last executing test programs: 6m2.863431848s ago: executing program 1 (id=27): shmget$private(0x0, 0x2000, 0x53ffffff, &(0x7f0000ffe000/0x2000)=nil) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 5m59.971821199s ago: executing program 1 (id=52): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x53, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x8}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000340)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f0000000800)="d2fc27", 0x3}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='R', 0x1}], 0x1}, 0x820) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 5m59.022056353s ago: executing program 1 (id=58): setresuid(0x0, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)=0x0) setresuid(0x0, r0, 0xffffffffffffffff) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0xee01, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = socket(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl(r1, 0x8936, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) 5m58.419534904s ago: executing program 1 (id=62): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 5m58.166755653s ago: executing program 1 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0xc0184d16, &(0x7f0000000640)={0x1, 0x300, 0x0, 0x0}) 5m57.496060136s ago: executing program 1 (id=74): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) 5m57.306778162s ago: executing program 32 (id=74): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) 5m54.52276408s ago: executing program 4 (id=96): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x40000029) getdents64(r2, 0x0, 0x3e) 5m54.385820115s ago: executing program 4 (id=98): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 5m54.2324558s ago: executing program 4 (id=99): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34016c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x69, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5m53.984671668s ago: executing program 4 (id=102): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1008055, &(0x7f0000000780)=ANY=[], 0x5, 0x559a, &(0x7f0000006a40)="$eJzs3M2LG/UbAPBnst2+//or4sFbB4qwC01oti/oyaotarGl+HLwpNkkDWmTzLJJ07WnHjyKB/8TUfDk0b/Bgx71IIgHRfAgVDIzW5q2ttomu+76+cDkmXnmm2e+32lZeGYgAfxnHU1/+yWJI3EgIhYi4nAS+X5SbhG3I84VY5+LiGMRUblnS8r83cTeiDgYEUcmxYuaSXnq0xPj42d+vvjrV9/s23Posy+/3daFA9vq+YjorxX7N/tFzDp5uLNQ5hvjbh77p8dlXJuq0c+K/M32al7hZmNzXCOPpzrF+GztxnASr/YazUnsdK/m+bVBccHhuLNZZ/KF9FpjPT9utVfz2B1meezcKq67cav423ZrOCrqtMp6H+blYzTajEW+vdEu1rN2PY/NwajMF3WzVntjEsdlLC8XzazXyuex+qR3+d/vze7gxkY6bq8Pu9kgPVOrv1Crn63W17NWe9Q+XW30W2dPp0ud3mRYddRu9M91sqzTa9eaWX85Xeo0m9V6PV06317tNgZpvV47VTtZPbNc7p1IX7v8btprpUuT+Ep3cGPU7VXiaraeFt9YTldqp15cTo/X07cvXUmvvHXhwqUr77x//r3LL19649Vy0APTSpdWTq6sVOsnqyv15R23/mH6pOv/qJz0P1h/UsaL0+nvv3u62waFZLsnALDzPND/x/39f+j/gZl7RP8f1x7T//evl8fz6f/jof1/Zbr/j1n2/5OWSv//+P63sg3972Lo/+e4fngqT9b/7535PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HI/LH7+er5ztDg+VOb/V6aeKY+TiKhExJ2HWIi9UzUXyjqLfzF+8b45fJ1EXmFyjX3ldjAizpXbH/+f910AAACA3euL28c+Kbr14qN8BHBfN88uVfwzVw5/MKN6SUQsHv1pRtUqk49nZ1Qs//+9JzZmVC1/gLV/RsWKR257ZlXtb1mYCvvvCUkRKls6HQAAYEtMdwKP6kJub8l8AAAAmJePH3n2pS2bB3P0+48P5pLYfJV595X/viKULwQPTJ0DAAAAdqBkuycAAAAAzF3e//v9PwAAANjdit//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3buJjdxGAoA8EsgMMyPBo3mQLODY8wRZjlbuApH4AaVegHOQKUueoS2VCQuUlqQkHCgRd8nxWAHnm3I5tmSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0Vy2no9PD3DxtTpNjLgAAAMB+62o5rd+Mm/q31P4jNf1K9SIiyojYl7v3YtCK2UtxqgOfr96M4TaijrBtH6bra0T8Sdfjz65/BQAAALheq/li0mTrTZGWAO6P+e6w05FxBs2iTfn9b6Z4RURU44dM0cpt8TtTsPr57sf/TNHqBawvmYI1S279/fcGuTpp67VeXmcyq//EulZ20y8AAHBJ7UzgQBYCAADAFfh36QFwDu9T+2JX7PYZ065+2hActWoAAADAJ1RcegAAAABA5+r8/yOd/1c4/w8AAACya87/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEvrajldzReTQ/dnR8Z53pwm34wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCF/XlFghAGgzA4u7wdlfsflhoRicZ0q49/ChEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB485vxnx9L406y9trYeh5J9k6No1Pj7Ny4+sP48iUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzbT08cZRgA8Gd32GmpGhENiaipSQ96sXRbW3s1RkM8+BFMCF0qurVKOdiGWLl4M5x7MXo0xkSDN75DzyXppd564ICJJw+YmZ2hs7BaUu0Mld8vefd9dnZ4/zEhPPPOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJS23o6X20WcZC8Tg7g8dmd7ZT6rN/fUmY21u9NZyeJWzeN+ArxSfXNyqrmBAAAAcHQkZX4fEfc667NZ3Z7I8/9OeU6W83/3zCAu8/m9ef/m9srx4qPpMv//9Zf7L+x2NJHk/WSNLiz2e2f2D2XsMU3x0Hv2oWeM5Suf33tJ8l9I+/3V57c6+Xq2vrl9+900D4/VMVoA4FGcLusiKP8fyupukwMD4MgYqyTeZf6fTDQ7JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6bK3GU2XciojpsQdxZnN7ZX5U/dXa3emNoly4dWut2mbWRCciFhb7vTM1zuXwKlfzxidz/X5v6dr1uoOTETHio5sH+/GkGP7fnpNGxNCRUy+OaOfDA/S1p519QXF5Rr1rOJ7N76Ent4aOtPYt+Ds7A01cAP3eUlrH0rWLTpqY4OMOymvvv2+5xj9FAAAcCZ2iZJnovc76bHasNRmx8/1w/v9aJY6hvH/n5uDI4P1GJf+//9GFO9W+qvl/t6b5PQlmlq98NnPt+o03Fq/MXe5d7n365tnuW91zF8+fvziT3yuZWYi2OyYAAAD8C2lRqvl/e3L//v+JShz/sP9fzf8//7b7ZbWvRP4/0oNNv6ZHAgAAcBSlu9Fzr/7xe2vEGa00jS/mlpeXuoPX3fdnB6+1DvcRHStKNf9PJpseFQAAAFCHrdXW0P7/pUocB9z/f/qHl36qtplExHjE1YjonZ6/2r9U33QOtTq+qJx3lDY9UwAAAJoyXpTq/n8nf/6/vfvIQzsiXj8V8WfxHf44YP6fvPf1j9W+qs//n6t1lodPe2qwHnk9FTE21fSIAAAA+D87XpQs2f+tsz778c8nPkg9/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQt78CAAD//wXGL2s=") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 5m52.018462628s ago: executing program 4 (id=106): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1, 0x37b, &(0x7f00000005c0)="$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") r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$AUDIT_USER_TTY(r0, 0x0, 0x48000) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x24004000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 5m50.995925563s ago: executing program 4 (id=109): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 5m50.898170897s ago: executing program 33 (id=109): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 2m47.549035616s ago: executing program 6 (id=1593): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0xee00, 0x0) 2m46.59885513s ago: executing program 6 (id=1604): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 2m45.282165466s ago: executing program 6 (id=1612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000006c0)={0x79}) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x101c}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000240)={"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"}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"effa58a4e979e5b74aefe73bc1f2d3a717dfabdc5e1d38b959ceeca589a25589fc1df7d173269f436e9627180a855633bc2ddbb90afe128283775ca5b5755be7b97408bf33f7f4eea2791b33a292c4d976fa04971bffad97ac33198356a218de4f2088b0c0c4cddaccc51cc28922b9acc8c4d1aea8184691a551fb6e147146feca8262b09f105c66630c187bb8ebb4e44c74443c84e399a6c860129ccf73d0fc9c3ad29e89a3b3afb60abeaf0b7e55e4a619cce3618c502b146788e059d8aac202954c207c72d4555ef04ba89e445b76bb0ed6b163eb8ff42dc75ba90eb99650fbc0566f503471173a218fd53e9dd12c5a71447a499db40faf9ed7c2c60a01d468d790b8189ae0b02582f16d43f60e2a15d0262cbea2b783203f5036c753f8220b9c4540b132889c881f848295bf7c17b93e1bc4527096c2e5863ffadeb082a4aaeaba08bd8a0ca96a0aaf5f616c3cfdc1bc58b0814f657b7c2070bc96c2af2281136dfaff4e4d6dce1cb6e12fbb530bcee6a87b2336672de89fcc8bf769d20b6f67f289961172de1e7f82ff95ddb310c0381ddce5c96864fc763b718169528717a99d24df5fc47d9540e9a923827b60751efb9a68ab5e7c0105550996eae2d2fd3e81b24dc8032a97dabd8ff96b056a0f153bca013c95c2a0af37eb21f2ff3529315192af1f7ab05f4ac5dfc5b31f023a39ab7db6c3430c40695a849bdd3b414860e789d224beaf8c07689f3ee39a265c382fb400a010d741193c5b98a1d54c9bdb984706180386e91372a7ef80a4705ec3f8dc6cedfb1073aa1845ccb18a448e706c89c50e60901a8a70b9df95fa728be6abacdc65a1eb554768cd971bc50aea6646fa060a4b83724e93965cd93145549933f350320b7a498826b5f3b23fca68749b1ed60bf0dc36a7d3c47fe60b4c26a209844e6f876de2b69b81ad2d8ae72a438ec0f4c41889edac36003f5c3617a3da32c0dd8c27884e44e902efb527cc5be4336ce06776e0dfb2a56565fc4deeea78f66c663215786ed35fa1299f34667cabe4ae9afdd8cf943f38db9ed1a909f4d83cd0e793c6947c43ab5130f1c7868a1a92842878c5d85860e5cc58f13b2b8ce5e7ed84025b91572a4bc315faf270d7c023bfa92d686b814fd2d3ab94612cbcec0f095f403a925c27b143d34af2e8eba760adec1c8bd2d239b41a1a35881bfda70b4c39eb9051fe5e807fe3f566219f4a886330fca4f2221c9a61efa3b80a4b9b40fa138f9f152c84f99e8714d86eab0f473726d9cf949acd0abb7470caf8088438ee8e6dced66276a1b174028ab636e0abc70f5a18f1779216fdeeea2b4ba482f4100f5a4094a95d69ccc3ef8ab74011d4320f2bfaf6a5052518be42c0f6b2045f56a348945f80ab3d9ccf3808bd55dc018d7dd91000"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x294}}, 0x4048010) 2m44.666916097s ago: executing program 6 (id=1616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@nouid32}, {@errors_remount}, {@user_xattr}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") r1 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x2000000000006) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) tkill(r2, 0x12) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x1, 0x0, 0x27a, 0xebc, 0x5, 0x79a}) 2m44.227807832s ago: executing program 6 (id=1619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2e, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m40.396067667s ago: executing program 6 (id=1630): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xebea) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB=','], 0x30}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m40.29495755s ago: executing program 34 (id=1630): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xebea) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB=','], 0x30}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.513835558s ago: executing program 7 (id=2441): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x24, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000340)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) 9.630119588s ago: executing program 3 (id=2445): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 9.55803669s ago: executing program 2 (id=2446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 9.355390828s ago: executing program 7 (id=2450): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 8.12686971s ago: executing program 2 (id=2451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) 7.83035108s ago: executing program 3 (id=2454): socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r2, 0x1) 5.557926049s ago: executing program 5 (id=2456): socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x1, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0x883, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x5, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x21501, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r0, r3, 0x6700000000000000) 5.557135429s ago: executing program 2 (id=2457): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) 5.467947421s ago: executing program 3 (id=2458): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 5.464995402s ago: executing program 0 (id=2459): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = eventfd2(0x1f920, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x7, 0x2, r3}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0xc, 0x3, 0x0, 0x2, 0x7, 0xa1, 0xa6, 0xff, 0x2, 0xd, 0xb, 0xb4, 0x8, 0x0, 0x5, 0x3}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x218, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vlan1\x00', {0x0, 0x6, 0x45, 0xfffffffb, 0x9, 0x100, 0x1, 0x3ff, 0x0, 0x20}, {0x3}}}, @common=@unspec=@cpu={{0x28}, {0xfff, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x9d}}}, {{@ip={@multicast2, @rand_addr=0x64010104, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x9f7ffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xe, 0x4, 0x4, 0x9, 0x1000, 0xee, 0x1000004, 0x7fffffffffffb, 0x3, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4315}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.403218714s ago: executing program 5 (id=2460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 5.402825064s ago: executing program 0 (id=2461): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) 4.086191259s ago: executing program 5 (id=2462): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040), 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f5000000000000000000000004000045"], 0x58) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af010203010902240001000010000904"], 0x0) 4.07716363s ago: executing program 0 (id=2463): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) close_range(r0, 0xffffffffffffffff, 0x0) 3.957401133s ago: executing program 0 (id=2464): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) tee(r0, r3, 0xfffffffffffffc01, 0x0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x9) socket$nl_route(0x10, 0x3, 0x0) 3.883498426s ago: executing program 2 (id=2465): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) socket(0x200000000000011, 0x2, 0xd) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3.637563804s ago: executing program 2 (id=2466): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) set_mempolicy(0x5, &(0x7f0000000000)=0x67, 0xb) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x800}}, 0x50) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000004c0)={{}, {0x3}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0xe, {0x1, 0xc, 0x1, '3'}}, 0x1a}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) link(0x0, &(0x7f0000000600)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 3.611992026s ago: executing program 7 (id=2467): unshare(0x28000600) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) 3.522592419s ago: executing program 7 (id=2468): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c) 3.512469008s ago: executing program 3 (id=2469): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ab0f05000000fedbdf25190000000c0001800800030001"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 3.345501265s ago: executing program 5 (id=2470): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.559239052s ago: executing program 2 (id=2471): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000082, 0x0, 0x3}]}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7f22c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000001040)="4d5e945c3ce0b5e3810b382d4c4e5b4c26a85ffee3e1324e617a0d6e763f", 0x1e}, {&(0x7f00000022c0)='F', 0x1}, {&(0x7f0000000100)="56cee8f6c0b24645394e5732e3b690d110eb1167985f6f81141145f0d30728599440ec54679a6bcca755c9411c6b7bfce2d32278d5ad32f71d3fc726b7487648", 0x40}, {&(0x7f0000000300)="f5c83b05376d4ce9b90303d7945623c38e4314fe6b7c17c3fc3b6e2e1ab756edc292464ebd05e49b5f7c7273428082305e7b076ddf9eb381d8d402502e9cb59873fd5a72192b0852622e421fce595a1741ec92a2fef8c746de2a7d0797e5c823c0a857b4ce98fdd473c5d08b5410c70514fb58e9a0bd05b158bc6e89cb6e64bda6a53050f45a2051c7b7c384d63b8be535108f3e0c0f1f88c48bc0fc58c95c3d9577189891f71317264afee77da5cff0118ea943c001a49bdabe2996a9313f56c45289dc42c1a9e17c4ff92eed9319d8b2a1bbf418d3f916c6a287838402d8a60f5ffb48", 0xe4}], 0x5) 2.455983615s ago: executing program 3 (id=2472): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x23, &(0x7f0000000000)=r7, 0x8) 2.451654735s ago: executing program 7 (id=2473): ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x64, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x38, r0, 0x1, 0x0, 0x4003, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x63}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}}, 0x0) 2.238742253s ago: executing program 5 (id=2474): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x478, 0xffffffff, 0x1b8, 0x1b8, 0xf8, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x1e8, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x28}, [0xff000000, 0x0, 0x0, 0xffffffff], 0x4d6, 0x0, 0x73, 0x1, 0x0, 0x7}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xff000000, 0xffffff00], 0x4d3, 0x3506, 0x6, 0x0, 0x10, 0x3}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x3507, 0x0, 0x1, 0x16, 0x1}, {@ipv4=@local, [0xff, 0xffffff00, 0xffffff00, 0xff], @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff, 0xff000000, 0xffffffff, 0xffffff00], 0x4d5, 0x0, 0x33, 0x1, 0x4, 0x4}], 0x2, 0x1}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) 2.234992443s ago: executing program 0 (id=2475): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, r1, 0x0) 2.162694675s ago: executing program 7 (id=2476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) 116.322626ms ago: executing program 5 (id=2477): userfaultfd(0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r2, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="1bb1b293", 0x4}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 805.4µs ago: executing program 0 (id=2478): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) r1 = socket(0x400000000010, 0x3, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0420070080000900", 0x33a) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) 0s ago: executing program 3 (id=2479): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0xd, 0x2}, {0x10, 0xf}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x8c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): 1: USB disconnect, device number 13 [ 135.898744][ T6554] tipc: Started in network mode [ 135.907122][ T6554] tipc: Node identity 84e, cluster identity 4711 [ 135.913818][ T6554] tipc: Node number set to 2126 [ 136.021399][ T1324] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 136.032726][ T1324] usb 4-1: USB disconnect, device number 13 [ 136.449056][ T6564] loop0: detected capacity change from 0 to 256 [ 136.493283][ T6564] FAT-fs (loop0): bogus number of FAT sectors [ 136.537330][ T6564] FAT-fs (loop0): Can't find a valid FAT filesystem [ 136.686914][ T6569] loop3: detected capacity change from 0 to 128 [ 136.704297][ T6564] overlayfs: failed to get inode (-116) [ 136.728360][ T6564] overlayfs: failed to get inode (-116) [ 136.916766][ T6569] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.981216][ T6569] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.346186][ T6578] loop6: detected capacity change from 0 to 64 [ 137.862969][ T6585] netlink: 168 bytes leftover after parsing attributes in process `syz.6.578'. [ 138.575160][ T6598] loop6: detected capacity change from 0 to 40427 [ 138.635656][ T6598] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 138.643478][ T6598] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 138.653965][ T6598] F2FS-fs (loop6): invalid crc value [ 138.680492][ T6598] F2FS-fs (loop6): Found nat_bits in checkpoint [ 138.727762][ T6612] loop3: detected capacity change from 0 to 2048 [ 138.728809][ T6608] tipc: Started in network mode [ 138.752973][ T6598] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 138.760084][ T6598] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 138.784335][ T6612] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 138.811365][ T6608] tipc: Node identity 84e, cluster identity 4711 [ 138.837206][ T6608] tipc: Node number set to 2126 [ 138.853269][ T6619] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.578179][ T6641] loop6: detected capacity change from 0 to 256 [ 140.629847][ T6641] FAT-fs (loop6): bogus number of FAT sectors [ 140.641394][ T6641] FAT-fs (loop6): Can't find a valid FAT filesystem [ 140.648172][ T6649] netlink: 'syz.5.609': attribute type 1 has an invalid length. [ 140.704780][ T6641] overlayfs: failed to get inode (-116) [ 140.712689][ T6641] overlayfs: failed to get inode (-116) [ 140.737983][ T6649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.788245][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.797594][ T6648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.807568][ T6648] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.831388][ T6648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.852661][ T6652] bond3: (slave vlan2): Opening slave failed [ 141.513381][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.610'. [ 141.535756][ T6676] loop2: detected capacity change from 0 to 256 [ 141.816279][ T6682] netlink: 'syz.6.616': attribute type 1 has an invalid length. [ 142.850879][ T6705] tipc: Enabled bearer , priority 0 [ 142.936635][ T6702] tipc: Disabling bearer [ 143.341276][ T6725] xt_hashlimit: size too large, truncated to 1048576 [ 145.826236][ T6753] loop2: detected capacity change from 0 to 8192 [ 145.897817][ T4178] loop2: p3 p4 < > [ 145.923469][ T4178] loop2: p3 size 218103808 extends beyond EOD, truncated [ 146.002909][ T6753] loop2: p3 p4 < > [ 146.015309][ T6753] loop2: p3 size 218103808 extends beyond EOD, truncated [ 146.063567][ T6768] xt_hashlimit: max too large, truncated to 1048576 [ 146.249171][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 146.253656][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 146.315567][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.651'. [ 146.335113][ T6775] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.344015][ T6775] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.352819][ T6775] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.361545][ T6775] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.364000][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 146.387962][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 146.389956][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.651'. [ 146.578541][ T6783] netlink: 'syz.5.654': attribute type 4 has an invalid length. [ 146.606606][ T6783] netlink: 'syz.5.654': attribute type 4 has an invalid length. [ 146.991828][ T6800] loop0: detected capacity change from 0 to 256 [ 147.808901][ T6833] loop3: detected capacity change from 0 to 256 [ 148.026326][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.673'. [ 148.194812][ T6840] loop6: detected capacity change from 0 to 8 [ 148.279482][ T6840] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 148.297124][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop6 [ 148.371170][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop6 [ 148.439324][ T6840] cramfs: Error -5 while decompressing! [ 148.467904][ T6840] cramfs: ffffffff964030c2(26)->ffff88805a1fe000(4096) [ 148.501659][ T6840] cramfs: Error -3 while decompressing! [ 148.507245][ T6840] cramfs: ffffffff964030dc(16)->ffff88805a1ff000(4096) [ 148.582021][ T6840] cramfs: Error -5 while decompressing! [ 148.622090][ T6840] cramfs: ffffffff964030c2(26)->ffff88805a1fe000(4096) [ 148.627318][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 148.649449][ T26] audit: type=1800 audit(1775005350.786:53): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.675" name="file2" dev="loop6" ino=348 res=0 errno=0 [ 148.688281][ T6852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.695572][ T6852] IPv6: NLM_F_CREATE should be set when creating new route [ 148.757410][ T6858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.764687][ T6858] IPv6: NLM_F_CREATE should be set when creating new route [ 148.809285][ T6862] xt_hashlimit: size too large, truncated to 1048576 [ 148.987779][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.683'. [ 149.890896][ T6897] loop6: detected capacity change from 0 to 8192 [ 149.925741][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 149.975206][ T4178] loop6: p3 p4 < > [ 149.983481][ T6909] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.992459][ T6909] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.001410][ T6909] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.002648][ T4178] loop6: p3 size 218103808 extends beyond EOD, [ 150.010107][ T6909] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.060708][ T4178] truncated [ 150.093028][ T6897] loop6: p3 p4 < > [ 150.105295][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 150.118175][ T6897] loop6: p3 size 218103808 extends beyond EOD, truncated [ 150.495397][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 150.496340][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 150.548764][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 150.548860][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 151.559655][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 151.621140][ T6948] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.630111][ T6948] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.639062][ T6948] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.647794][ T6948] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.699361][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 151.862353][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.717'. [ 151.873464][ T6950] loop0: detected capacity change from 0 to 8192 [ 151.945650][ T6950] loop0: p3 p4 < > [ 151.962349][ T6957] netlink: 'syz.5.717': attribute type 2 has an invalid length. [ 151.962351][ T6950] loop0: p3 size 218103808 extends beyond EOD, truncated [ 152.204219][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.721'. [ 152.247268][ T6966] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.283327][ T6970] device bond4 entered promiscuous mode [ 152.449883][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 152.450357][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 152.599524][ T6982] VFS: Mount too revealing [ 153.680218][ T6993] loop6: detected capacity change from 0 to 131072 [ 153.771893][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 153.831777][ T6993] XFS: ikeep mount option is deprecated. [ 153.899966][ T7010] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.909055][ T7010] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.917806][ T7010] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.926532][ T7010] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.992030][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 154.084230][ T7006] loop3: detected capacity change from 0 to 8192 [ 154.095163][ T6993] XFS (loop6): Mounting V5 Filesystem [ 154.095985][ T7012] loop2: detected capacity change from 0 to 4096 [ 154.168228][ T4174] loop3: p3 p4 < > [ 154.172471][ T4174] loop3: p3 size 218103808 extends beyond EOD, truncated [ 154.189389][ T7006] loop3: p3 p4 < > [ 154.193574][ T7006] loop3: p3 size 218103808 extends beyond EOD, truncated [ 154.389835][ T6993] XFS (loop6): Starting recovery (logdev: internal) [ 154.421623][ T6993] XFS (loop6): Ending recovery (logdev: internal) [ 154.493808][ T7027] netlink: 'syz.0.737': attribute type 4 has an invalid length. [ 154.691296][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 154.715214][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 154.809751][ T6265] XFS (loop6): Unmounting Filesystem [ 154.811365][ T4195] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 154.824997][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 154.840637][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 154.860260][ T4195] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 155.220206][ T7043] loop3: detected capacity change from 0 to 8192 [ 155.297424][ T7043] loop3: p1 p2[DM] p4 [ 155.302345][ T7043] loop3: p1 size 196608 extends beyond EOD, truncated [ 155.349517][ T7043] loop3: p2 start 4292936063 is beyond EOD, truncated [ 155.383783][ T7043] loop3: p4 size 50331648 extends beyond EOD, truncated [ 155.521804][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 155.594714][ T7063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.732870][ T7066] device bond1 entered promiscuous mode [ 155.773145][ T7071] device bridge_slave_1 left promiscuous mode [ 155.813352][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.896607][ T7071] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 155.917941][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 155.934871][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 156.472765][ T7077] loop0: detected capacity change from 0 to 131072 [ 156.556661][ T7077] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 156.564864][ T7077] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 156.617089][ T7077] F2FS-fs (loop0): invalid crc value [ 156.670280][ T7086] PKCS8: Unsupported PKCS#8 version [ 156.702656][ T7077] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.741486][ T7077] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 156.748806][ T7077] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 156.751706][ T7083] tipc: Enabling of bearer rejected, failed to enable media [ 157.198714][ T7068] loop3: detected capacity change from 0 to 40427 [ 157.342263][ T7100] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 157.484693][ T7100] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 157.534748][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 157.611190][ T7103] device bridge_slave_1 left promiscuous mode [ 157.655510][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.733553][ T7103] device bridge_slave_0 left promiscuous mode [ 157.750072][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.799435][ T7103] bond0: (slave bridge0): Releasing backup interface [ 158.434501][ T7119] overlayfs: failed to clone upperpath [ 158.452023][ T7122] tipc: Failed to remove unknown binding: 66,1,1/0:1277021237/1277021239 [ 158.487215][ T7122] tipc: Failed to remove unknown binding: 66,1,1/0:1277021237/1277021239 [ 158.531050][ T7122] tipc: Failed to remove unknown binding: 66,1,1/0:1277021237/1277021239 [ 158.559977][ T7127] loop0: detected capacity change from 0 to 512 [ 158.587268][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.766'. [ 158.661732][ T7127] EXT4-fs (loop0): bad block size 16384 [ 158.851123][ T7139] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 158.843402][ T7140] bridge0: port 4(syz_tun) entered blocking state [ 158.918130][ T7140] bridge0: port 4(syz_tun) entered disabled state [ 158.963832][ T7140] device syz_tun entered promiscuous mode [ 158.978727][ T7140] bridge0: port 4(syz_tun) entered blocking state [ 158.985620][ T7140] bridge0: port 4(syz_tun) entered forwarding state [ 159.022857][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.317601][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.776'. [ 159.449440][ T7148] loop2: detected capacity change from 0 to 8192 [ 159.493664][ T4178] loop2: p1 p2[DM] p4 [ 159.498739][ T4178] loop2: p1 size 196608 extends beyond EOD, truncated [ 159.529716][ T4178] loop2: p2 start 4292936063 is beyond EOD, truncated [ 159.548394][ T4178] loop2: p4 size 50331648 extends beyond EOD, truncated [ 159.586013][ T7148] loop2: p1 p2[DM] p4 [ 159.598594][ T7148] loop2: p1 size 196608 extends beyond EOD, truncated [ 159.638528][ T7148] loop2: p2 start 4292936063 is beyond EOD, truncated [ 159.677900][ T7148] loop2: p4 size 50331648 extends beyond EOD, truncated [ 159.819166][ T7167] device wg1 entered promiscuous mode [ 159.914878][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 159.931514][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 160.009950][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 160.035574][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 160.111590][ T7175] loop2: detected capacity change from 0 to 256 [ 160.142505][ T7175] FAT-fs (loop2): Unrecognized mount option "showexe74" or missing value [ 160.214742][ T7175] netlink: 52 bytes leftover after parsing attributes in process `syz.2.784'. [ 160.291538][ T7179] tipc: Can't bind to reserved service type 1 [ 160.352566][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.784'. [ 160.575051][ T7181] loop6: detected capacity change from 0 to 4096 [ 160.725844][ T7185] netlink: 'syz.2.787': attribute type 4 has an invalid length. [ 160.829231][ T6265] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 160.875786][ T6265] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 161.266923][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.796'. [ 161.550781][ T7218] loop0: detected capacity change from 0 to 512 [ 161.740070][ T7229] netlink: 156 bytes leftover after parsing attributes in process `syz.0.806'. [ 161.782456][ T7229] netlink: 156 bytes leftover after parsing attributes in process `syz.0.806'. [ 161.802558][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'. [ 162.331177][ T4225] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.377805][ T7259] capability: warning: `syz.6.816' uses deprecated v2 capabilities in a way that may be insecure [ 162.902504][ T4225] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 162.972398][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.161994][ T4225] usb 3-1: Product: syz [ 163.196854][ T4225] usb 3-1: Manufacturer: syz [ 163.205999][ T4225] usb 3-1: SerialNumber: syz [ 163.217978][ T4225] usb 3-1: config 0 descriptor?? [ 163.303546][ T4225] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 163.364303][ T4225] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.481808][ T4225] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 163.515097][ T7275] block device autoloading is deprecated and will be removed. [ 163.621862][ T7278] block device autoloading is deprecated and will be removed. [ 164.190508][ T4225] usb 3-1: media controller created [ 164.207151][ T4225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.373771][ T4225] DVB: Unable to find symbol mt352_attach() [ 164.448955][ T4225] DVB: Unable to find symbol nxt6000_attach() [ 164.459336][ T4225] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 164.533709][ T4225] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 164.572552][ T4225] dvb-usb: schedule remote query interval to 1000 msecs. [ 164.608250][ T4225] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 164.635156][ T4225] dvb-usb: bulk message failed: -22 (7/0) [ 164.635679][ T7303] binder: 7302:7303 ioctl c0306201 2000000003c0 returned -14 [ 164.662850][ T4225] dvb-usb: bulk message failed: -22 (7/0) [ 164.697814][ T4225] usb 3-1: USB disconnect, device number 4 [ 164.875356][ T4225] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 166.377558][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'. [ 166.394702][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'. [ 166.531809][ T7350] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 166.693430][ T7355] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.051171][ T7] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 167.451538][ T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.485970][ T7] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.505383][ T7] usb 7-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 167.557780][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.592590][ T7] usb 7-1: config 0 descriptor?? [ 167.720229][ T7389] 9pnet: Insufficient options for proto=fd [ 168.742401][ T4507] usb 7-1: USB disconnect, device number 5 [ 169.001250][ T7407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.871'. [ 169.087037][ T7415] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.064696][ T7437] overlayfs: failed to clone upperpath [ 170.618111][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.892'. [ 170.660523][ T7450] loop2: detected capacity change from 0 to 32768 [ 170.754778][ T7450] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 170.804813][ T7450] JBD2: Ignoring recovery information on journal [ 171.049580][ T7450] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 172.358662][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 173.199196][ T7502] loop0: detected capacity change from 0 to 16 [ 173.302007][ T7502] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 174.300158][ T7528] mkiss: ax0: crc mode is auto. [ 174.405611][ T7531] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 174.414341][ T7531] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 174.893358][ T7564] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.966216][ T7567] loop6: detected capacity change from 0 to 128 [ 175.355023][ T7575] device bridge0 entered promiscuous mode [ 175.372793][ T7579] overlayfs: failed to resolve './file1': -2 [ 175.537684][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'. [ 175.661319][ T4225] Bluetooth: hci2: command 0x0406 tx timeout [ 175.661650][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 175.668237][ T4225] Bluetooth: hci4: command 0x0406 tx timeout [ 176.241625][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.951'. [ 176.641920][ T7631] device bond1 entered promiscuous mode [ 176.811229][ T9] bond0: (slave bond_slave_0): interface is now down [ 176.842489][ T9] bond0: (slave bond_slave_1): interface is now down [ 176.872619][ T7642] bond0: ARP monitoring cannot be used with MII monitoring [ 176.923442][ T5518] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 176.971355][ T5518] bond0: now running without any active interface! [ 176.998916][ T7648] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 177.011656][ T5518] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 177.341181][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 177.591072][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 177.721386][ T7] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 177.729521][ T7] usb 1-1: config 0 has no interface number 0 [ 177.772507][ T7] usb 1-1: config 0 interface 12 has no altsetting 0 [ 178.223336][ T7673] loop2: detected capacity change from 0 to 40427 [ 178.265629][ T7673] F2FS-fs (loop2): inline encryption not supported [ 178.274739][ T7] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 178.274779][ T7673] F2FS-fs (loop2): invalid crc value [ 178.289901][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.299690][ T7] usb 1-1: Product: syz [ 178.307335][ T7673] F2FS-fs (loop2): Found nat_bits in checkpoint [ 178.340576][ T7] usb 1-1: Manufacturer: syz [ 178.352637][ T7673] F2FS-fs (loop2): Start checkpoint disabled! [ 178.367630][ T7673] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 178.379233][ T7] usb 1-1: SerialNumber: syz [ 178.387943][ T7] usb 1-1: config 0 descriptor?? [ 178.409859][ T7673] attempt to access beyond end of device [ 178.409859][ T7673] loop2: rw=2049, want=53384, limit=40427 [ 178.477627][ T7677] attempt to access beyond end of device [ 178.477627][ T7677] loop2: rw=524288, want=53384, limit=40427 [ 178.557050][ T7677] attempt to access beyond end of device [ 178.557050][ T7677] loop2: rw=0, want=53256, limit=40427 [ 178.577260][ T7677] attempt to access beyond end of device [ 178.577260][ T7677] loop2: rw=0, want=53256, limit=40427 [ 178.606785][ T7677] attempt to access beyond end of device [ 178.606785][ T7677] loop2: rw=0, want=53256, limit=40427 [ 178.659327][ T7677] attempt to access beyond end of device [ 178.659327][ T7677] loop2: rw=0, want=53256, limit=40427 [ 178.659576][ T7691] netlink: 28 bytes leftover after parsing attributes in process `syz.6.978'. [ 178.702293][ T7677] attempt to access beyond end of device [ 178.702293][ T7677] loop2: rw=0, want=53256, limit=40427 [ 178.723967][ T7677] attempt to access beyond end of device [ 178.723967][ T7677] loop2: rw=0, want=53256, limit=40427 [ 178.938712][ T1152] attempt to access beyond end of device [ 178.938712][ T1152] loop2: rw=2049, want=40992, limit=40427 [ 179.527394][ T7700] netlink: 'syz.2.982': attribute type 4 has an invalid length. [ 179.959672][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 180.166547][ T7727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.989'. [ 180.584736][ T7741] overlayfs: failed to clone upperpath [ 180.891286][ T7] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 180.908208][ T7] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 180.920295][ T7] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 180.932655][ T7] f81534: probe of 1-1:0.12 failed with error -71 [ 180.964827][ T7] usb 1-1: USB disconnect, device number 14 [ 181.206366][ T7752] +y€Î—¤3yš¥äCiIo_ ´O*ê3Æß=À]ÞÏœ•¤wHz«ˆŽ¹¿dŠ©^o 7©Ùñÿë7ðÁ¡:O7Öß <q…uù½²'ª“E±œ [ 181.667288][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 181.971150][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 182.121445][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.141070][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.161017][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.191033][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 182.208873][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.239600][ T7] usb 3-1: config 0 descriptor?? [ 183.693995][ T7] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 183.719635][ T7] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 183.746005][ T7] microsoft 0003:045E:07DA.0005: no inputs found [ 183.771181][ T7] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 183.793303][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1023'. [ 183.821582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.896824][ T4507] usb 3-1: USB disconnect, device number 5 [ 183.938555][ T7825] fido_id[7825]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/report_descriptor': No such device [ 185.220969][ C1] sched: RT throttling activated [ 185.492884][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 185.664958][ T7853] ptrace attach of "./syz-executor exec"[4196] was attempted by "\x0a Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ @ ÿÿÿÿÿÿÿÿ ß#   ¥   ÀH  k  ÿÿÿÿ [ 185.712648][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1035'. [ 185.996725][ T7862] sctp: [Deprecated]: syz.2.1041 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.996725][ T7862] Use struct sctp_sack_info instead [ 186.512106][ T7877] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 186.554318][ T7877] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 186.926693][ T7899] loop6: detected capacity change from 0 to 512 [ 187.055536][ T7899] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 187.229809][ T7899] EXT4-fs (loop6): 1 truncate cleaned up [ 187.240507][ T7899] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,nodiscard,,errors=continue. Quota mode: none. [ 187.343662][ T26] audit: type=1800 audit(1775005389.486:54): pid=7899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1055" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 187.811854][ T4227] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 188.051089][ T4227] usb 7-1: Using ep0 maxpacket: 32 [ 188.224531][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 188.248089][ T7934] bridge0: port 4(syz_tun) entered disabled state [ 188.271951][ T7934] device syz_tun left promiscuous mode [ 188.277620][ T7934] bridge0: port 4(syz_tun) entered disabled state [ 188.297813][ T7937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1068'. [ 188.341443][ T4227] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 188.350522][ T4227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.386391][ T4227] usb 7-1: Product: syz [ 188.390859][ T4227] usb 7-1: Manufacturer: syz [ 188.421153][ T4227] usb 7-1: SerialNumber: syz [ 188.431963][ T4227] usb 7-1: config 0 descriptor?? [ 188.483082][ T4227] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 189.180320][ T26] audit: type=1326 audit(1775005391.316:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.3.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506d084819 code=0x7ffc0000 [ 189.209605][ T26] audit: type=1326 audit(1775005391.316:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.3.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f506d084819 code=0x7ffc0000 [ 189.248099][ T26] audit: type=1326 audit(1775005391.316:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.3.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506d084819 code=0x7ffc0000 [ 189.277697][ T26] audit: type=1326 audit(1775005391.316:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.3.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f506d084819 code=0x7ffc0000 [ 189.307003][ T26] audit: type=1326 audit(1775005391.316:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.3.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506d084819 code=0x7ffc0000 [ 189.336874][ T26] audit: type=1326 audit(1775005391.316:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.3.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f506d084819 code=0x7ffc0000 [ 189.367342][ T26] audit: type=1326 audit(1775005391.316:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.3.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506d084819 code=0x7ffc0000 [ 189.402132][ T7962] fuse: Bad value for 'fd' [ 189.406517][ T26] audit: type=1326 audit(1775005391.316:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.3.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f506d084819 code=0x7ffc0000 [ 189.472506][ T26] audit: type=1326 audit(1775005391.316:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.3.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506d084819 code=0x7ffc0000 [ 189.879969][ T7981] x_tables: duplicate underflow at hook 3 [ 190.340883][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060503800: rx timeout, send abort [ 190.741798][ T4227] gspca_ov534_9: reg_r err -71 [ 190.840930][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880204a0000: rx timeout, send abort [ 191.061075][ T4227] gspca_ov534_9: Unknown sensor 0000 [ 191.061472][ T4227] ov534_9: probe of 7-1:0.0 failed with error -22 [ 191.180538][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060503800: abort rx timeout. Force session deactivation [ 191.193099][ T1324] Bluetooth: hci1: command 0x0406 tx timeout [ 191.250307][ T4227] usb 7-1: USB disconnect, device number 6 [ 191.349183][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880204a0000: abort rx timeout. Force session deactivation [ 191.421300][ T8008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1096'. [ 191.430343][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 191.845414][ T8030] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 191.913803][ T8030] device bond2 entered promiscuous mode [ 191.928263][ T8030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.962988][ T8030] device veth3 entered promiscuous mode [ 192.032903][ T8030] bond2: (slave veth3): making interface the new active one [ 192.086728][ T8030] bond2: (slave veth3): Enslaving as an active interface with an up link [ 192.148031][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 192.177588][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1105'. [ 192.677191][ T8059] netlink: 'syz.2.1114': attribute type 10 has an invalid length. [ 192.708051][ T8061] overlayfs: failed to clone upperpath [ 192.767511][ T8059] device dummy0 entered promiscuous mode [ 192.785368][ T8059] team0: Port device dummy0 added [ 192.800239][ T8063] netlink: 'syz.2.1114': attribute type 10 has an invalid length. [ 192.839536][ T8063] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 192.865997][ T8063] device dummy0 left promiscuous mode [ 192.895036][ T8063] team0: Failed to send options change via netlink (err -105) [ 192.903065][ T8063] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 192.914170][ T8063] team0: Port device dummy0 removed [ 192.923433][ T8063] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 192.938989][ T8068] netlink: 'syz.3.1117': attribute type 4 has an invalid length. [ 192.976920][ T8068] netlink: 'syz.3.1117': attribute type 4 has an invalid length. [ 193.551535][ T8092] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 193.706928][ T8093] bond2: (slave geneve2): Error -99 calling set_mac_address [ 194.071341][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.077662][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.360344][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'. [ 195.039642][ T8128] netlink: 'syz.6.1139': attribute type 10 has an invalid length. [ 195.099410][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.106897][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.181088][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1139'. [ 195.190017][ T8129] device bridge_slave_1 left promiscuous mode [ 195.231326][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.300374][ T8129] device bridge_slave_0 left promiscuous mode [ 195.320223][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.419280][ T8158] IPv6: NLM_F_REPLACE set, but no existing node found! [ 196.843890][ T8152] loop2: detected capacity change from 0 to 32768 [ 196.941948][ T8152] loop2: p1 p3 < p5 p6 > [ 197.163195][ T8193] PKCS8: Unsupported PKCS#8 version [ 197.273792][ T8195] device bpq0 left promiscuous mode [ 197.286655][ T8195] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 197.455354][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 197.463651][ T5020] udevd[5020]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 197.478741][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 197.502866][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 198.193146][ T8226] loop2: detected capacity change from 0 to 1024 [ 198.275716][ T8226] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 198.341210][ T8226] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 198.395518][ T8226] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1175'. [ 199.417117][ T8244] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 199.596902][ T8244] infiniband syz1: set down [ 199.637153][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.644968][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.545206][ T8268] loop6: detected capacity change from 0 to 1024 [ 200.619428][ T8268] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.860044][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.873472][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.127501][ T8286] tipc: Failed to remove unknown binding: 66,1,1/0:1425853934/1425853936 [ 201.137584][ T8286] tipc: Failed to remove unknown binding: 66,1,1/0:1425853934/1425853936 [ 201.327047][ T8244] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.336053][ T8244] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.345929][ T8244] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.354895][ T8244] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.452870][ T8244] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.461827][ T8244] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.470683][ T8244] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.479694][ T8244] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.499121][ T8244] device bond1 left promiscuous mode [ 201.660675][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1199'. [ 202.845407][ T8306] netlink: 'syz.5.1201': attribute type 10 has an invalid length. [ 202.948159][ T8306] device dummy0 entered promiscuous mode [ 202.979241][ T8306] team0: Port device dummy0 added [ 202.999218][ T8307] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 203.078474][ T8309] netlink: 'syz.5.1201': attribute type 10 has an invalid length. [ 203.125405][ T8309] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 203.136991][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1204'. [ 203.158109][ T8309] device dummy0 left promiscuous mode [ 203.168197][ T8309] team0: Failed to send options change via netlink (err -105) [ 203.176435][ T8309] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 203.205212][ T8309] team0: Port device dummy0 removed [ 203.238606][ T8309] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 203.406652][ T8330] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1211'. [ 203.481235][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1211'. [ 203.597079][ T8336] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1210'. [ 204.098835][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 204.642021][ T8354] netlink: 'syz.0.1218': attribute type 1 has an invalid length. [ 205.213987][ T8354] device bond3 entered promiscuous mode [ 205.256982][ T8354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.449500][ T8364] device veth3 entered promiscuous mode [ 205.592171][ T8381] netlink: 'syz.2.1239': attribute type 1 has an invalid length. [ 205.766094][ T8381] device bond2 entered promiscuous mode [ 205.791313][ T8381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.879532][ T8388] device veth3 entered promiscuous mode [ 205.936089][ T8388] bond2: (slave veth3): making interface the new active one [ 205.953232][ T8388] bond2: (slave veth3): Enslaving as an active interface with an up link [ 205.976414][ T8393] netlink: 'syz.3.1232': attribute type 10 has an invalid length. [ 205.991205][ T8393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1232'. [ 206.013430][ T8393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.047776][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'. [ 206.049743][ T8393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.091105][ T8393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.099834][ T8393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.168782][ T8393] team0: Port device geneve0 added [ 206.206000][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 206.500692][ T8415] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 206.500692][ T8415] Q&|xùX [ 207.550857][ T8436] device wg1 left promiscuous mode [ 207.565997][ T8436] device bond1 left promiscuous mode [ 207.575029][ T8436] device bond2 left promiscuous mode [ 207.584872][ T8436] device veth3 left promiscuous mode [ 208.330043][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1250'. [ 210.173811][ T8488] device bond3 left promiscuous mode [ 210.182150][ T8488] device veth3 left promiscuous mode [ 211.031225][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 211.096515][ T8494] tipc: Started in network mode [ 211.103328][ T8494] tipc: Node identity 4246, cluster identity 4711 [ 211.120460][ T8494] tipc: Node number set to 16966 [ 211.296144][ T8513] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1275'. [ 211.409965][ T8520] loop5: detected capacity change from 0 to 7 [ 211.439249][ T8520] Dev loop5: unable to read RDB block 7 [ 211.460299][ T8520] loop5: unable to read partition table [ 211.466529][ T7] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.484743][ T7] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.497331][ T8520] loop5: partition table beyond EOD, truncated [ 211.508290][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.519839][ T8520] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 211.535800][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.568353][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 211.586628][ T8486] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.683335][ T8539] device bpq0 entered promiscuous mode [ 211.695475][ T8539] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 211.861723][ T4225] usb 3-1: USB disconnect, device number 6 [ 211.915440][ T8553] syz.5.1285 sent an empty control message without MSG_MORE. [ 211.997345][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'. [ 212.206404][ T8563] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.375265][ T8573] fuse: root generation should be zero [ 213.506213][ T8586] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 214.584966][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 214.584979][ T26] audit: type=1326 audit(1775005416.726:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.2.1304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd385390819 code=0x0 [ 215.703852][ T26] audit: type=1326 audit(1775005417.846:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.6.1309" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55f4c84819 code=0x0 [ 216.265323][ T8624] overlayfs: failed to clone upperpath [ 217.696484][ T8662] overlayfs: failed to clone upperpath [ 217.828459][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1332'. [ 218.896371][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1335'. [ 218.949610][ T8688] device vlan2 entered promiscuous mode [ 219.001910][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 219.067744][ T8693] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1338'. [ 219.105866][ T8695] netlink: 'syz.3.1339': attribute type 15 has an invalid length. [ 219.114582][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1339'. [ 219.127829][ T8695] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 219.136651][ T8695] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 219.145415][ T8695] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 219.154161][ T8695] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 219.199451][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1338'. [ 219.731193][ T8695] netlink: 'syz.3.1339': attribute type 15 has an invalid length. [ 219.751271][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1339'. [ 219.865315][ T8709] netlink: 16158 bytes leftover after parsing attributes in process `syz.6.1343'. [ 222.504913][ T8739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1350'. [ 222.509575][ T8735] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1351'. [ 222.558701][ T8739] device ip6gre1 entered promiscuous mode [ 222.620738][ T8743] netlink: 'syz.0.1350': attribute type 6 has an invalid length. [ 222.867055][ T8754] loop0: detected capacity change from 0 to 128 [ 223.080609][ T8760] overlayfs: statfs failed on './file0' [ 224.153085][ T8777] __nla_validate_parse: 1 callbacks suppressed [ 224.153098][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'. [ 224.370930][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1353'. [ 224.708115][ T26] audit: type=1804 audit(1775005426.846:77): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1368" name="bus" dev="ramfs" ino=51285 res=1 errno=0 [ 224.793237][ T26] audit: type=1804 audit(1775005426.876:78): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1368" name="bus" dev="ramfs" ino=51285 res=1 errno=0 [ 225.542580][ T8807] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.583511][ T8807] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.621127][ T8807] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.673352][ T8807] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.879393][ T8807] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.888545][ T8807] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.897663][ T8807] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.906678][ T8807] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.011194][ T8813] netlink: 'syz.6.1376': attribute type 1 has an invalid length. [ 226.134981][ T8814] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 226.146355][ T8814] bond1: (slave vxcan1): Error -22 calling dev_set_mtu [ 226.174578][ T8815] device macvlan2 entered promiscuous mode [ 226.180770][ T8815] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 227.399403][ T8830] loop2: detected capacity change from 0 to 64 [ 227.603161][ T8838] device bridge8 entered promiscuous mode [ 227.863177][ T8853] sctp: [Deprecated]: syz.6.1390 (pid 8853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.863177][ T8853] Use struct sctp_sack_info instead [ 228.089862][ T8864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1398'. [ 228.418606][ T8879] netlink: 'syz.3.1404': attribute type 1 has an invalid length. [ 228.452823][ T8879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.496976][ T8879] bond3: (slave gretap2): making interface the new active one [ 228.514103][ T8879] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 228.525884][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 228.539441][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 228.942127][ T8893] loop2: detected capacity change from 0 to 32768 [ 228.983485][ T8893] XFS: attr2 mount option is deprecated. [ 229.101610][ T8893] XFS (loop2): Mounting V5 Filesystem [ 229.226348][ T8893] XFS (loop2): Ending clean mount [ 229.339212][ T8893] XFS (loop2): Quotacheck needed: Please wait. [ 229.355014][ T8924] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1416'. [ 229.518380][ T8893] XFS (loop2): Quotacheck: Done. [ 229.749563][ T8932] device vlan3 entered promiscuous mode [ 229.797210][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'. [ 229.822010][ T4195] XFS (loop2): Unmounting Filesystem [ 229.871185][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 230.241245][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.271117][ T7] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 230.300942][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.318614][ T7] usb 1-1: config 0 descriptor?? [ 230.373437][ T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 230.576183][ T8929] udc-core: couldn't find an available UDC or it's busy [ 230.607986][ T8929] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.630931][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1427'. [ 230.650211][ T7] usb 1-1: USB disconnect, device number 15 [ 230.680760][ T8950] bond0: (slave bond_slave_1): Releasing backup interface [ 231.982536][ T8983] device vlan2 entered promiscuous mode [ 232.008401][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'. [ 232.110456][ T8989] device bond4 left promiscuous mode [ 232.207393][ T4507] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 232.481215][ T4507] usb 1-1: Using ep0 maxpacket: 8 [ 232.627710][ T4507] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 232.648062][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 232.671905][ T4507] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 232.680518][ T4507] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 232.695183][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 232.711454][ T4507] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 232.746218][ T4507] usb 1-1: config 250 has no interface number 0 [ 232.753157][ T4507] usb 1-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 232.873032][ T4507] usb 1-1: config 250 interface 228 has no altsetting 0 [ 232.911187][ T8995] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.921256][ T8995] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 232.931667][ T8995] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.950648][ T8998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.141680][ T4507] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 233.175208][ T4507] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 233.247625][ T4507] usb 1-1: Product: syz [ 233.283648][ T4507] usb 1-1: SerialNumber: syz [ 233.449686][ T4507] hub 1-1:250.228: bad descriptor, ignoring hub [ 233.500266][ T4507] hub: probe of 1-1:250.228 failed with error -5 [ 233.754510][ T8998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.800134][ T9007] batadv1: mtu greater than device maximum [ 233.840853][ T8998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.023444][ T4507] usb 1-1: USB disconnect, device number 16 [ 234.055740][ T8998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.116226][ T9020] Cannot find del_set index 2 as target [ 235.145287][ T9018] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000007 [ 235.150728][ T8998] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.217401][ T8998] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.234426][ T8998] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.269118][ T8998] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.109244][ T9029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.162230][ T9029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.574286][ T9029] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.588403][ T9029] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.608070][ T9029] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.631096][ T9029] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.826667][ T9029] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.835745][ T9029] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.844667][ T9029] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.853696][ T9029] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.028814][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1457'. [ 238.371668][ T9076] loop0: detected capacity change from 0 to 1024 [ 238.798248][ T9089] x_tables: unsorted underflow at hook 2 [ 238.804925][ T9076] bridge0: port 3(syz_tun) entered blocking state [ 238.826542][ T9076] bridge0: port 3(syz_tun) entered disabled state [ 238.867875][ T9076] rdma_rxe: ignoring netdev event = 20 for syz_tun [ 238.920443][ T9076] rdma_rxe: ignoring netdev event = 26 for syz_tun [ 239.008199][ T9076] rdma_rxe: ignoring netdev event = 21 for syz_tun [ 239.045386][ T9076] device syz_tun entered promiscuous mode [ 239.073151][ T9091] device syz_tun left promiscuous mode [ 239.150858][ T9091] bridge0: port 3(syz_tun) entered disabled state [ 239.737086][ T9091] rdma_rxe: ignoring netdev event = 26 for syz_tun [ 239.757032][ T9091] rdma_rxe: ignoring netdev event = 21 for syz_tun [ 239.789539][ T9091] team0: Port device dummy0 removed [ 239.801961][ T9091] device bridge_slave_0 left promiscuous mode [ 239.808286][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.848538][ T9091] device bridge_slave_1 left promiscuous mode [ 239.867599][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.895979][ T9091] bond0: (slave bond_slave_0): Releasing backup interface [ 239.915928][ T9091] bond0: (slave bond_slave_1): Releasing backup interface [ 239.942608][ T9091] team0: Port device team_slave_0 removed [ 239.960332][ T9091] team0: Port device team_slave_1 removed [ 239.974528][ T9091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.991995][ T9091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.338929][ T9109] 9pnet: Insufficient options for proto=fd [ 240.739665][ T9117] binder: BINDER_SET_CONTEXT_MGR already set [ 240.761130][ T9117] binder: 9115:9117 ioctl 4018620d 200000000100 returned -16 [ 240.910177][ T9117] binder: BINDER_SET_CONTEXT_MGR already set [ 240.981856][ T9117] binder: 9115:9117 ioctl 4018620d 200000004a80 returned -16 [ 242.029032][ T9126] netlink: 'syz.6.1490': attribute type 1 has an invalid length. [ 242.119099][ T9138] loop2: detected capacity change from 0 to 1024 [ 242.177125][ T9126] device bond2 entered promiscuous mode [ 242.253516][ T9126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.356643][ T9141] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.372348][ T9141] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 242.392852][ T9141] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 242.413918][ T9141] bond2: (slave ip6gre1): making interface the new active one [ 242.427115][ T9141] device ip6gre1 entered promiscuous mode [ 242.441819][ T9141] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 242.458649][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 242.479291][ T9147] device team0 left promiscuous mode [ 242.500386][ T9147] device team_slave_0 left promiscuous mode [ 242.528111][ T9147] device team_slave_1 left promiscuous mode [ 242.541471][ T9147] bridge0: port 3(team0) entered disabled state [ 242.588003][ T9147] bond0: (slave dummy0): Releasing backup interface [ 242.633356][ T9147] device bridge_slave_0 left promiscuous mode [ 242.656287][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.689468][ T9147] device bridge_slave_1 left promiscuous mode [ 242.708081][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.737342][ T9147] bond0: (slave bond_slave_0): Releasing backup interface [ 242.769427][ T9147] bond0: (slave bond_slave_1): Releasing backup interface [ 242.807052][ T9147] team0: Port device team_slave_0 removed [ 242.840935][ T9147] team0: Port device team_slave_1 removed [ 242.868653][ T9147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.898631][ T9147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.971647][ T9147] bond2: (slave veth3): Releasing backup interface [ 243.305962][ T9173] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1505'. [ 243.792477][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.879542][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.958006][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.869636][ T9222] loop6: detected capacity change from 0 to 512 [ 244.977918][ T9222] FAT-fs (loop6): Unrecognized mount option "noots" or missing value [ 245.053834][ T9228] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 246.629749][ T9250] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.693821][ T9250] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.721152][ T9250] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.914864][ T9250] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.923904][ T9250] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.932980][ T9250] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.872491][ T9250] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 247.881592][ T9250] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 247.890476][ T9250] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 252.090741][ T9344] device team0 left promiscuous mode [ 252.171138][ T9344] device team_slave_0 left promiscuous mode [ 252.177237][ T9344] device team_slave_1 left promiscuous mode [ 252.197184][ T9348] loop6: detected capacity change from 0 to 1024 [ 252.221670][ T9344] bridge0: port 3(team0) entered disabled state [ 252.230232][ T9344] bond0: (slave dummy0): Releasing backup interface [ 252.259017][ T9344] device bridge_slave_0 left promiscuous mode [ 252.288835][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.319321][ T9344] bond0: (slave bond_slave_0): Releasing backup interface [ 252.343002][ T9348] hfsplus: invalid btree flag [ 252.348383][ T9348] hfsplus: failed to load extents file [ 252.382047][ T9344] team0: Failed to send options change via netlink (err -105) [ 252.398926][ T9344] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 252.413490][ T9344] team0: Port device team_slave_0 removed [ 252.432714][ T9344] team0: Failed to send options change via netlink (err -105) [ 252.441342][ T9344] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 252.458694][ T9344] team0: Port device team_slave_1 removed [ 252.468774][ T9344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.488134][ T9344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.515183][ T9344] bond1: (slave geneve2): Releasing active interface [ 252.528110][ T9344] bond2: (slave gretap1): Releasing active interface [ 252.557363][ T9350] team0: Failed to send options change via netlink (err -105) [ 252.574617][ T9350] team0: Mode changed to "loadbalance" [ 252.831262][ T26] audit: type=1326 audit(1775005454.946:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9365 comm="syz.6.1566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55f4c84819 code=0x0 [ 253.687704][ T9380] netlink: 'syz.3.1570': attribute type 10 has an invalid length. [ 253.766702][ T9380] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 253.781672][ T9382] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1571'. [ 254.199110][ T4766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.208117][ T4766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.316625][ T9400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.836448][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.843285][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.480550][ T9438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1599'. [ 257.565486][ T9445] syz.5.1591 (9445): attempted to duplicate a private mapping with mremap. This is not supported. [ 257.729540][ T9451] tipc: Failed to remove unknown binding: 66,0,0/2126:3208601285/3208601287 [ 257.738390][ T9450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.926262][ T9450] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 257.958895][ T9450] bond3: (slave macvlan2): making interface the new active one [ 257.961894][ T9451] tipc: Failed to remove unknown binding: 66,0,0/2126:3208601285/3208601286 [ 257.986527][ T9455] tipc: Failed to remove unknown binding: 66,0,0/2126:3208601285/3208601287 [ 258.001330][ T9450] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 258.033682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 258.041253][ T9455] tipc: Failed to remove unknown binding: 66,0,0/2126:3208601285/3208601286 [ 258.835547][ T9491] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 260.178045][ T9503] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer. [ 260.239624][ T9508] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer. [ 260.538361][ T9513] loop6: detected capacity change from 0 to 512 [ 260.588605][ T9513] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 260.675361][ T9513] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 260.711401][ T9513] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.935405][ T6265] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 260.958729][ T9524] loop0: detected capacity change from 0 to 64 [ 260.987537][ T6265] EXT4-fs (loop6): Remounting filesystem read-only [ 261.000554][ T6265] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 261.121142][ T6265] EXT4-fs (loop6): Remounting filesystem read-only [ 262.152256][ T9532] loop0: detected capacity change from 0 to 64 [ 262.299977][ T4191] block nbd0: Receive control failed (result -107) [ 262.372341][ T4174] block nbd0: shutting down sockets [ 265.067323][ T9556] IPVS: length: 528 != 8 [ 265.128036][ T9563] loop0: detected capacity change from 0 to 4096 [ 265.347383][ T9566] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.623748][ T9572] netlink: 'syz.5.1634': attribute type 1 has an invalid length. [ 265.717258][ T9572] bond5: (slave gretap2): making interface the new active one [ 265.725844][ T9572] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 265.891028][ T9572] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 266.043005][ T9581] team0: Port device team_slave_0 removed [ 266.202884][ T9567] chnl_net:caif_netlink_parms(): no params data found [ 266.243911][ T9594] tipc: Enabling of bearer rejected, failed to enable media [ 266.421935][ T9567] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.451736][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.480087][ T9567] device bridge_slave_0 entered promiscuous mode [ 266.504166][ T9567] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.512490][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.521030][ T9567] device bridge_slave_1 entered promiscuous mode [ 266.608307][ T9567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.653444][ T9567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.782153][ T9567] team0: Port device team_slave_0 added [ 266.835108][ T9567] team0: Port device team_slave_1 added [ 266.897913][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.925924][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.998345][ T9567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.066744][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.092846][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.184969][ T9567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.315455][ T9567] device hsr_slave_0 entered promiscuous mode [ 267.350833][ T9567] device hsr_slave_1 entered promiscuous mode [ 267.372748][ T9567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.380340][ T9567] Cannot create hsr debugfs directory [ 267.511284][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 267.597895][ T9625] netlink: 'syz.0.1650': attribute type 4 has an invalid length. [ 267.769780][ T9567] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 267.797621][ T9567] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 267.831216][ T9567] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 267.866476][ T9567] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 268.078918][ T9567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.186544][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.197036][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.932665][ T9567] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.033491][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.078410][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.113835][ T5518] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.121178][ T5518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.159350][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.203299][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.264990][ T5518] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.272260][ T5518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.343982][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.384507][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.410791][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.474017][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.534209][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.562641][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.576733][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.595206][ T1324] Bluetooth: hci0: command 0x041b tx timeout [ 269.616288][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.657660][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.747146][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.041060][ T9662] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 270.069163][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.095504][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.148304][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.285206][ T9666] netlink: 'syz.0.1672': attribute type 10 has an invalid length. [ 270.379864][ T9666] team0: Port device wlan1 added [ 270.778186][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.790546][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.817955][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1667'. [ 270.890394][ T9567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.448660][ T9567] device veth0_vlan entered promiscuous mode [ 271.510697][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.539313][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.557192][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.618076][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.648336][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.681429][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 271.690111][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.709491][ T9567] device veth1_vlan entered promiscuous mode [ 271.828746][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.841617][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 271.850051][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.883211][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.903852][ T4765] tipc: Left network mode [ 271.909512][ T9710] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1676'. [ 271.954597][ T9567] device veth0_macvtap entered promiscuous mode [ 271.976752][ T9567] device veth1_macvtap entered promiscuous mode [ 272.139795][ T4765] bond2: (slave ip6gre1): Releasing backup interface [ 272.160013][ T4765] device ip6gre1 left promiscuous mode [ 272.192992][ T4765] bond2: Destroying bond [ 272.242596][ T4765] bond2 (unregistering): Released all slaves [ 272.300572][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.339586][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.382639][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.411703][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.420756][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.453286][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.495299][ T9744] 9pnet: Insufficient options for proto=fd [ 272.514146][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.553741][ T9748] netlink: 'syz.5.1685': attribute type 4 has an invalid length. [ 272.605117][ T9744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.660619][ T9745] netlink: 'syz.5.1685': attribute type 4 has an invalid length. [ 272.683517][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.701410][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.722586][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.731346][ T9751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1686'. [ 272.779169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.821852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.862913][ T9567] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.878745][ T9567] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.889423][ T9567] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.898694][ T9567] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.968360][ T9757] batman_adv: batadv0: Adding interface: dummy0 [ 272.993955][ T9757] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.037226][ T9757] batman_adv: batadv0: Interface activated: dummy0 [ 273.089449][ T9765] netlink: 'syz.5.1688': attribute type 1 has an invalid length. [ 273.168410][ T9765] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.201453][ T9767] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 273.218315][ T9760] batadv0: mtu less than device minimum [ 273.247980][ T9760] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.261425][ T9760] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.273892][ T9760] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.286383][ T9760] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.298786][ T9760] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.311392][ T9760] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.323824][ T9760] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.336341][ T9760] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.410478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 273.500801][ T9779] tipc: Enabled bearer , priority 10 [ 273.569109][ T26] audit: type=1326 audit(1775005475.706:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.2.1694" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd385390819 code=0x0 [ 273.612396][ T4766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.651788][ T4766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.669501][ T26] audit: type=1326 audit(1775005475.776:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.2.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd385390819 code=0x7ffc0000 [ 273.741497][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 273.761272][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.767906][ T26] audit: type=1326 audit(1775005475.776:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.2.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd385390819 code=0x7ffc0000 [ 273.811585][ T26] audit: type=1326 audit(1775005475.776:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.2.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd385390819 code=0x7ffc0000 [ 273.821925][ T5525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.889266][ T26] audit: type=1326 audit(1775005475.776:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.2.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd385390819 code=0x7ffc0000 [ 273.914713][ T5525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.952544][ T26] audit: type=1326 audit(1775005475.776:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.2.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd385390819 code=0x7ffc0000 [ 273.978664][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.031440][ T26] audit: type=1326 audit(1775005475.776:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.2.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd385390819 code=0x7ffc0000 [ 274.105187][ T26] audit: type=1326 audit(1775005475.776:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.2.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd385390819 code=0x7ffc0000 [ 274.146870][ T26] audit: type=1326 audit(1775005475.776:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.2.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd385390819 code=0x7ffc0000 [ 274.190705][ T9811] netlink: 'syz.5.1711': attribute type 12 has an invalid length. [ 274.208035][ T26] audit: type=1326 audit(1775005475.786:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.2.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd385390819 code=0x7ffc0000 [ 274.789964][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.797382][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.165743][ T9820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.202442][ T9820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.513813][ T9820] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.523252][ T9820] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.532608][ T9820] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.541732][ T9820] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.172271][ T9870] device batadv_slave_0 entered promiscuous mode [ 277.568401][ T9882] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1725'. [ 278.231931][ T4765] device hsr_slave_0 left promiscuous mode [ 278.247782][ T4765] device hsr_slave_1 left promiscuous mode [ 278.302178][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.388644][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.426390][ T4765] bond1 (unregistering): Released all slaves [ 278.884062][ T9887] loop2: detected capacity change from 0 to 32768 [ 278.939296][ T4765] team0 (unregistering): Port device team_slave_1 removed [ 278.989146][ T4765] team0 (unregistering): Port device team_slave_0 removed [ 279.007881][ T4765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.031861][ T9887] XFS (loop2): Mounting V5 Filesystem [ 279.082209][ T4765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.211403][ T9887] XFS (loop2): Starting recovery (logdev: internal) [ 279.250887][ T21] XFS (loop2): Metadata corruption detected at xfs_buf_ioend+0x25c/0x6e0, xfs_inode block 0x3000 xfs_inode_buf_verify [ 279.266453][ T21] XFS (loop2): Unmount and run xfs_repair [ 279.272414][ T21] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 279.280722][ T21] 00000000: 49 4e 00 00 01 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 279.289847][ T21] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 279.299146][ T21] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 279.308170][ T21] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 279.318264][ T21] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 279.327474][ T21] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 279.336607][ T21] 00000060: ff ff ff ff f6 f6 bd 08 00 00 00 00 00 00 00 00 ................ [ 279.345736][ T21] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 279.357396][ T9887] XFS (loop2): metadata I/O error in "xlog_recover_items_pass2+0xe3/0x130" at daddr 0x3000 len 64 error 117 [ 279.372642][ T9887] XFS (loop2): log mount/recovery failed: error -117 [ 279.429294][ T4765] bond0 (unregistering): Released all slaves [ 279.431436][ T9887] XFS (loop2): log mount failed [ 280.225168][ T9951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1741'. [ 280.247900][ T9951] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 280.321290][ T7] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 280.331525][ T9958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1741'. [ 280.342494][ T9958] bond5: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 280.591081][ T7] usb 8-1: Using ep0 maxpacket: 32 [ 280.740171][ T9979] autofs4:pid:9979:autofs_fill_super: called with bogus options [ 281.356976][ T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.367181][ T7] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.376386][ T7] usb 8-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 281.385517][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.453304][ T7] usb 8-1: config 0 descriptor?? [ 281.833862][ T4274] usb 8-1: USB disconnect, device number 2 [ 282.514070][T10033] autofs4:pid:10033:autofs_fill_super: called with bogus options [ 283.779204][T10053] netlink: 'syz.2.1765': attribute type 10 has an invalid length. [ 284.211607][T10068] loop7: detected capacity change from 0 to 16 [ 284.270423][T10068] erofs: (device loop7): mounted with root inode @ nid 36. [ 287.115962][T10089] ODEBUG: Out of memory. ODEBUG disabled [ 287.408233][T10111] loop7: detected capacity change from 0 to 256 [ 289.419918][T10137] device syzkaller0 entered promiscuous mode [ 292.647535][T10162] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1791'. [ 292.719039][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 292.772275][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 292.801906][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 294.103839][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 294.341444][ T4766] smc: removing ib device syz1 [ 296.665424][T10273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1821'. [ 297.563272][T10281] syz.7.1822 (10281) used greatest stack depth: 18096 bytes left [ 297.807602][T10292] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 298.211582][ T4173] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 298.611576][ T4173] usb 8-1: config 0 has no interfaces? [ 298.814793][ T4173] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 298.850888][T10347] device bond2 left promiscuous mode [ 298.857241][ T4173] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.865936][T10347] device veth3 left promiscuous mode [ 298.887542][ T4173] usb 8-1: Product: syz [ 298.893513][T10347] device bridge8 left promiscuous mode [ 298.896306][ T4173] usb 8-1: Manufacturer: syz [ 298.918075][ T4173] usb 8-1: SerialNumber: syz [ 298.951719][ T4173] usb 8-1: config 0 descriptor?? [ 298.988062][T10354] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.013843][T10354] bond4: (slave ip6gretap1): making interface the new active one [ 299.028763][T10354] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 299.038618][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 299.804053][T10363] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1843'. [ 301.093923][ T13] usb 8-1: USB disconnect, device number 3 [ 301.107262][T10382] sctp: [Deprecated]: syz.3.1846 (pid 10382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.107262][T10382] Use struct sctp_sack_info instead [ 301.129472][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1843'. [ 301.236784][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1851'. [ 301.991846][ T13] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 302.371134][ T13] usb 8-1: Using ep0 maxpacket: 8 [ 302.448556][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1856'. [ 302.491176][T10420] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1857'. [ 302.871695][T10426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1857'. [ 303.232406][ T13] usb 8-1: unable to get BOS descriptor or descriptor too short [ 303.240168][ T13] usb 8-1: too many configurations: 141, using maximum allowed: 8 [ 303.321524][ T13] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.381474][ T13] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.518008][ T13] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.551819][ T13] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.801181][ T13] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.817125][T10447] netlink: 'syz.5.1867': attribute type 4 has an invalid length. [ 303.821661][ T13] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.661120][ T13] usb 8-1: unable to read config index 3 descriptor/start: -71 [ 304.705633][ T13] usb 8-1: can't read configurations, error -71 [ 304.764646][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'. [ 304.862545][T10471] loop7: detected capacity change from 0 to 1024 [ 304.921203][T10471] hfsplus: invalid btree flag [ 304.926238][T10471] hfsplus: failed to load extents file [ 304.949552][T10471] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 305.341609][T10489] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1881'. [ 306.449392][T10527] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 306.485664][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 306.540232][T10524] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 307.660239][T10544] overlayfs: failed to clone lowerpath [ 307.666191][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 307.881427][ T7] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 307.900251][T10557] VFS: Mount too revealing [ 307.904120][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.924126][ T7] usb 3-1: Product: syz [ 307.935874][ T7] usb 3-1: Manufacturer: syz [ 307.943366][ T7] usb 3-1: SerialNumber: syz [ 307.988428][ T7] usb 3-1: config 0 descriptor?? [ 308.058259][ T7] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 308.095240][ T7] gm12u320: probe of 3-1:0.0 failed with error -5 [ 308.128020][ T7] usb-storage 3-1:0.0: USB Mass Storage device detected [ 308.180372][ T7] usb-storage 3-1:0.0: device ignored [ 308.281349][T10503] udc-core: couldn't find an available UDC or it's busy [ 308.531071][T10503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 308.621694][T10503] misc userio: The device must be registered before sending interrupts [ 308.704630][ T13] usb 3-1: USB disconnect, device number 7 [ 309.350370][T10588] sch_fq: defrate 53322 ignored. [ 310.327894][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'. [ 311.194723][T10599] mmap: syz.2.1913 (10599) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 311.237479][T10609] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 312.761774][T10660] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1932'. [ 313.169942][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 313.282370][T10677] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1935'. [ 313.364593][T10691] netlink: 'syz.2.1938': attribute type 10 has an invalid length. [ 313.850050][T10702] bond7: (slave batadv_slave_1): Enslaving as a backup interface with a down link [ 313.902792][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1943'. [ 314.074317][T10717] batman_adv: batadv0: Interface deactivated: dummy0 [ 314.118825][T10717] batman_adv: batadv0: Removing interface: dummy0 [ 314.166550][T10717] bond3: (slave macvlan2): Releasing backup interface [ 314.268115][T10722] team0: Failed to send options change via netlink (err -105) [ 314.317305][T10722] team0: Mode changed to "loadbalance" [ 314.325402][T10730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1946'. [ 314.618749][T10747] vxcan1: MTU too low for tipc bearer [ 314.662654][T10747] tipc: Enabling of bearer rejected, failed to enable media [ 315.258363][T10775] loop2: detected capacity change from 0 to 40427 [ 315.266798][ T4225] Bluetooth: hci0: command 0x0c1a tx timeout [ 315.317060][T10775] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 315.317093][T10775] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 315.482559][T10775] F2FS-fs (loop2): invalid crc value [ 315.525733][T10775] F2FS-fs (loop2): Found nat_bits in checkpoint [ 315.563606][T10775] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 315.570706][T10775] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 315.644877][ T26] kauditd_printk_skb: 92 callbacks suppressed [ 315.644891][ T26] audit: type=1804 audit(1775005517.786:182): pid=10775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1959" name="/newroot/373/bus/bus" dev="loop2" ino=455 res=1 errno=0 [ 315.786385][T10795] device bridge_slave_0 left promiscuous mode [ 315.821174][T10795] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.897371][T10795] device bridge_slave_1 left promiscuous mode [ 315.911961][T10795] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.955056][T10795] bond0: (slave bond_slave_0): Releasing backup interface [ 316.002587][T10795] bond0: (slave bond_slave_1): Releasing backup interface [ 316.140342][T10795] team0: Failed to send options change via netlink (err -105) [ 316.201780][T10795] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 316.242366][T10795] team0: Port device team_slave_0 removed [ 316.267682][T10795] team0: Failed to send options change via netlink (err -105) [ 316.277612][T10795] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 316.298980][T10795] team0: Port device team_slave_1 removed [ 316.313905][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 316.348778][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 316.361833][T10795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.403842][T10795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.440220][T10797] team0: Failed to send options change via netlink (err -105) [ 316.472650][T10797] team0: Mode changed to "loadbalance" [ 316.478380][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1963'. [ 316.635092][T10823] device syzkaller0 entered promiscuous mode [ 316.944539][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.951810][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.270923][T10841] loop2: detected capacity change from 0 to 32768 [ 319.664196][T10864] net_ratelimit: 11 callbacks suppressed [ 319.664212][T10864] sock: sock_set_timeout: `syz.7.1983' (pid 10864) tries to set negative timeout [ 319.803775][T10841] XFS (loop2): Mounting V5 Filesystem [ 319.934708][T10886] x_tables: duplicate underflow at hook 1 [ 319.972975][T10884] netlink: 'syz.0.1987': attribute type 1 has an invalid length. [ 320.829037][T10891] bond5: (slave gretap2): making interface the new active one [ 320.875157][T10891] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 320.898029][T10841] XFS (loop2): Ending clean mount [ 320.910440][T10841] XFS (loop2): Quotacheck needed: Please wait. [ 320.924347][T10896] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 321.051517][T10841] XFS (loop2): Quotacheck: Done. [ 321.078587][ T4195] XFS (loop2): Unmounting Filesystem [ 321.265594][T10908] sock: sock_set_timeout: `syz.0.2004' (pid 10908) tries to set negative timeout [ 324.065082][T11014] netlink: 'syz.0.2017': attribute type 1 has an invalid length. [ 324.188893][T11014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 324.228449][T11023] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 324.251792][T11028] netlink: 'syz.7.2019': attribute type 4 has an invalid length. [ 324.294428][T11024] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.314863][ T26] audit: type=1326 audit(1775005526.456:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.5.2020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0c8b3b819 code=0x0 [ 324.316052][T11024] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.351439][T11031] loop2: detected capacity change from 0 to 8 [ 324.390822][ T26] audit: type=1326 audit(1775005526.526:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c8b3b819 code=0x7ffc0000 [ 324.406932][T11024] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.438043][T11031] SQUASHFS error: zlib decompression failed, data probably corrupt [ 324.449367][T11031] SQUASHFS error: Failed to read block 0x9b: -5 [ 324.452034][ T26] audit: type=1326 audit(1775005526.556:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c8b3b819 code=0x7ffc0000 [ 324.460497][T11024] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.501408][T11031] SQUASHFS error: Unable to read metadata cache entry [99] [ 324.526177][T11031] SQUASHFS error: Unable to read inode 0x127 [ 324.531425][ T26] audit: type=1326 audit(1775005526.556:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c8b3b819 code=0x7ffc0000 [ 324.556931][T11024] bond6: (slave geneve2): making interface the new active one [ 324.595798][T11024] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 324.624473][ T26] audit: type=1326 audit(1775005526.556:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb0c8b3b819 code=0x7ffc0000 [ 324.653581][T11018] netlink: 'syz.7.2019': attribute type 4 has an invalid length. [ 324.688047][ T26] audit: type=1326 audit(1775005526.556:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c8b3b819 code=0x7ffc0000 [ 324.764334][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 324.780928][ T26] audit: type=1326 audit(1775005526.556:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c8b3b819 code=0x7ffc0000 [ 324.811097][ T26] audit: type=1326 audit(1775005526.556:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c8b3b819 code=0x7ffc0000 [ 324.811135][ T26] audit: type=1326 audit(1775005526.556:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb0c8b3b819 code=0x7ffc0000 [ 324.811164][ T26] audit: type=1326 audit(1775005526.556:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c8b3b819 code=0x7ffc0000 [ 324.919922][T11039] overlayfs: failed to clone upperpath [ 325.343204][T11058] batman_adv: batadv0: Adding interface: dummy0 [ 325.349492][T11058] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.886628][T11058] batman_adv: batadv0: Interface activated: dummy0 [ 326.093836][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2031'. [ 326.228393][T11071] lo: Caught tx_queue_len zero misconfig [ 326.362617][T11079] netlink: 'syz.0.2036': attribute type 4 has an invalid length. [ 326.384588][T11079] netlink: 'syz.0.2036': attribute type 4 has an invalid length. [ 327.588688][T11097] overlayfs: failed to clone upperpath [ 327.714386][T11096] team0: Port device wlan1 removed [ 327.742272][T11096] bond4: (slave ip6gretap1): Releasing active interface [ 327.769319][T11096] bond5: (slave gretap2): Releasing active interface [ 327.786717][T11096] bond6: (slave geneve2): Releasing active interface [ 327.803741][T11096] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.816173][T11096] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.825124][T11096] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.833629][T11096] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.858199][T11103] team0: Failed to send options change via netlink (err -105) [ 327.866940][T11103] team0: Mode changed to "loadbalance" [ 327.893354][T11111] batman_adv: batadv0: Adding interface: dummy0 [ 327.899641][T11111] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.941194][T11111] batman_adv: batadv0: Interface activated: dummy0 [ 327.964130][T11110] batadv0: mtu less than device minimum [ 327.984818][T11110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.997376][T11110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.009822][T11110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.022322][T11110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.035030][T11110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.047439][T11110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.059884][T11110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.072384][T11110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.084900][T11110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.349497][T11132] device ip6gre1 left promiscuous mode [ 328.397456][T11130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2056'. [ 328.627130][T11142] overlayfs: failed to clone lowerpath [ 329.622910][T11149] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2062'. [ 330.058744][T11176] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 330.074642][T11176] loop7: detected capacity change from 0 to 8 [ 330.118884][T11176] SQUASHFS error: zlib decompression failed, data probably corrupt [ 330.147989][T11176] SQUASHFS error: Failed to read block 0x9b: -5 [ 330.161416][T11176] SQUASHFS error: Unable to read metadata cache entry [99] [ 330.183131][T11176] SQUASHFS error: Unable to read inode 0x127 [ 330.424189][T11190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.482835][T11195] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2075'. [ 330.608972][T11197] loop7: detected capacity change from 0 to 164 [ 330.649042][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2079'. [ 330.827229][T11206] autofs4:pid:11206:autofs_fill_super: called with bogus options [ 330.979617][T11207] bridge3: port 1(veth0_to_bond) entered blocking state [ 331.005531][T11197] Unable to read rock-ridge attributes [ 331.399677][T11207] bridge3: port 1(veth0_to_bond) entered disabled state [ 331.408208][T11207] device veth0_to_bond entered promiscuous mode [ 331.473919][T11197] Unable to read rock-ridge attributes [ 331.539719][T11212] overlayfs: failed to clone upperpath [ 333.352441][T11247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.445642][T11252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.467042][T11247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.222685][T11283] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2104'. [ 335.292627][T11280] device batadv_slave_0 entered promiscuous mode [ 335.351137][ T7] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 336.311677][T11306] 8021q: adding VLAN 0 to HW filter on device bond6 [ 336.451335][ T7] usb 3-1: config 0 has no interfaces? [ 336.631852][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 336.641365][ T7] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 336.649873][ T7] usb 3-1: Product: syz [ 336.654545][ T7] usb 3-1: Manufacturer: syz [ 336.659251][ T7] usb 3-1: SerialNumber: syz [ 336.666264][ T7] usb 3-1: config 0 descriptor?? [ 336.950526][ T7] usb 3-1: USB disconnect, device number 8 [ 337.351390][T11337] autofs4:pid:11337:autofs_fill_super: called with bogus options [ 340.262968][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2128'. [ 340.307369][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 340.344991][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 340.570153][T11369] loop7: detected capacity change from 0 to 256 [ 340.693447][T11374] netlink: 'syz.3.2139': attribute type 10 has an invalid length. [ 342.565119][T11392] loop2: detected capacity change from 0 to 256 [ 342.710106][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2148'. [ 342.743834][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2148'. [ 342.885670][T11405] batman_adv: batadv0: Adding interface: dummy0 [ 342.941431][ T7] Bluetooth: hci0: command 0x0c20 tx timeout [ 342.961629][T11405] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.042806][T11405] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 343.148016][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'. [ 343.490599][T11412] loop7: detected capacity change from 0 to 32768 [ 344.547758][T11412] XFS (loop7): Mounting V5 Filesystem [ 345.288364][T11412] XFS (loop7): Starting recovery (logdev: internal) [ 345.388878][ T4225] XFS (loop7): Metadata corruption detected at xfs_buf_ioend+0x25c/0x6e0, xfs_inode block 0x3000 xfs_inode_buf_verify [ 345.410435][ T4225] XFS (loop7): Unmount and run xfs_repair [ 345.429964][ T4225] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 345.447765][ T4225] 00000000: 49 4e 00 00 01 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 345.477499][ T4225] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 345.497312][ T4225] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 345.527368][ T4225] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 345.587890][ T4225] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 345.604452][ T4225] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 345.617371][ T4225] 00000060: ff ff ff ff f6 f6 bd 08 00 00 00 00 00 00 00 00 ................ [ 346.449419][ T4225] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 346.505070][T11412] XFS (loop7): metadata I/O error in "xlog_recover_items_pass2+0xe3/0x130" at daddr 0x3000 len 64 error 117 [ 346.529993][T11412] XFS (loop7): log mount/recovery failed: error -117 [ 347.283577][T11412] XFS (loop7): log mount failed [ 347.337316][T11488] loop2: detected capacity change from 0 to 512 [ 347.568062][T11488] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 347.869289][T11499] veth1_macvtap: renamed from ipvlan0 [ 348.461183][ T4274] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 349.231378][ T4274] usb 8-1: config 0 has an invalid interface number: 11 but max is 0 [ 349.251443][ T4274] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 349.282267][ T4274] usb 8-1: config 0 has no interface number 0 [ 349.298803][ T4274] usb 8-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 349.330320][ T4274] usb 8-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.387298][ T4274] usb 8-1: config 0 interface 11 has no altsetting 0 [ 349.395981][ T4274] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 349.414646][ T4274] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.442343][ T4274] usb 8-1: config 0 descriptor?? [ 349.454059][ T26] kauditd_printk_skb: 158 callbacks suppressed [ 349.454072][ T26] audit: type=1326 audit(1775005551.596:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.2.2195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd385390819 code=0x0 [ 349.509508][T11516] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 349.542980][ T4274] keyspan 8-1:0.11: Keyspan 2 port adapter converter detected [ 349.559706][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 87 [ 349.578599][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 81 [ 349.600239][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 82 [ 349.623596][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 1 [ 349.643495][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 2 [ 349.677111][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 85 [ 349.702284][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 5 [ 349.729171][ T4274] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 349.758419][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 83 [ 349.778788][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 84 [ 349.813756][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 3 [ 349.855886][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 4 [ 349.904509][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 86 [ 349.926108][ T4274] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 6 [ 349.948045][ T4274] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 350.150802][ T7] usb 8-1: USB disconnect, device number 6 [ 350.175929][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 350.218855][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 350.250910][ T7] keyspan 8-1:0.11: device disconnected [ 350.322367][T11557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2208'. [ 352.456728][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2205'. [ 352.512244][T11585] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 352.619580][ T26] audit: type=1326 audit(1775005554.756:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.3.2209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f506d084819 code=0x0 [ 352.623703][T11589] sctp: [Deprecated]: syz.7.2207 (pid 11589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.623703][T11589] Use struct sctp_sack_info instead [ 357.106890][ T4225] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 358.001465][ T4225] usb 3-1: Using ep0 maxpacket: 16 [ 358.122566][ T4225] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.301786][ T4225] usb 3-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 358.318043][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.329490][ T4225] usb 3-1: Product: syz [ 358.349860][ T4225] usb 3-1: Manufacturer: syz [ 358.362536][ T4225] usb 3-1: SerialNumber: syz [ 358.406871][ T4225] usb 3-1: config 0 descriptor?? [ 358.928961][T11696] loop7: detected capacity change from 0 to 40427 [ 358.962288][T11697] batman_adv: batadv0: Interface deactivated: dummy0 [ 359.241461][T11696] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 359.248769][T11696] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 359.523380][ T4225] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 359.559341][ T4225] usb 3-1: USB disconnect, device number 9 [ 359.620868][T11696] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x216 [ 359.669722][T11696] F2FS-fs (loop7): invalid crc value [ 359.677482][T11696] F2FS-fs (loop7): invalid crc value [ 359.683098][T11696] F2FS-fs (loop7): Failed to get valid F2FS checkpoint [ 360.528453][T11697] device batadv_slave_0 left promiscuous mode [ 361.566506][T11709] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 361.704075][T11715] kvm: pic: single mode not supported [ 366.458545][T11763] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2262'. [ 366.794402][T11768] loop2: detected capacity change from 0 to 40427 [ 367.524678][T11768] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 367.532001][T11768] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 367.540922][T11768] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x216 [ 367.644199][T11763] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2262'. [ 367.694308][T11763] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2262'. [ 367.743456][T11768] F2FS-fs (loop2): invalid crc value [ 367.750081][T11768] F2FS-fs (loop2): invalid crc value [ 367.755934][T11768] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 371.662670][T11824] netlink: 'syz.3.2278': attribute type 1 has an invalid length. [ 371.690561][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2278'. [ 372.004860][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2282'. [ 374.451167][ T4274] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 374.831215][ T4274] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.866887][ T4274] usb 3-1: config 0 has no interfaces? [ 374.877531][ T4274] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 374.910752][ T4274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.962007][ T4274] usb 3-1: config 0 descriptor?? [ 375.814126][ T4274] usb 3-1: USB disconnect, device number 10 [ 377.872887][T11924] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 378.796650][T11931] netlink: 'syz.3.2312': attribute type 1 has an invalid length. [ 378.806854][T11931] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2312'. [ 378.851501][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.858270][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.235524][ T26] audit: type=1326 audit(1775005583.376:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.0.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bf5be819 code=0x7ffc0000 [ 381.513028][ T26] audit: type=1326 audit(1775005583.406:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.0.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bf5be819 code=0x7ffc0000 [ 381.551424][ T26] audit: type=1326 audit(1775005583.406:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.0.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f32bf5be819 code=0x7ffc0000 [ 382.059940][ T26] audit: type=1326 audit(1775005583.406:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.0.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bf5be819 code=0x7ffc0000 [ 382.286031][ T26] audit: type=1326 audit(1775005583.406:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.0.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bf5be819 code=0x7ffc0000 [ 383.114973][ T26] audit: type=1326 audit(1775005583.416:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.0.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f32bf5be819 code=0x7ffc0000 [ 383.158182][ T26] audit: type=1326 audit(1775005583.416:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.0.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bf5be819 code=0x7ffc0000 [ 383.236316][ T26] audit: type=1326 audit(1775005583.416:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.0.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bf5be819 code=0x7ffc0000 [ 383.485087][ T26] audit: type=1326 audit(1775005583.426:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.0.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f32bf5be819 code=0x7ffc0000 [ 384.486981][ T26] audit: type=1326 audit(1775005583.426:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.0.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bf5be819 code=0x7ffc0000 [ 389.227366][T12066] ceph: No mds server is up or the cluster is laggy [ 389.260822][ T4225] libceph: connect (1)[c::]:6789 error -101 [ 389.271738][ T4225] libceph: mon0 (1)[c::]:6789 connect error [ 390.273986][ T21] libceph: connect (1)[c::]:6789 error -101 [ 390.274076][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 391.231072][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 393.613601][T12097] vxcan1 speed is unknown, defaulting to 1000 [ 393.636560][T12097] vxcan1 speed is unknown, defaulting to 1000 [ 393.653291][T12097] vxcan1 speed is unknown, defaulting to 1000 [ 393.940194][T12097] infiniband syz2: set down [ 393.945076][T12097] infiniband syz2: added vxcan1 [ 393.955052][T12097] infiniband syz2: Couldn't open port 1 [ 393.971686][T12097] RDS/IB: syz2: added [ 393.975700][T12097] smc: adding ib device syz2 with port count 1 [ 393.982245][T12097] smc: ib device syz2 port 1 has pnetid [ 393.988920][T12097] vxcan1 speed is unknown, defaulting to 1000 [ 394.044176][T12097] vxcan1 speed is unknown, defaulting to 1000 [ 394.098200][T12097] vxcan1 speed is unknown, defaulting to 1000 [ 394.152991][T12097] vxcan1 speed is unknown, defaulting to 1000 [ 394.209122][T12097] vxcan1 speed is unknown, defaulting to 1000 [ 394.267267][T12097] vxcan1 speed is unknown, defaulting to 1000 [ 394.373685][ T4225] vxcan1 speed is unknown, defaulting to 1000 [ 394.412089][ T21] vxcan1 speed is unknown, defaulting to 1000 [ 394.446909][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2360'. [ 394.460191][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2361'. [ 394.483138][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2361'. [ 394.517960][T12107] loop7: detected capacity change from 0 to 2048 [ 394.602263][T12111] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.440879][ T7] libceph: connect (1)[c::]:6789 error -101 [ 396.451629][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 398.567713][T12124] ceph: No mds server is up or the cluster is laggy [ 398.614608][T12145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2374'. [ 398.858306][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 398.879433][ T13] libceph: connect (1)[c::]:6789 error -101 [ 398.885779][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 399.599989][ T13] libceph: connect (1)[c::]:6789 error -101 [ 399.755737][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 400.591182][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 400.921088][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 400.931510][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 400.943345][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 400.954807][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 400.964603][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 406.645282][T12217] device syzkaller0 entered promiscuous mode [ 408.762531][T12246] loop2: detected capacity change from 0 to 512 [ 408.872071][T12251] bridge0: port 1(syz_tun) entered blocking state [ 408.898277][T12251] bridge0: port 1(syz_tun) entered disabled state [ 408.968055][T12251] device syz_tun entered promiscuous mode [ 409.595622][T12253] device bridge0 entered promiscuous mode [ 409.674155][T12246] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 409.701610][T12246] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.913632][T12265] device batadv_slave_0 entered promiscuous mode [ 409.980425][T12264] device batadv_slave_0 left promiscuous mode [ 410.023174][T12267] loop7: detected capacity change from 0 to 4096 [ 410.134919][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2409'. [ 410.369793][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 410.369814][ T26] audit: type=1804 audit(3922489260.468:403): pid=12281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2414" name="file0" dev="hugetlbfs" ino=61931 res=1 errno=0 [ 410.496433][ T26] audit: type=1804 audit(3922489260.548:404): pid=12282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2414" name="file0" dev="hugetlbfs" ino=61931 res=1 errno=0 [ 412.059305][T12309] loop7: detected capacity change from 0 to 4096 [ 412.962290][T12309] NILFS (loop7): invalid segment: Checksum error in segment payload [ 413.009465][T12323] loop2: detected capacity change from 0 to 512 [ 413.120838][T12309] NILFS (loop7): trying rollback from an earlier position [ 413.329574][T12323] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 413.549757][T12309] NILFS (loop7): recovery complete [ 413.702281][T12323] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 413.777154][T12323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 413.794473][T12326] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.808356][T12323] System zones: 1-12 [ 413.852451][T12323] EXT4-fs (loop2): orphan cleanup on readonly fs [ 413.895686][T12323] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2428: invalid indirect mapped block 2 (level 2) [ 413.925538][T12323] EXT4-fs (loop2): Remounting filesystem read-only [ 413.950628][T12323] EXT4-fs (loop2): 1 truncate cleaned up [ 413.951487][T12333] team0 (unregistering): Failed to send options change via netlink (err -105) [ 413.957319][T12323] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,usrquota,errors=remount-ro,i_version. Quota mode: writeback. [ 414.185497][ T26] audit: type=1800 audit(3922489520.325:405): pid=12309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2423" name="file1" dev="loop7" ino=16 res=0 errno=0 [ 415.446073][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2442'. [ 415.629935][T12369] device pim6reg1 entered promiscuous mode [ 417.348798][T12396] netlink: 63 bytes leftover after parsing attributes in process `syz.0.2452'. [ 417.707448][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062592000: rx timeout, send abort [ 418.681161][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062590800: rx timeout, send abort [ 418.689389][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062592000: abort rx timeout. Force session deactivation [ 419.544346][ T26] audit: type=1804 audit(3922489525.685:406): pid=12417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2458" name="bus" dev="ramfs" ino=62842 res=1 errno=0 [ 419.576277][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062590800: abort rx timeout. Force session deactivation [ 419.637926][T12421] xt_hashlimit: size too large, truncated to 1048576 [ 419.664942][T12421] xt_hashlimit: invalid rate [ 419.701308][ T26] audit: type=1804 audit(3922489525.685:407): pid=12417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2458" name="bus" dev="ramfs" ino=62842 res=1 errno=0 [ 421.085456][T12433] netlink: 'syz.5.2462': attribute type 2 has an invalid length. [ 422.728246][T12462] tipc: Started in network mode [ 422.807859][T12462] tipc: Node identity b29e07fc7c73, cluster identity 4711 [ 422.836198][T12462] tipc: Enabled bearer , priority 0 [ 422.944534][T12467] device syzkaller0 entered promiscuous mode [ 422.970581][T12461] tipc: Resetting bearer [ 423.048231][T12477] xt_policy: output policy not valid in PREROUTING and INPUT [ 530.190966][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 530.197980][ C1] (detected by 1, t=10502 jiffies, g=49085, q=48) [ 530.204470][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294990157-4294979655), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 530.217898][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g49085 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 530.229466][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 530.239467][ C1] rcu: RCU grace-period kthread stack dump: [ 530.246433][ C1] task:rcu_preempt state:R running task stack:27800 pid: 15 ppid: 2 flags:0x00004000 [ 530.257617][ C1] Call Trace: [ 530.261009][ C1] [ 530.264091][ C1] __schedule+0x11ef/0x43c0 [ 530.268827][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 530.274290][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 530.279479][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 530.285472][ C1] ? _raw_spin_unlock+0x40/0x40 [ 530.291064][ C1] ? release_firmware_map_entry+0x190/0x190 [ 530.297318][ C1] ? __mod_timer+0x91e/0xd00 [ 530.302231][ C1] schedule+0x11b/0x1e0 [ 530.306472][ C1] schedule_timeout+0x184/0x2d0 [ 530.311539][ C1] ? console_conditional_schedule+0x40/0x40 [ 530.317767][ C1] ? update_process_times+0x200/0x200 [ 530.323679][ C1] ? prepare_to_swait_event+0x331/0x350 [ 530.329428][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 530.334539][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 530.339898][ C1] ? rcu_gp_init+0xd6c/0x10f0 [ 530.344815][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 530.349584][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 530.354786][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 530.360218][ C1] rcu_gp_kthread+0x9b/0x370 [ 530.365516][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 530.371430][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 530.376893][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 530.382963][ C1] ? __kthread_parkme+0x157/0x1b0 [ 530.388093][ C1] kthread+0x436/0x520 [ 530.392587][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 530.397776][ C1] ? kthread_blkcg+0xd0/0xd0 [ 530.402603][ C1] ret_from_fork+0x1f/0x30 [ 530.407378][ C1] [ 530.410390][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 530.416885][ C1] Sending NMI from CPU 1 to CPUs 0: [ 530.422504][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10