0 [ 966.946904][T13232] ? qdisc_peek_head+0x40/0x40 [ 966.951697][T13232] ? mutex_is_locked+0xe/0x40 [ 966.956380][T13232] ? taprio_peek+0x590/0x590 [ 966.960965][T13232] qdisc_create+0x7ef/0x10c0 [ 966.965563][T13232] ? qdisc_notify+0x370/0x370 [ 966.970244][T13232] tc_modify_qdisc+0xb43/0x1de0 [ 966.975103][T13232] ? qdisc_offload_query_caps+0x150/0x150 [ 966.980835][T13232] ? qdisc_offload_query_caps+0x150/0x150 [ 966.986549][T13232] rtnetlink_rcv_msg+0x863/0xfb0 [ 966.991481][T13232] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 966.996591][T13232] ? rtnetlink_bind+0x80/0x80 [ 967.001281][T13232] ? __local_bh_enable_ip+0x136/0x1c0 [ 967.006651][T13232] ? lockdep_hardirqs_on+0x94/0x140 [ 967.011842][T13232] ? __local_bh_enable_ip+0x136/0x1c0 [ 967.017208][T13232] ? _local_bh_enable+0xa0/0xa0 [ 967.022142][T13232] ? __dev_queue_xmit+0x281/0x3810 [ 967.027245][T13232] ? __dev_queue_xmit+0x281/0x3810 [ 967.032376][T13232] ? __dev_queue_xmit+0x1d84/0x3810 [ 967.037575][T13232] ? __dev_queue_xmit+0x281/0x3810 [ 967.042687][T13232] ? ref_tracker_free+0x682/0x830 [ 967.047707][T13232] ? refcount_inc+0x70/0x70 [ 967.052204][T13232] ? memcpy+0x3c/0x60 [ 967.056182][T13232] ? __copy_skb_header+0x3ba/0x4f0 [ 967.061296][T13232] ? __skb_clone+0x446/0x6c0 [ 967.065889][T13232] netlink_rcv_skb+0x1ef/0x440 [ 967.070652][T13232] ? rtnetlink_bind+0x80/0x80 [ 967.075346][T13232] ? netlink_ack+0x1160/0x1160 [ 967.080123][T13232] ? netlink_deliver_tap+0x2e/0x1b0 [ 967.085331][T13232] netlink_unicast+0x7ad/0x920 [ 967.090106][T13232] netlink_sendmsg+0x8ad/0xbd0 [ 967.094873][T13232] ? netlink_getsockopt+0x550/0x550 [ 967.100065][T13232] ? apparmor_socket_sendmsg+0x8a/0x330 [ 967.105625][T13232] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 967.110905][T13232] ? security_socket_sendmsg+0x7c/0xa0 [ 967.116443][T13232] ? netlink_getsockopt+0x550/0x550 [ 967.121651][T13232] ____sys_sendmsg+0x5ed/0x9a0 [ 967.126447][T13232] ? __sys_sendmsg_sock+0x30/0x30 [ 967.131480][T13232] ? __import_iovec+0x306/0x510 [ 967.136334][T13232] ? import_iovec+0x6f/0xa0 [ 967.140863][T13232] ___sys_sendmsg+0x2a2/0x360 [ 967.145545][T13232] ? __sys_sendmsg+0x2a0/0x2a0 [ 967.150341][T13232] __se_sys_sendmsg+0x1c3/0x2b0 [ 967.155197][T13232] ? __x64_sys_sendmsg+0x80/0x80 [ 967.160144][T13232] ? lockdep_hardirqs_on+0x94/0x140 [ 967.165337][T13232] do_syscall_64+0x4c/0xa0 [ 967.169749][T13232] ? clear_bhb_loop+0x60/0xb0 [ 967.174421][T13232] ? clear_bhb_loop+0x60/0xb0 [ 967.179091][T13232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.184977][T13232] RIP: 0033:0x7f6b7ef9e0d9 [ 967.189382][T13232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.208982][T13232] RSP: 002b:00007f6b7d1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.217396][T13232] RAX: ffffffffffffffda RBX: 00007f6b7f225fa0 RCX: 00007f6b7ef9e0d9 [ 967.225359][T13232] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 967.233325][T13232] RBP: 00007f6b7f035024 R08: 0000000000000000 R09: 0000000000000000 [ 967.241288][T13232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.249248][T13232] R13: 00007f6b7f226038 R14: 00007f6b7f225fa0 R15: 00007fffef82b358 [ 967.257424][T13232] [ 967.260685][T13232] Kernel Offset: disabled [ 967.265074][T13232] Rebooting in 86400 seconds..