last executing test programs: 13m50.02110618s ago: executing program 32 (id=20): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x121000, 0x800, 0x8, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000280)=0x140b0c, 0x4) 13m9.209329124s ago: executing program 33 (id=128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e518e4d4d"}}}}, 0x3f) 12m40.355855852s ago: executing program 3 (id=327): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) 12m39.097030242s ago: executing program 34 (id=327): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) 11m33.173232424s ago: executing program 35 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11m19.948084194s ago: executing program 9 (id=672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) recvmsg(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1}, 0x40000102) 11m19.613594104s ago: executing program 9 (id=673): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x23e}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 11m18.234766924s ago: executing program 9 (id=682): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 11m17.450619571s ago: executing program 9 (id=685): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 11m17.049730856s ago: executing program 9 (id=689): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) setfsuid(0xee00) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 11m16.49528611s ago: executing program 9 (id=694): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = inotify_init() r3 = dup(r2) read$midi(r3, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 11m15.997060286s ago: executing program 36 (id=694): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = inotify_init() r3 = dup(r2) read$midi(r3, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 9m43.33812788s ago: executing program 8 (id=1176): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) rmdir(&(0x7f0000000040)='./config/nvmet/subsystems/testnqn\x00') 9m42.821975492s ago: executing program 8 (id=1180): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000007a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0x2d85, 0x40000, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m42.213497891s ago: executing program 8 (id=1183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10b800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newtfilter={0x40, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x40010) 9m41.611068257s ago: executing program 8 (id=1187): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$eJzsmbGL1EAUxr9Jstn1OA5tLGwsPPBEL5tkVa45QcFSEE5Ry8WLx2nuVvYi3C4ILjY2WggWgq2NpYWFlYX/gLZaqCBYuOWChTAyk0kyZpM1q2uj7wc3903emzdvHplXZEEQxH/Lp4+jD/fPrFw4BmAei6ir51/MzMfQ/N8/vnX00erZJ8/fPX29vXD7ZT4eA8B56Xbf8iYbwKvTJiIwK37CORYy+6KWgtK4CANHlL4EBieW37kkngRguKJ8rmu6s0eJMHCudsL1a5th4IrBE4Mvhpaen0hqOGBYB9CQ2XHONPtOr3+jHYZBNy9qPNlnzDStMErLKfIbvRHlWUVSPc6F/+V7dwdirmoDF0ZaPw8GPKVbYFhTegV1OI6TlUQ7/wEri29WOX8VMUDlGp2Sez2oGvmZFPuWZ1D9SiK5I9OsEmX864n9W6I2izgP5/NvnbjQqc/+YdID9VWff2cvYPpVIpefX61fr2pMvoxQ9jHT27kwPPcHxbQLCpWKrH+Kzn5Y608WrLR/NKOtm82dXn95c6u9EWwE277fOuked90TflM2onic0P8asj/NafFrJb42s7HbjqKutwtEXS+d+/GYHQBrLzpfxZK9kP3PwNIhGUJ2LHnsevEeTP0Z8r9QS2ax553SMxEEQRAEQRAEQRAEQRAEQRRzEAzxL2GcqQ+iRfjn5RfKHwEAAP//wutaPw==") mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 9m41.013765959s ago: executing program 8 (id=1192): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) 9m40.435430744s ago: executing program 8 (id=1194): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000004c0)={@remote, @empty, @void, {@llc_tr={0x11, {@snap={0x1, 0xa8, '`', "ac7008", 0x8809}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@empty, @empty, @val={@void, {0x8100, 0x7, 0x0, 0x7}}, {@canfd={0xd, {{0x4}, 0x9c, 0x1, 0x0, 0x0, "9ef0eefbf2d394851c48b21b1add1c7df883c36aaa120880051b5682168c1927a0425cc21c5f607aeb3bbe0520ed7dc8d2dc840559759eed5e2aec849acb06ef"}}}}, 0x0) 9m39.639622948s ago: executing program 37 (id=1194): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000004c0)={@remote, @empty, @void, {@llc_tr={0x11, {@snap={0x1, 0xa8, '`', "ac7008", 0x8809}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@empty, @empty, @val={@void, {0x8100, 0x7, 0x0, 0x7}}, {@canfd={0xd, {{0x4}, 0x9c, 0x1, 0x0, 0x0, "9ef0eefbf2d394851c48b21b1add1c7df883c36aaa120880051b5682168c1927a0425cc21c5f607aeb3bbe0520ed7dc8d2dc840559759eed5e2aec849acb06ef"}}}}, 0x0) 8m21.688057258s ago: executing program 0 (id=1568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 8m19.7584849s ago: executing program 0 (id=1572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x1, &(0x7f0000000440)=0x8, 0x8000) 8m18.301047727s ago: executing program 0 (id=1576): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) unlink(0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) 8m17.985413162s ago: executing program 0 (id=1579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) 8m16.637947387s ago: executing program 0 (id=1585): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x4b) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x26020480) umount2(&(0x7f0000000080)='./file0\x00', 0x4) unshare(0x20600) 8m16.110467201s ago: executing program 0 (id=1589): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r1, 0x0, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 8m0.476601988s ago: executing program 38 (id=1589): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r1, 0x0, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 7m29.330298199s ago: executing program 3 (id=1642): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b40)="de98eeeefd02c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc301dbcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99372601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a00af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f7d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff297eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e04616f54f15b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea347b9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7ae66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1f69684ffb4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16e343ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d209708000000f0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca6197add1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c63f7871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 7m27.946544366s ago: executing program 3 (id=1735): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x50, r1, 0xa000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8907, 0x0) 7m25.317294466s ago: executing program 3 (id=1742): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) sendmmsg$unix(r0, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000090}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x204e3c}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x2, 0x40008004) 7m22.689611132s ago: executing program 3 (id=1751): r0 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r3, 0x0, 0x100000000000000}, 0x38) 7m22.222473052s ago: executing program 3 (id=1756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1c75, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x40002e5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m21.649869289s ago: executing program 39 (id=1756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1c75, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x40002e5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 46.859734266s ago: executing program 1 (id=2939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 43.770760717s ago: executing program 1 (id=2944): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@rand_addr=0x64010101, @multicast2, 0x0, "7beb38c70d477344f6f4c8245dc2982336817a0366f7ce622aef8a1828b58306", 0x1, 0x10, 0x1, 0x4ea85437}, 0x3c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) truncate(0x0, 0x9) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0x1) 40.548927835s ago: executing program 1 (id=2949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad19576", 0x544, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 38.978848972s ago: executing program 1 (id=2951): fsopen(&(0x7f0000000280)='nfs4\x00', 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x43, 0xd, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2", 0x0, 0x0, 0xffffffff}, 0x50) 36.698617734s ago: executing program 1 (id=2957): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x800}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE1MzOzPttt3dbrfQCvv5JNM+z8wzL99n5pmd2Wd2AmhbA9mfJKI3In6JiL48u7DAQP7v+tUL439evTCexOzsC38klXLXrl4YL4uW820uMoNpRPp2ErtrrHfq3PmTY5OTE2eL/PD0qdeGp86df/jEqbHjE8cnTo8ePnzo4Mhjj44+0lQcF5eZnsV1bdebZ/bsPPLSe8+Oz8bL332cbW9vMb06jlx/U+ttZCAGYrYwP7ar8vf+VS/9v2VLRHQX6WTDOm8MTeuIiGx3dVbaf190xPzO64tn3prLfLVOGwjcNNln07YlYzuK/+nc5xdwO0q0cWhT5Sd+dv9bDmt5/bHerjyZ/Z2oxH+9GH54Lq+bNLuX7c/v2DvqzP//GuN65pOzfcusvzcijs789X42RM3vIRpImi4JADDni+z656Fa13/pgmubrUUfSn9E7I+I7RHxv4jYEelcmTsi4s4Vrn9gUX7p9c9PG1e4yBXJrv8eL/q2yiGfUsaVzOW2VOLvTF45MTlxoKiTwejszvIjDdbx5dM/v1tv2kDV9V82ZOsvrwWL7fh9Q/fCeY6NTY+tIuQFrlyKJDbUij+Z6wnIamBnROxqYflZnZ148KM9WXrr5qXTl4+/gRvQzzT7YcQD+f6fiUXxl5J8TfX6J4d7YnLiwHB5VCz1/Y+Xn6/Od1alF8Tf01xMPa0GW8OVSxGbah7/RfxlMyj7a6eK/Ne9Ta/j8q/v1L2nWbr/kzg6U12iOP43zldbdvx3JS9W0l3FuDfGpqfPjkR8XoxYMH50fmllviyfxT+4b2H8+X1xmp3j/vmgmG93RGQH8V0RcXdE7C22/Z6IuDci9jWI/9un7nu1cQ21ePzfAFn8xxrt/4j+pLq/voVEx8lvPqu3/ubOf4cqqcFiTPX5r6vOcpvdwNXWHwAAANwK0kofdJIOVT2/XdoRm9LJM1PT+wfi9dPH8r7q/uhMy2+6+qq+Dx0pvhsu86OL8gcjYlvlSaONlfzQ+JnJLesUM5DbXNX+83NBmg4N5dN+q/fQC3D7WFE/WvVDZ598euM3BlhTfq8J7Uv7h/al/UP70v6hfdVq/xcjrq/DpgBrrNXP/8UPDAC3Htf/0L60f2hf2j+0paU/iS9et5KdE1r/yf/k9iOreWPAzU/M9rU+e9SfNLPyBXY0V7h8+0XTS26ucBJRhpM2iKtGItL5MX8Xb5OsjOnMy3Q1v6lrn0iXLfPEcrXRuaJ3YvTUqI29RaI7IppdzsU1q9XyDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//knXm/A==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x2, 0x0, 0x2000) 34.331860547s ago: executing program 1 (id=2961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) capset(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.338796382s ago: executing program 7 (id=2984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000300)={[{@map_off}, {@hide, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@showassoc}, {@session={'session', 0x3d, 0x62}}, {@block={'block', 0x3d, 0x400}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@dmode={'dmode', 0x3d, 0x380000}}, {@showassoc}, {@mode={'mode', 0x3d, 0x2}}, {@sbsector={'sbsector', 0x3d, 0x3400000000000000}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000"], 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x6, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x7, 0x3, 0x0, 0x0, 0x0, 0xee00, 0x0, 0x8, 0x1}}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x8112) 19.702550882s ago: executing program 2 (id=2990): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x808000, &(0x7f0000000040)=ANY=[], 0x1, 0x28c, &(0x7f0000000700)="$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") prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x82000, 0xe1) prctl$PR_SET_SECUREBITS(0x1c, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) gettid() timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) keyctl$restrict_keyring(0x4, 0xfffffffffffffffc, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) 17.909360924s ago: executing program 40 (id=2961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) capset(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.850698269s ago: executing program 7 (id=2994): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x100, 0x100, 0xfeffffff, 0x0, 0x100, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x300, 0x300]}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x3, 0x1], 0x0, 0x4}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'batadv_slave_1\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0xd7983ab608da75d7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000001e000000200000000000000000000000000000004000000000a006080", @ANYRES32=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 16.69372718s ago: executing program 7 (id=2995): socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x0, 0x112) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) 16.636044809s ago: executing program 2 (id=2997): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) 15.003088674s ago: executing program 6 (id=2999): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) socket(0x1d, 0xa, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x408d00, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000e07, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x22, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x404, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4) syz_open_dev$dri(0x0, 0x1ff, 0x0) 13.108594346s ago: executing program 2 (id=3000): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./gadget\x00', 0x7f) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x1, 0x0) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 12.959448124s ago: executing program 5 (id=3001): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x48, 0x1, 0x0, @rand_addr=0x64010102, @remote}, @dest_unreach={0x3, 0xe, 0x0, 0x0, 0x5, 0x4, {0x5, 0x4, 0x2, 0x2, 0x8, 0x67, 0x0, 0x4, 0x67, 0x200, @dev={0xac, 0x14, 0x14, 0x3c}, @local}}}}}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) lseek(r1, 0xa3d2, 0x1) 12.867929386s ago: executing program 4 (id=3002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 10.699612571s ago: executing program 7 (id=3003): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 10.699186292s ago: executing program 5 (id=3004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10.697354059s ago: executing program 4 (id=3014): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) 10.419549294s ago: executing program 6 (id=3005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) 10.288656805s ago: executing program 2 (id=3006): add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) unshare(0x22020600) 9.322978362s ago: executing program 4 (id=3007): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 8.963384012s ago: executing program 7 (id=3008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) 8.159502376s ago: executing program 6 (id=3009): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) r3 = dup3(0xffffffffffffffff, r1, 0x80000) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000100)={r3, r1, 0x4}) setgroups(0x1, &(0x7f0000000180)=[0x0]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x54}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) fcntl$addseals(r6, 0x409, 0x3) 7.160647047s ago: executing program 4 (id=3010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) prlimit64(0x0, 0x7, 0x0, 0x0) 6.91323874s ago: executing program 6 (id=3011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@keyring) 5.89688385s ago: executing program 7 (id=3012): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) socket$key(0xf, 0x3, 0x2) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 4.753209708s ago: executing program 6 (id=3013): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa0, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.716794361s ago: executing program 2 (id=3015): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/set_event\x00', 0x2, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$alg(0x26, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 4.370497979s ago: executing program 6 (id=3016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.122896106s ago: executing program 5 (id=3017): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) 4.017368227s ago: executing program 2 (id=3018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.994144467s ago: executing program 4 (id=3019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB="3c0000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7d1e0300231a05001c0012800900010069706970000000000c00028008000200c00002004504ddf3b5016cbe46b5f3eb6dff8bb90157b3f21bd881db096bd9c9743cb7ec9e2ee09cf9aff80471c6969532ba4ba0b4a960af6c7e5b36e74a4f2dd7d0df607609646dd37d26495930ef342540904f48508cd793fae0d21cc31133e3efff8dfd2c5cfe8c50af9bd1e4fc96e82b2dc15b5fcbc5"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20040040) socket$inet6_mptcp(0xa, 0x1, 0x106) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x4, 0x381) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) 2.766723483s ago: executing program 5 (id=3020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 1.376492606s ago: executing program 5 (id=3021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x80108906, 0x0) 1.254382199s ago: executing program 4 (id=3022): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@errors_remount}]}, 0x1, 0x52f, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f0, &(0x7f0000001040)={'ip_vti0\x00', 0x0}) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') 0s ago: executing program 5 (id=3023): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='builtin_trusted\x00', r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r1) kernel console output (not intermixed with test programs): 2.1570" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0228b9e159 code=0x7ffc0000 [ 439.642268][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.642349][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.981191][ T7716] IPVS: starting estimator thread 0... [ 440.072727][T12296] IPVS: using max 22 ests per chain, 52800 per kthread [ 440.366024][T12301] tipc: Started in network mode [ 440.366072][T12301] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 440.366598][T12301] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 440.404510][T12301] tipc: Enabled bearer , priority 10 [ 441.565338][ T6560] tipc: Node number set to 1 [ 442.960176][T12349] tipc: Started in network mode [ 442.960204][T12349] tipc: Node identity 1000001, cluster identity 4369 [ 442.960225][T12349] tipc: Node number set to 16777217 [ 442.977075][T12349] tipc: New replicast peer: 127.0.0.1 [ 442.977944][T12349] tipc: Enabled bearer , priority 10 [ 444.012123][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1603'. [ 444.217979][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1603'. [ 444.797552][T12354] loop6: detected capacity change from 0 to 32768 [ 444.840424][T12354] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 444.854037][T12354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1600 (12354) [ 444.984414][T12354] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 444.984465][T12354] BTRFS info (device loop6): using sha256 checksum algorithm [ 445.386834][T12354] BTRFS info (device loop6): rebuilding free space tree [ 445.563875][T12354] BTRFS info (device loop6): disabling free space tree [ 445.563953][T12354] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 445.564979][T12354] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 445.675772][T12354] BTRFS info (device loop6): enabling ssd optimizations [ 445.675809][T12354] BTRFS info (device loop6): force clearing of disk cache [ 445.675840][T12354] BTRFS info (device loop6): enabling auto defrag [ 445.675869][T12354] BTRFS info (device loop6): max_inline set to 0 [ 446.238345][ T3265] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 446.295284][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 446.295308][ T31] audit: type=1800 audit(1790160066.367:129): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1600" name="bus" dev="loop6" ino=261 res=0 errno=0 [ 447.274219][T12446] loop4: detected capacity change from 0 to 1024 [ 447.659332][ T5921] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 448.549425][ T31] audit: type=1326 audit(1790160068.617:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.6.1621" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d0f9e159 code=0x7ffc0000 [ 448.551291][ T31] audit: type=1326 audit(1790160068.617:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.6.1621" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d0f9e159 code=0x7ffc0000 [ 448.559231][ T31] audit: type=1326 audit(1790160068.627:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.6.1621" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff3d0f9e159 code=0x7ffc0000 [ 448.559524][ T31] audit: type=1326 audit(1790160068.627:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.6.1621" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d0f9e159 code=0x7ffc0000 [ 448.559830][ T31] audit: type=1326 audit(1790160068.627:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.6.1621" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d0f9e159 code=0x7ffc0000 [ 448.564409][ T31] audit: type=1326 audit(1790160068.637:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.6.1621" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff3d0f9e159 code=0x7ffc0000 [ 448.571132][ T31] audit: type=1326 audit(1790160068.637:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.6.1621" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d0f9e159 code=0x7ffc0000 [ 448.571445][ T31] audit: type=1326 audit(1790160068.637:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.6.1621" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d0f9e159 code=0x7ffc0000 [ 448.589458][ T31] audit: type=1326 audit(1790160068.657:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.6.1621" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff3d0f9e159 code=0x7ffc0000 [ 449.763878][ T5626] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 449.924915][ T5626] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 449.951380][ T5626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.951422][ T5626] usb 3-1: Product: syz [ 449.951450][ T5626] usb 3-1: Manufacturer: syz [ 449.951478][ T5626] usb 3-1: SerialNumber: syz [ 449.990597][ T5626] usb 3-1: config 0 descriptor?? [ 450.299787][ T5626] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 006 [ 451.359888][T12483] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3232635812/3232635814 [ 451.359937][T12483] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3232635812/3232635813 [ 451.383497][T12483] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3232635812/3232635814 [ 451.383542][T12483] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3232635812/3232635813 [ 451.881610][ T6560] usb 3-1: USB disconnect, device number 6 [ 453.718834][T12510] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 456.150904][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1644'. [ 456.742626][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.746374][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.760792][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.779003][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.786957][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 457.369578][ T5618] syz_tun (unregistering): left allmulticast mode [ 457.369616][ T5618] syz_tun (unregistering): left promiscuous mode [ 457.369720][ T5618] bridge0: port 3(syz_tun) entered disabled state [ 458.872121][ T5635] Bluetooth: hci4: command tx timeout [ 459.382180][ T7686] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.597653][ T7727] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.715307][ T7695] bridge_slave_1: left allmulticast mode [ 459.715343][ T7695] bridge_slave_1: left promiscuous mode [ 459.715582][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.773926][ T7695] bridge_slave_0: left allmulticast mode [ 459.773958][ T7695] bridge_slave_0: left promiscuous mode [ 459.774192][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.815722][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 459.815747][ T31] audit: type=1804 audit(1790160079.877:185): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1658" name="bus" dev="ramfs" ino=35878 res=1 errno=0 [ 459.843057][ T31] audit: type=1804 audit(1790160079.917:186): pid=12594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1658" name="bus" dev="ramfs" ino=35878 res=1 errno=0 [ 460.952073][ T5635] Bluetooth: hci4: command tx timeout [ 461.241226][ T7695] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 461.241269][ T7695] bridge2 (unregistering): left promiscuous mode [ 461.354496][ T7695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.406408][ T7695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.423444][ T7695] bond0 (unregistering): Released all slaves [ 461.472884][ T7695] bond1 (unregistering): (slave veth3): Releasing active interface [ 461.472925][ T7695] dummy0: entered promiscuous mode [ 461.549878][ T7695] bond1 (unregistering): (slave dummy0): Releasing active interface [ 461.549911][ T7695] dummy0: left promiscuous mode [ 461.590221][ T7695] bond1 (unregistering): Released all slaves [ 461.697928][ T7695] bond2 (unregistering): Released all slaves [ 461.850051][ T7695] bond3 (unregistering): (slave bond4): Releasing backup interface [ 461.869685][ T7695] bond3 (unregistering): Released all slaves [ 461.963707][ T7695] bond4 (unregistering): Released all slaves [ 463.032098][ T5635] Bluetooth: hci4: command tx timeout [ 463.172751][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 463.180483][ T13] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.222508][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.116198][ T5635] Bluetooth: hci4: command tx timeout [ 467.941126][ T7695] hsr_slave_0: left promiscuous mode [ 468.715323][ T7695] hsr_slave_1: left promiscuous mode [ 469.367376][ T7695] team0 (unregistering): Port device team_slave_1 removed [ 469.418145][ T7695] team0 (unregistering): Port device team_slave_0 removed [ 470.023418][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 470.092383][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.095783][T12542] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.095935][T12542] bridge_slave_0: entered allmulticast mode [ 470.101598][T12542] bridge_slave_0: entered promiscuous mode [ 470.153166][T12542] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.155743][T12542] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.155897][T12542] bridge_slave_1: entered allmulticast mode [ 470.171681][T12542] bridge_slave_1: entered promiscuous mode [ 470.253486][T12542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.257006][T12542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.318852][T12542] team0: Port device team_slave_0 added [ 470.328040][T12542] team0: Port device team_slave_1 added [ 470.385250][T12542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.385273][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.385322][T12542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.425932][T12542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.425954][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.426000][T12542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.835420][T12542] hsr_slave_0: entered promiscuous mode [ 470.844077][T12542] hsr_slave_1: entered promiscuous mode [ 470.844883][T12542] debugfs: 'hsr0' already exists in 'hsr' [ 470.844909][T12542] Cannot create hsr debugfs directory [ 470.912580][ T7695] IPVS: stop unused estimator thread 0... [ 471.542273][ T6553] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 471.693091][ T6553] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 471.695991][ T6553] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 471.696040][ T6553] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 471.696087][ T6553] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 471.696158][ T6553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.710406][T12729] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 471.710598][T12729] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 472.948863][ T6553] pegasus 3-1:1.0: probe with driver pegasus failed with error -32 [ 474.784516][T12542] netdevsim netdevsim3 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.233462][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 475.688719][T12542] netdevsim netdevsim3 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.890167][T12542] netdevsim netdevsim3 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.055228][T12542] netdevsim netdevsim3 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.137560][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 476.265135][ T5798] usb 3-1: USB disconnect, device number 7 [ 476.690484][T12800] loop2: detected capacity change from 0 to 256 [ 476.967186][T12542] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 477.015170][T12542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.016184][T12542] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 477.049778][T12542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.065021][T12542] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 477.095347][T12542] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.097997][T12542] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 477.126826][T12542] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.745579][T12542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.822773][T12542] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.879231][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.879354][ T7698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.258049][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.258182][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.608082][T12854] syzkaller0: entered promiscuous mode [ 478.608117][T12854] syzkaller0: entered allmulticast mode [ 479.899336][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 480.234232][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1715'. [ 480.863806][ T187] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 481.022838][ T187] usb 3-1: Using ep0 maxpacket: 8 [ 481.036171][ T187] usb 3-1: unable to get BOS descriptor or descriptor too short [ 481.036229][ T187] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 481.036282][ T187] usb 3-1: too many configurations: 141, using maximum allowed: 8 [ 481.039791][ T187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.039852][ T187] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.048945][ T187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.049007][ T187] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.072994][ T187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.073055][ T187] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.083616][ T187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.083681][ T187] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.088542][ T187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.088601][ T187] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.095250][ T187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.095392][ T187] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.097909][ T187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.097968][ T187] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.111315][ T187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.111552][ T187] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.120486][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.120525][ T187] usb 3-1: Product: syz [ 481.120551][ T187] usb 3-1: Manufacturer: syz [ 481.120578][ T187] usb 3-1: SerialNumber: syz [ 481.548102][ T187] usb 3-1: USB disconnect, device number 8 [ 481.817992][T12894] loop6: detected capacity change from 0 to 128 [ 482.087951][T12894] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 482.394732][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 483.036034][ T5924] IPVS: starting estimator thread 0... [ 483.052514][T12904] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1720'. [ 483.056392][T12894] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 483.122023][T12902] IPVS: using max 22 ests per chain, 52800 per kthread [ 484.123519][T12542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.568936][T12542] veth0_vlan: entered promiscuous mode [ 484.645633][T12542] veth1_vlan: entered promiscuous mode [ 484.776098][T12542] veth0_macvtap: entered promiscuous mode [ 484.801686][T12542] veth1_macvtap: entered promiscuous mode [ 484.813712][T12929] ip_tables: iptables: counters copy to user failed while replacing table [ 484.902981][T12542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.000278][T12542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.062253][ T7718] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.106089][ T7718] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.108897][ T5924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.108960][ T5924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.638759][ T7703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.638791][ T7703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.964099][ T7695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.964131][ T7695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.167190][T12957] netlink: 'syz.6.1732': attribute type 1 has an invalid length. [ 487.440097][T12957] 8021q: adding VLAN 0 to HW filter on device bond5 [ 487.569936][T12962] vlan2: entered allmulticast mode [ 487.569961][T12962] bond5: entered allmulticast mode [ 487.685407][T12964] bond5: (slave geneve2): making interface the new active one [ 487.685462][T12964] geneve2: entered allmulticast mode [ 487.705250][T12964] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 490.578151][T13020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1738'. [ 490.829615][T13028] jffs2: notice: (13028) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 491.669919][T13044] loop3: detected capacity change from 0 to 512 [ 491.706080][T13044] EXT4-fs (loop3): invalid journal inode [ 491.706172][T13044] EXT4-fs (loop3): can't get journal size [ 491.752043][T13044] EXT4-fs (loop3): 1 truncate cleaned up [ 491.758298][T13044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.384479][T13044] loop3: detected capacity change from 512 to 64 [ 493.544701][T13044] Dev loop3: unable to read RDB block 8 [ 493.545029][T13044] loop3: unable to read partition table [ 493.545319][T13044] loop_reread_partitions: partition scan of loop3 (ï5ŸA;¹8o÷Ö¤®mÝûÑÎ])Âî^\©) failed (rc=-5) [ 493.576678][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1747'. [ 493.702481][T12542] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 1: comm syz-executor: error -ENOMEM reading directory block [ 494.074551][T12542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.603155][ T7727] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.888894][ T7727] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.938858][T13087] tipc: Failed to remove unknown binding: 66,0,0/0:2949289092/2949289094 [ 494.938904][T13087] tipc: Failed to remove unknown binding: 66,0,0/0:2949289092/2949289093 [ 494.947314][T13087] tipc: Failed to remove unknown binding: 66,0,0/0:2949289092/2949289094 [ 494.947355][T13087] tipc: Failed to remove unknown binding: 66,0,0/0:2949289092/2949289093 [ 495.320896][ T7727] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.560192][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 495.575621][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 495.577154][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 495.583267][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 495.607556][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 495.729295][ T7727] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.273087][ T7725] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.817595][ T7698] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.843578][T13119] lo: entered promiscuous mode [ 496.843847][T13119] tunl0: entered promiscuous mode [ 496.844058][T13119] gre0: entered promiscuous mode [ 496.907837][T13119] 0ªî{X¹¦: entered promiscuous mode [ 496.947595][T13119] ip_vti0: entered promiscuous mode [ 496.947789][T13119] ip6_vti0: entered promiscuous mode [ 496.985278][T13119] sit0: entered promiscuous mode [ 496.985438][T13119] ip6tnl0: entered promiscuous mode [ 496.985618][T13119] ip6gre0: entered promiscuous mode [ 496.985783][T13119] syz_tun: entered promiscuous mode [ 496.985969][T13119] ip6gretap0: entered promiscuous mode [ 496.986116][T13119] bridge0: entered promiscuous mode [ 496.987620][T13119] vcan0: entered promiscuous mode [ 496.987810][T13119] bond0: entered promiscuous mode [ 496.987967][T13119] team0: entered promiscuous mode [ 497.007339][T13119] nlmon0: entered promiscuous mode [ 497.007523][T13119] vxcan0: entered promiscuous mode [ 497.007706][T13119] vxcan1: entered promiscuous mode [ 497.069740][T13119] veth0: entered promiscuous mode [ 497.079906][T13119] veth1: entered promiscuous mode [ 497.080100][T13119] wg0: entered promiscuous mode [ 497.086856][T13119] wg1: entered promiscuous mode [ 497.087049][T13119] wg2: entered promiscuous mode [ 497.087231][T13119] veth0_to_bridge: entered promiscuous mode [ 497.087429][T13119] bridge_slave_0: entered promiscuous mode [ 497.090429][T13119] veth1_to_bridge: entered promiscuous mode [ 497.090622][T13119] bridge_slave_1: entered promiscuous mode [ 497.090814][T13119] veth0_to_bond: entered promiscuous mode [ 497.090998][T13119] bond_slave_0: entered promiscuous mode [ 497.098613][T13119] veth1_to_bond: entered promiscuous mode [ 497.098813][T13119] bond_slave_1: entered promiscuous mode [ 497.098992][T13119] veth0_to_team: entered promiscuous mode [ 497.099179][T13119] team_slave_0: entered promiscuous mode [ 497.101701][T13119] veth1_to_team: entered promiscuous mode [ 497.105096][T13119] team_slave_1: entered promiscuous mode [ 497.105291][T13119] veth1_to_batadv: entered promiscuous mode [ 497.107946][T13119] batadv_slave_1: entered promiscuous mode [ 497.108131][T13119] xfrm0: entered promiscuous mode [ 497.108310][T13119] veth0_to_hsr: entered promiscuous mode [ 497.115560][T13119] veth1_to_hsr: entered promiscuous mode [ 497.120088][T13129] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1768'. [ 497.123853][T13119] hsr0: entered promiscuous mode [ 497.137818][T13119] veth1_virt_wifi: entered promiscuous mode [ 497.138026][T13119] veth0_virt_wifi: entered promiscuous mode [ 497.138211][T13119] virt_wifi0: entered promiscuous mode [ 497.138752][T13119] vlan0: entered promiscuous mode [ 497.139110][T13119] vlan1: entered promiscuous mode [ 497.148264][T13119] macvlan0: entered promiscuous mode [ 497.148907][T13119] macvlan1: entered promiscuous mode [ 497.149238][T13119] ipvlan0: entered promiscuous mode [ 497.149423][T13119] ipvlan1: entered promiscuous mode [ 497.149935][T13119] macvtap0: entered promiscuous mode [ 497.154051][T13119] macsec0: entered promiscuous mode [ 497.154206][T13119] geneve0: entered promiscuous mode [ 497.154393][T13119] geneve1: entered promiscuous mode [ 497.154582][T13119] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 497.154753][T13119] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 497.157026][T13119] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 497.157202][T13119] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 497.158232][T13119] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 497.159616][T13119] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 497.215517][T13119] bond1: entered promiscuous mode [ 497.220145][T13119] bond2: entered promiscuous mode [ 497.258065][T13119] bond3: entered promiscuous mode [ 497.258931][T13119] bond4: entered promiscuous mode [ 497.279401][T13119] bond5: entered promiscuous mode [ 497.284377][T13119] vxlan0: entered promiscuous mode [ 497.284539][T13119] veth2: entered promiscuous mode [ 497.288969][T13119] veth3: entered promiscuous mode [ 497.457483][T13129] ip6gre1: entered promiscuous mode [ 497.457515][T13129] ip6gre1: entered allmulticast mode [ 497.460606][T13132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1768'. [ 497.463149][ T7698] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.555865][ T5917] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.623877][ T7727] bridge_slave_1: left allmulticast mode [ 497.623911][ T7727] bridge_slave_1: left promiscuous mode [ 497.624145][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.676719][ T7727] bridge_slave_0: left allmulticast mode [ 497.676749][ T7727] bridge_slave_0: left promiscuous mode [ 497.676973][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.780905][ T5637] Bluetooth: hci6: unexpected event for opcode 0x041b [ 497.833049][ T5637] Bluetooth: hci0: command tx timeout [ 498.153567][ T31] audit: type=1804 audit(1790160118.227:187): pid=13147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1772" name="bus" dev="ramfs" ino=37789 res=1 errno=0 [ 498.154888][ T31] audit: type=1804 audit(1790160118.227:188): pid=13147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1772" name="bus" dev="ramfs" ino=37789 res=1 errno=0 [ 498.691369][ T7727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.717121][ T7727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.726377][ T7727] bond0 (unregistering): Released all slaves [ 499.537423][T13172] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 499.912004][ T5637] Bluetooth: hci0: command tx timeout [ 500.498804][T13194] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 500.798595][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.798667][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.743346][T13209] 9p: Could not find request transport: x0000°00000004e24 [ 501.992343][ T5637] Bluetooth: hci0: command tx timeout [ 502.534611][ T7727] hsr_slave_0: left promiscuous mode [ 502.592701][T13226] 9pnet_virtio: no channels available for device 127.0.0.1 [ 503.267864][ T7727] hsr_slave_1: left promiscuous mode [ 503.268868][ T7727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.268896][ T7727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.316510][ T7727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.316538][ T7727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.475054][ T7727] veth1_macvtap: left promiscuous mode [ 503.475101][ T7727] veth0_macvtap: left promiscuous mode [ 503.475257][ T7727] veth1_vlan: left promiscuous mode [ 503.475345][ T7727] veth0_vlan: left promiscuous mode [ 504.305749][ T5637] Bluetooth: hci0: command tx timeout [ 506.171830][ T7727] team0 (unregistering): Port device team_slave_1 removed [ 506.248613][ T7727] team0 (unregistering): Port device team_slave_0 removed [ 506.976200][T13257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.978093][T13257] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.305945][T13257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.305986][T13257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.466966][T13257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.474966][T13257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.492167][T13276] netlink: 'syz.6.1798': attribute type 1 has an invalid length. [ 507.495748][T13257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.504654][T13257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.521295][T13257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.531721][T13257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.546811][T13257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 507.548283][ T35] bond4: (slave bridge1): link status down again after 0 ms [ 507.561936][ T35] bond4: (slave bridge1): link status down again after 0 ms [ 507.570760][T13257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.582484][ T35] bond4: (slave bridge1): link status down again after 0 ms [ 507.596747][T13257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 507.624986][ T3370] bond4: (slave bridge1): link status definitely up, 0 Mbps full duplex [ 507.658311][ T3370] bond4: active interface up! [ 507.812642][ T5924] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.812700][ T5924] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.812904][ T5924] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.812957][ T5924] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.918065][ T7686] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.918122][ T7686] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.919941][ T35] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.919986][ T35] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.159914][T13276] 8021q: adding VLAN 0 to HW filter on device bond6 [ 508.241442][T13277] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 508.271155][T13278] bond6: entered promiscuous mode [ 508.271185][T13278] bond6: entered allmulticast mode [ 509.167004][T13103] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.168814][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.169020][T13103] bridge_slave_0: entered allmulticast mode [ 509.176527][T13103] bridge_slave_0: entered promiscuous mode [ 509.183487][T13103] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.184653][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.229438][T13103] bridge_slave_1: entered allmulticast mode [ 509.244321][T13103] bridge_slave_1: entered promiscuous mode [ 509.377714][T13103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.381635][T13103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.582874][T13103] team0: Port device team_slave_0 added [ 509.607199][T13103] team0: Port device team_slave_1 added [ 510.690288][T13103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.690316][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.690364][T13103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.693302][T13103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.693324][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.693370][T13103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.892142][T13103] hsr_slave_0: entered promiscuous mode [ 510.893524][T13103] hsr_slave_1: entered promiscuous mode [ 510.896956][T13103] debugfs: 'hsr0' already exists in 'hsr' [ 510.896984][T13103] Cannot create hsr debugfs directory [ 512.328475][T13337] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 513.002988][T13103] netdevsim netdevsim1 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.178419][T13357] tipc: Enabling of bearer rejected, failed to enable media [ 514.304794][T13103] netdevsim netdevsim1 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.403655][T13366] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 516.265299][T13103] netdevsim netdevsim1 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.578267][T13103] netdevsim netdevsim1 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.829955][ T31] audit: type=1800 audit(1790160136.887:189): pid=13404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1830" name="file1" dev="tmpfs" ino=1560 res=0 errno=0 [ 517.009365][T13103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 517.025107][T13103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.026500][T13103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 517.053148][T13103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.055723][T13103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 517.346141][T13103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.363244][T13103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 517.954325][T13103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.495837][T13103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.589701][T13103] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.643289][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.643381][ T7708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.707291][ T7708] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.707420][ T7708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.166392][T13445] loop2: detected capacity change from 0 to 64 [ 522.374160][T13475] xt_hashlimit: size too large, truncated to 1048576 [ 522.434954][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1846'. [ 522.670987][T13485] bridge1: port 1(veth3) entered blocking state [ 522.674469][T13485] bridge1: port 1(veth3) entered disabled state [ 522.674644][T13485] veth3: entered allmulticast mode [ 522.716425][T13485] veth3: entered promiscuous mode [ 522.744448][T13483] bridge1: port 2(veth0_to_bond) entered blocking state [ 522.744586][T13483] bridge1: port 2(veth0_to_bond) entered disabled state [ 522.744753][T13483] veth0_to_bond: entered allmulticast mode [ 522.795623][T13483] veth0_to_bond: entered promiscuous mode [ 523.620496][T13103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.739710][T13103] veth0_vlan: entered promiscuous mode [ 523.753928][T13511] loop6: detected capacity change from 0 to 64 [ 523.792562][T13103] veth1_vlan: entered promiscuous mode [ 524.188624][T13103] veth0_macvtap: entered promiscuous mode [ 524.201651][T13103] veth1_macvtap: entered promiscuous mode [ 525.162229][T13103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.188633][T13103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.374573][ T7686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.375392][ T7686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.375455][ T7686] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.375514][ T7686] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.976509][ T7725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.976540][ T7725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.226473][ T7698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.226505][ T7698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.147522][T13572] batman_adv: batadv0: Adding interface: dummy0 [ 528.147548][T13572] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.147804][T13572] batman_adv: batadv0: Interface activated: dummy0 [ 528.418092][T13575] batadv0: mtu less than device minimum [ 528.421046][T13575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.423365][T13575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.424997][T13575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.426614][T13575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.428219][T13575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.429831][T13575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.431431][T13575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.433078][T13575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.434672][T13575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 529.875418][T13613] wg2: entered allmulticast mode [ 529.950745][T13615] gre1: entered promiscuous mode [ 533.172199][T13662] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 533.731546][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053627000: rx timeout, send abort [ 533.781894][ T6557] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 533.933368][ T6557] usb 3-1: Using ep0 maxpacket: 32 [ 533.938071][ T6557] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 533.944065][ T6557] usb 3-1: config 0 has no interfaces? [ 533.955352][ T6557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.955392][ T6557] usb 3-1: Product: syz [ 533.955418][ T6557] usb 3-1: Manufacturer: syz [ 533.955445][ T6557] usb 3-1: SerialNumber: syz [ 533.995066][ T6557] usb 3-1: config 0 descriptor?? [ 534.232586][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053627800: rx timeout, send abort [ 534.232684][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053627000: abort rx timeout. Force session deactivation [ 534.372717][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888053627800: connection exists (fe ff). last cmd: 20 [ 534.572918][T13697] netlink: 'syz.7.1896': attribute type 2 has an invalid length. [ 534.572949][T13697] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1896'. [ 534.622485][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054c13c00: rx timeout, send abort [ 534.631231][ T6560] usb 3-1: USB disconnect, device number 9 [ 534.681121][T13698] netlink: 'syz.7.1896': attribute type 2 has an invalid length. [ 534.681148][T13698] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1896'. [ 534.725111][T13697] : entered promiscuous mode [ 535.122545][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054c13c00: abort rx timeout. Force session deactivation [ 536.447574][T13722] ±ÿir=.,uppe: entered promiscuous mode [ 536.697915][T13722] tunl0: entered promiscuous mode [ 536.708738][T13722] gre0: entered promiscuous mode [ 536.740022][T13722] 0ªî{X¹¦: entered promiscuous mode [ 536.749206][T13722] erspan0: entered promiscuous mode [ 536.753714][T13722] ip_vti0: entered promiscuous mode [ 536.760202][T13722] ip6_vti0: entered promiscuous mode [ 536.772322][T13722] sit0: entered promiscuous mode [ 536.797772][T13722] ip6tnl0: entered promiscuous mode [ 536.820896][T13722] ip6gre0: entered promiscuous mode [ 536.846224][T13722] ip6gretap0: entered promiscuous mode [ 536.895654][T13722] bridge0: entered promiscuous mode [ 536.931578][T13722] vcan0: entered promiscuous mode [ 536.956275][T13722] bond0: entered promiscuous mode [ 537.004561][T13722] team0: entered promiscuous mode [ 537.019657][T13722] dummy0: entered promiscuous mode [ 537.048209][T13722] nlmon0: entered promiscuous mode [ 537.058220][T13722] batadv0: entered promiscuous mode [ 537.058603][T13722] veth0: entered promiscuous mode [ 537.078724][T13722] veth1: entered promiscuous mode [ 537.105870][T13722] wg0: entered promiscuous mode [ 537.147225][T13722] wg2: entered promiscuous mode [ 537.161103][T13722] veth0_to_bridge: entered promiscuous mode [ 537.182361][T13722] bridge_slave_0: entered promiscuous mode [ 537.185026][T13722] veth1_to_bridge: entered promiscuous mode [ 537.188425][T13722] bridge_slave_1: entered promiscuous mode [ 537.209967][T13722] veth0_to_bond: entered promiscuous mode [ 537.211231][T13722] bond_slave_0: entered promiscuous mode [ 537.224980][T13722] veth1_to_bond: entered promiscuous mode [ 537.230733][T13722] bond_slave_1: entered promiscuous mode [ 537.231543][T13722] veth0_to_team: entered promiscuous mode [ 537.254835][T13722] team_slave_0: entered promiscuous mode [ 537.255265][T13722] veth1_to_team: entered promiscuous mode [ 537.260878][T13722] team_slave_1: entered promiscuous mode [ 537.261216][T13722] veth0_to_batadv: entered promiscuous mode [ 537.308673][T13722] batadv_slave_0: entered promiscuous mode [ 537.335219][T13722] xfrm0: entered promiscuous mode [ 537.362790][T13722] veth0_to_hsr: entered promiscuous mode [ 537.404412][T13722] veth1_to_hsr: entered promiscuous mode [ 537.465275][T13722] hsr0: entered promiscuous mode [ 537.524811][T13722] veth1_virt_wifi: entered promiscuous mode [ 537.539402][T13722] veth0_virt_wifi: entered promiscuous mode [ 537.570244][T13722] virt_wifi0: entered promiscuous mode [ 537.650673][T13722] vlan0: entered promiscuous mode [ 537.685507][T13722] vlan1: entered promiscuous mode [ 537.766195][T13762] FAULT_INJECTION: forcing a failure. [ 537.766195][T13762] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 537.766250][T13762] CPU: 0 UID: 0 PID: 13762 Comm: syz.4.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.766310][T13762] Tainted: [L]=SOFTLOCKUP [ 537.766324][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 537.766349][T13762] Call Trace: [ 537.766362][T13762] [ 537.766376][T13762] dump_stack_lvl+0x100/0x190 [ 537.766437][T13762] should_fail_ex.cold+0x5/0xa [ 537.766484][T13762] ? prepare_alloc_pages+0x16d/0x5b0 [ 537.766532][T13762] should_fail_alloc_page+0xeb/0x140 [ 537.766577][T13762] prepare_alloc_pages+0x1f0/0x5b0 [ 537.766617][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.766665][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.766725][T13762] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 537.766801][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.766848][T13762] ? stack_trace_save+0x8e/0xc0 [ 537.766910][T13762] ? __pfx_stack_trace_save+0x10/0x10 [ 537.766972][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.767019][T13762] ? stack_depot_save_flags+0x27/0x9f0 [ 537.767083][T13762] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 537.767145][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.767192][T13762] ? kasan_save_stack+0x3f/0x50 [ 537.767252][T13762] ? kasan_save_stack+0x30/0x50 [ 537.767312][T13762] ? kasan_save_track+0x14/0x30 [ 537.767371][T13762] ? __kasan_kmalloc+0xaa/0xb0 [ 537.767430][T13762] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 537.767479][T13762] ? mon_bin_open+0x1a8/0x470 [ 537.767529][T13762] ? chrdev_open+0x234/0x6a0 [ 537.767564][T13762] ? do_dentry_open+0x6ab/0x14d0 [ 537.767620][T13762] ? vfs_open+0x82/0x3f0 [ 537.767658][T13762] ? path_openat+0x19fa/0x2440 [ 537.767702][T13762] ? do_file_open+0x20e/0x430 [ 537.767738][T13762] ? do_sys_openat2+0x10f/0x1e0 [ 537.767779][T13762] ? __x64_sys_openat+0x12d/0x210 [ 537.767823][T13762] ? do_syscall_64+0x123/0x790 [ 537.767862][T13762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.767927][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.767975][T13762] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 537.768020][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.768067][T13762] ? policy_nodemask+0xed/0x4f0 [ 537.768115][T13762] alloc_pages_mpol+0x201/0x550 [ 537.768159][T13762] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 537.768207][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.768261][T13762] alloc_pages_noprof+0x1a/0x160 [ 537.768312][T13762] get_zeroed_page_noprof+0x18/0xb0 [ 537.768350][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.768399][T13762] mon_alloc_buff+0xce/0x1b0 [ 537.768456][T13762] mon_bin_open+0x207/0x470 [ 537.768508][T13762] ? __pfx_mon_bin_open+0x10/0x10 [ 537.768560][T13762] chrdev_open+0x234/0x6a0 [ 537.768600][T13762] ? __pfx_chrdev_open+0x10/0x10 [ 537.768640][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.768687][T13762] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 537.768754][T13762] do_dentry_open+0x6ab/0x14d0 [ 537.768812][T13762] ? __pfx_chrdev_open+0x10/0x10 [ 537.768853][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.768907][T13762] vfs_open+0x82/0x3f0 [ 537.768947][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.769003][T13762] path_openat+0x19fa/0x2440 [ 537.769050][T13762] ? __pfx_path_openat+0x10/0x10 [ 537.769105][T13762] do_file_open+0x20e/0x430 [ 537.769150][T13762] ? __pfx_do_file_open+0x10/0x10 [ 537.769225][T13762] ? _raw_spin_unlock+0x28/0x50 [ 537.769285][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.769333][T13762] ? alloc_fd+0x471/0x7a0 [ 537.769387][T13762] do_sys_openat2+0x10f/0x1e0 [ 537.769433][T13762] ? __pfx_do_sys_openat2+0x10/0x10 [ 537.769476][T13762] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 537.769558][T13762] __x64_sys_openat+0x12d/0x210 [ 537.769606][T13762] ? __pfx___x64_sys_openat+0x10/0x10 [ 537.769657][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.769714][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.769770][T13762] do_syscall_64+0x123/0x790 [ 537.769817][T13762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.769853][T13762] RIP: 0033:0x7f285635e98e [ 537.769880][T13762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 537.769917][T13762] RSP: 002b:00007f28571c5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.769953][T13762] RAX: ffffffffffffffda RBX: 00007f28571c66c0 RCX: 00007f285635e98e [ 537.769979][T13762] RDX: 0000000000008001 RSI: 00007f28571c5c00 RDI: ffffffffffffff9c [ 537.770004][T13762] RBP: 00007f28571c5c00 R08: 0000000000000000 R09: 0000000000000000 [ 537.770026][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 537.770047][T13762] R13: 00007f2856626038 R14: 00007f2856625fa0 R15: 00007ffdbcfb9b78 [ 537.770093][T13762] [ 537.770961][T13722] macvlan0: entered promiscuous mode [ 537.911713][T13722] macvlan1: entered promiscuous mode [ 538.003534][T13722] ipvlan0: entered promiscuous mode [ 538.003738][T13722] ipvlan1: entered promiscuous mode [ 538.240619][T13722] macvtap0: entered promiscuous mode [ 538.296568][T13722] macsec0: entered promiscuous mode [ 538.299594][T13722] geneve0: entered promiscuous mode [ 538.313290][T13722] geneve1: entered promiscuous mode [ 538.381435][T13722] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 538.508400][T13722] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 538.564897][T13722] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 538.613429][T13722] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 538.677224][T13722] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 538.709856][T13722] syzkaller0: entered promiscuous mode [ 538.710835][T13722] sit1: entered promiscuous mode [ 538.743055][T13722] mac80211_hwsim hwsim20 wlan2: entered promiscuous mode [ 538.743254][T13722] bond1: entered promiscuous mode [ 538.744076][T13722] : entered promiscuous mode [ 538.759849][T13722] bridge1: entered promiscuous mode [ 538.790570][T13722] bond2: entered promiscuous mode [ 538.799488][T13722] bond3: entered promiscuous mode [ 538.799740][T13722] ipip0: entered promiscuous mode [ 538.800854][T13722] pimreg: entered promiscuous mode [ 538.834711][T13722] bond4: entered promiscuous mode [ 538.840286][T13722] veth2: entered promiscuous mode [ 538.858355][T13722] veth3: entered promiscuous mode [ 538.870679][T13722] bridge2: entered promiscuous mode [ 538.890503][T13722] bond5: entered promiscuous mode [ 538.890530][T13722] geneve2: entered promiscuous mode [ 538.903901][T13722] vlan2: entered promiscuous mode [ 538.910699][T13735] lo: entered promiscuous mode [ 538.947179][T13735] tunl0: entered promiscuous mode [ 538.970820][T13735] gre0: entered promiscuous mode [ 539.033610][T13735] gretap0: entered promiscuous mode [ 539.096111][T13735] erspan0: entered promiscuous mode [ 539.109810][T13735] ip_vti0: entered promiscuous mode [ 539.120898][T13735] ip6_vti0: entered promiscuous mode [ 539.133085][T13735] sit0: entered promiscuous mode [ 539.136539][T13735] ip6tnl0: entered promiscuous mode [ 539.226024][T13735] ip6gre0: entered promiscuous mode [ 539.306826][T13735] syz_tun: entered promiscuous mode [ 539.420180][T13735] ip6gretap0: entered promiscuous mode [ 539.443432][T13735] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.444081][T13735] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.455108][T13735] bridge0: entered promiscuous mode [ 539.489984][T13735] vcan0: entered promiscuous mode [ 539.519159][T13735] bond0: entered promiscuous mode [ 539.519195][T13735] bond_slave_0: entered promiscuous mode [ 539.519411][T13735] bond_slave_1: entered promiscuous mode [ 539.545199][T13735] team0: entered promiscuous mode [ 539.545225][T13735] team_slave_0: entered promiscuous mode [ 539.545469][T13735] team_slave_1: entered promiscuous mode [ 539.599143][T13735] dummy0: entered promiscuous mode [ 539.627982][T13735] nlmon0: entered promiscuous mode [ 539.638804][T13735] batadv0: entered promiscuous mode [ 539.653819][T13735] vxcan0: entered promiscuous mode [ 539.682130][T13735] vxcan1: entered promiscuous mode [ 539.683419][T13735] veth0: entered promiscuous mode [ 539.686993][T13735] veth1: entered promiscuous mode [ 539.726526][T13735] wg0: entered promiscuous mode [ 539.768921][T13735] wg1: entered promiscuous mode [ 539.848138][T13735] wg2: entered promiscuous mode [ 539.871650][T13735] veth0_to_bridge: entered promiscuous mode [ 539.960604][T13735] veth1_to_bridge: entered promiscuous mode [ 540.014640][T13735] veth0_to_bond: entered promiscuous mode [ 540.056978][T13735] veth1_to_bond: entered promiscuous mode [ 540.089888][T13735] veth0_to_team: entered promiscuous mode [ 540.149243][T13735] veth1_to_team: entered promiscuous mode [ 540.215629][T13735] veth0_to_batadv: entered promiscuous mode [ 540.244947][T13735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.246781][T13735] batadv_slave_0: entered promiscuous mode [ 540.267430][T13735] veth1_to_batadv: entered promiscuous mode [ 540.299110][T13735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.299174][T13735] batadv_slave_1: entered promiscuous mode [ 540.326399][T13735] xfrm0: entered promiscuous mode [ 540.349060][T13735] veth0_to_hsr: entered promiscuous mode [ 540.385349][T13735] veth1_to_hsr: entered promiscuous mode [ 540.440666][T13735] hsr0: entered promiscuous mode [ 540.463316][T13735] veth1_virt_wifi: entered promiscuous mode [ 540.504476][T13735] veth0_virt_wifi: entered promiscuous mode [ 540.527680][T13735] virt_wifi0: entered promiscuous mode [ 540.578626][T13735] vlan0: entered promiscuous mode [ 540.601027][T13735] vlan1: entered promiscuous mode [ 540.679714][T13735] macvlan0: entered promiscuous mode [ 540.749805][T13735] macvlan1: entered promiscuous mode [ 540.778496][T13735] ipvlan0: entered promiscuous mode [ 540.788354][T13735] ipvlan1: entered promiscuous mode [ 540.900637][T13735] macvtap0: entered promiscuous mode [ 540.924059][T13735] macsec0: entered promiscuous mode [ 540.955262][T13735] geneve0: entered promiscuous mode [ 540.979748][T13735] geneve1: entered promiscuous mode [ 541.024521][T13735] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 541.050141][T13735] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 541.076450][T13735] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 541.095035][T13735] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 541.134128][T13735] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 541.165141][T13735] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 541.175379][ T7708] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.175432][ T7708] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.175508][ T7708] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.175569][ T7708] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.175630][ T7708] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.175689][ T7708] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.282119][ T59] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.282177][ T59] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.282490][ T7727] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.282544][ T7727] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.282700][ T7727] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.282760][ T7727] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.987716][ T5637] Bluetooth: hci4: status 0x01 [ 541.988853][ T5637] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 541.990057][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 1 < 9 [ 541.993863][ T5635] Bluetooth: hci4: Opcode 0x1003 failed: -38 [ 542.086381][T13827] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 542.186620][T13835] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 542.405605][T13843] xt_TPROXY: Can be used only with -p tcp or -p udp [ 542.459705][T13843] loop2: detected capacity change from 0 to 512 [ 542.505297][T13843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.505417][T13843] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.903523][T13823] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 543.014463][ T8610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.245990][T13862] overlayfs: failed to clone upperpath [ 543.731360][ T5924] IPVS: starting estimator thread 0... [ 543.852768][T13882] IPVS: using max 22 ests per chain, 52800 per kthread [ 544.331257][T13892] loop2: detected capacity change from 0 to 2640 [ 544.348772][T13892] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.351235][T13892] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.351579][T13892] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.359882][T13892] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.360014][T13892] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.360189][T13892] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.360528][T13892] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.360784][T13892] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.360827][T13892] ldm_validate_partition_table(): Disk read failed. [ 544.361021][T13892] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.361226][T13892] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.362427][T13892] Dev loop2: unable to read RDB block 0 [ 544.368187][T13892] loop2: unable to read partition table [ 544.369928][T13892] loop_reread_partitions: partition scan of loop2 (3Ÿ ¾‚³˜) failed (rc=-5) [ 545.945150][T13742] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 546.841895][T13742] usb 3-1: Using ep0 maxpacket: 32 [ 546.842747][T13742] usb 3-1: New USB device found, idVendor=05ac, idProduct=1871, bcdDevice=82.84 [ 546.844225][T13742] usb 3-1: config 7 has an invalid interface number: 149 but max is 0 [ 546.844266][T13742] usb 3-1: config 7 has no interface number 0 [ 546.844310][T13742] usb 3-1: config 7 interface 149 has no altsetting 0 [ 546.881929][T13742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.881968][T13742] usb 3-1: Product: syz [ 546.881995][T13742] usb 3-1: Manufacturer: syz [ 546.882022][T13742] usb 3-1: SerialNumber: syz [ 547.210618][T13742] usb 3-1: USB disconnect, device number 10 [ 547.421925][T13828] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 547.427449][T13930] Bluetooth: MGMT ver 1.23 [ 548.758556][T13945] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 550.728567][T13992] fuse: Bad value for 'fd' [ 550.776855][T13990] overlayfs: failed to clone upperpath [ 552.271115][T14005] veth0_to_bond: left allmulticast mode [ 552.271150][T14005] veth0_to_bond: left promiscuous mode [ 552.271381][T14005] bridge1: port 2(veth0_to_bond) entered disabled state [ 552.489559][T14005] net_ratelimit: 12 callbacks suppressed [ 552.489586][T14005] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 552.543819][T14007] team0: Port device xfrm0 added [ 552.544027][T14010] tipc: Started in network mode [ 552.544068][T14010] tipc: Node identity c23321ba94ce, cluster identity 4711 [ 552.544258][T14010] tipc: Enabled bearer , priority 0 [ 552.767764][T14016] loop2: detected capacity change from 0 to 128 [ 552.930994][T14016] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 553.644049][T14016] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 553.817753][ T9] tipc: Node number set to 1459429818 [ 553.936454][ T8610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 554.946254][T14009] loop6: detected capacity change from 0 to 32768 [ 554.949910][T14009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1964 (14009) [ 554.996074][T14009] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 554.996122][T14009] BTRFS info (device loop6): using crc32c checksum algorithm [ 555.135123][T14009] BTRFS info (device loop6): enabling ssd optimizations [ 555.135162][T14009] BTRFS info (device loop6): turning on flush-on-commit [ 555.135192][T14009] BTRFS info (device loop6): enabling free space tree [ 555.135220][T14009] BTRFS info (device loop6): enabling auto defrag [ 555.135250][T14009] BTRFS info (device loop6): use lzo compression, level 1 [ 555.135287][T14009] BTRFS info (device loop6): max_inline set to 4096 [ 555.293129][ T31] audit: type=1800 audit(1790160174.370:190): pid=14009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1964" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 555.918265][ T5921] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 557.118092][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1981'. [ 559.404019][T13828] Bluetooth: hci4: status 0x01 [ 559.406651][T13828] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 559.406776][T13828] Bluetooth: hci4: unexpected cc 0x1003 length: 1 < 9 [ 559.407776][ T4932] Bluetooth: hci4: Opcode 0x1003 failed: -38 [ 559.520383][T14080] gretap1: left promiscuous mode [ 559.537359][T14080] gre1: left promiscuous mode [ 559.588488][T14083] 8021q: adding VLAN 0 to HW filter on device bond4 [ 559.601197][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 559.603464][ T3370] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.603544][ T3370] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.603605][ T3370] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.603666][ T3370] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.652463][T14098] macsec0: entered allmulticast mode [ 559.674123][T14101] veth1_macvtap: entered allmulticast mode [ 559.674409][T14101] macsec0: left promiscuous mode [ 559.674619][T14101] macsec0: left allmulticast mode [ 559.674643][T14101] veth1_macvtap: left allmulticast mode [ 560.223490][T14104] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 560.742120][T13743] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 561.124940][T14126] vlan3: entered promiscuous mode [ 561.125217][T14126] vlan3: entered allmulticast mode [ 561.125242][T14126] hsr0: entered allmulticast mode [ 561.125266][T14126] hsr_slave_0: entered allmulticast mode [ 561.125292][T14126] hsr_slave_1: entered allmulticast mode [ 562.248465][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.248543][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.666993][T13743] usb 7-1: unable to get BOS descriptor or descriptor too short [ 562.667888][T13743] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 562.668807][T13743] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 562.668855][T13743] usb 7-1: can't read configurations, error -71 [ 562.947296][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 564.282943][T14192] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 568.670217][T14242] netlink: 'syz.6.2016': attribute type 3 has an invalid length. [ 569.094853][ T31] audit: type=1326 audit(1790160188.170:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.1.2017" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efe99e159 code=0x7ffc0000 [ 569.096586][ T31] audit: type=1326 audit(1790160188.170:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.1.2017" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efe99e159 code=0x7ffc0000 [ 569.122638][ T31] audit: type=1326 audit(1790160188.170:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.1.2017" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f1efe99e159 code=0x7ffc0000 [ 569.122721][ T31] audit: type=1326 audit(1790160188.170:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.1.2017" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efe99e159 code=0x7ffc0000 [ 569.122793][ T31] audit: type=1326 audit(1790160188.170:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.1.2017" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efe99e159 code=0x7ffc0000 [ 569.146030][ T31] audit: type=1326 audit(1790160188.200:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.1.2017" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f1efe99e159 code=0x7ffc0000 [ 569.150979][ T31] audit: type=1326 audit(1790160188.200:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.1.2017" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efe99e159 code=0x7ffc0000 [ 569.151054][ T31] audit: type=1326 audit(1790160188.200:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.1.2017" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efe99e159 code=0x7ffc0000 [ 569.169395][ T31] audit: type=1326 audit(1790160188.230:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.1.2017" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1efe99e159 code=0x7ffc0000 [ 569.169471][ T31] audit: type=1326 audit(1790160188.230:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.1.2017" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efe99e159 code=0x7ffc0000 [ 569.457708][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2022'. [ 569.661071][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 569.692128][ T3370] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.692732][ T7727] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.692799][ T7727] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.692856][ T7727] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.022307][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 575.193736][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 578.547806][T14386] loop4: detected capacity change from 0 to 8 [ 578.767039][T14372] SQUASHFS error: Unable to read directory block [1d0:0] [ 580.519586][T14417] fuse: fd is not a fuse device [ 583.901616][T14470] fuse: Bad value for 'fd' [ 587.739507][T14522] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2085'. [ 587.972009][T14527] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 588.764764][T14545] bridge_slave_0: left allmulticast mode [ 588.765029][T14545] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.799193][T14545] bridge_slave_1: left allmulticast mode [ 588.799464][T14545] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.854432][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 588.854480][ T31] audit: type=1326 audit(1790160207.930:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.7.2093" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 588.854629][ T31] audit: type=1326 audit(1790160207.930:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.7.2093" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 588.860337][ T31] audit: type=1326 audit(1790160207.930:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.7.2093" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 588.860416][ T31] audit: type=1326 audit(1790160207.930:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.7.2093" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 588.860492][ T31] audit: type=1326 audit(1790160207.930:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.7.2093" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 588.860567][ T31] audit: type=1326 audit(1790160207.930:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.7.2093" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 588.860637][ T31] audit: type=1326 audit(1790160207.930:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.7.2093" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 588.861961][ T31] audit: type=1326 audit(1790160207.930:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.7.2093" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 588.862040][ T31] audit: type=1326 audit(1790160207.930:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.7.2093" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 588.862113][ T31] audit: type=1326 audit(1790160207.930:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.7.2093" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 588.929170][T14545] bond0: (slave bond_slave_0): Releasing backup interface [ 589.160203][T14545] bond0: (slave bond_slave_1): Releasing backup interface [ 589.241009][T14545] team0: Port device team_slave_0 removed [ 589.288752][T14545] team0: Port device team_slave_1 removed [ 589.289313][T14545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.320249][T14545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.347710][T14545] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 589.605649][T14560] fuse: fd is not a fuse device [ 593.146586][T14622] loop4: detected capacity change from 0 to 512 [ 593.181563][T14622] EXT4-fs (loop4): invalid #clusters per group: 95 [ 593.185405][T14623] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 595.386048][T14652] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 595.482615][T14659] netlink: 'syz.2.2121': attribute type 1 has an invalid length. [ 595.587520][T14659] veth7: entered allmulticast mode [ 595.600209][T14659] bond5: (slave veth7): Enslaving as an active interface with a down link [ 595.695552][T14659] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 597.563664][T14684] fuse: Bad value for 'fd' [ 599.106077][T14706] syzkaller0: entered promiscuous mode [ 599.106112][T14706] syzkaller0: entered allmulticast mode [ 599.140166][T14706] tipc: Started in network mode [ 599.140210][T14706] tipc: Node identity 6670aef8eaf7, cluster identity 4711 [ 599.158958][T14706] tipc: Enabled bearer , priority 0 [ 599.179026][T14704] tipc: Resetting bearer [ 599.299904][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 599.299940][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 599.354735][T14704] tipc: Disabling bearer [ 605.715646][T14798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 606.240169][T14806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2154'. [ 608.002795][T14846] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 608.002829][T14846] overlayfs: failed to set xattr on upper [ 608.002842][T14846] overlayfs: ...falling back to redirect_dir=nofollow. [ 608.002856][T14846] overlayfs: ...falling back to index=off. [ 608.002869][T14846] overlayfs: ...falling back to uuid=null. [ 608.062915][T14846] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 609.415519][T14863] loop4: detected capacity change from 0 to 128 [ 609.641955][T14863] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 609.643953][T14863] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 610.566897][T10654] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 612.747632][T14897] fuse: fd is not a fuse device [ 617.728182][T14955] overlayfs: failed to clone upperpath [ 617.815135][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 618.022970][T14964] loop4: detected capacity change from 0 to 512 [ 618.079968][T14964] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 622.120281][ T4932] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 622.156772][T15000] Bluetooth: ISO socket layer initialized [ 622.592962][T13742] kernel write not supported for file [eventfd] (pid: 13742 comm: kworker/1:6) [ 622.923318][T15018] sch_fq: defrate 4294967295 ignored. [ 622.941962][T15018] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2205'. [ 622.941993][T15018] openvswitch: netlink: Flow actions attr not present in new flow. [ 623.336862][T15024] tipc: Cannot configure node identity twice [ 623.678558][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.678636][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.828360][T15068] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 627.132940][T15069] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2219'. [ 627.426157][T15090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.519327][T15069] bond4: (slave dummy0): Releasing active interface [ 628.236860][T15093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.355124][T15093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.410074][T15090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.690010][T15100] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2225'. [ 629.189153][T15111] o2cb: This node has not been configured. [ 629.189174][T15111] o2cb: Cluster check failed. Fix errors before retrying. [ 629.189219][T15111] (syz.1.2226,15111,0):user_dlm_register:674 ERROR: status = -22 [ 629.189270][T15111] (syz.1.2226,15111,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 629.771108][T15104] bond6 (unregistering): Released all slaves [ 629.871401][T15100] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 631.700843][T15144] netlink: 'syz.2.2233': attribute type 1 has an invalid length. [ 634.127291][T15187] capability: warning: `syz.5.2244' uses 32-bit capabilities (legacy support in use) [ 640.259309][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 640.259337][ T31] audit: type=1326 audit(1790160259.330:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.5.2260" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd74b9e159 code=0x0 [ 640.741972][ T6560] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 640.893086][ T6560] usb 2-1: Using ep0 maxpacket: 8 [ 640.894736][ T6560] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 640.899489][ T6560] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 640.899555][ T6560] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 640.899596][ T6560] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 640.899641][ T6560] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 640.899685][ T6560] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.899750][ T6560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.200298][ T6560] usb 2-1: usb_control_msg returned -32 [ 641.200351][ T6560] usbtmc 2-1:16.0: can't read capabilities [ 641.265420][T15280] xt_HMARK: spi-set and port-set can't be combined [ 641.370561][ T31] audit: type=1326 audit(1790160260.440:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15279 comm="syz.2.2266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0228b9e159 code=0x0 [ 643.604304][T13743] usb 2-1: USB disconnect, device number 3 [ 644.855630][T15359] tipc: Enabling of bearer rejected, failed to enable media [ 645.877285][ T31] audit: type=1326 audit(1790160264.950:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.2286" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285639e159 code=0x7ffc0000 [ 645.877369][ T31] audit: type=1326 audit(1790160264.950:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.2286" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285639e159 code=0x7ffc0000 [ 645.907911][ T31] audit: type=1326 audit(1790160264.970:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.2286" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f285639e159 code=0x7ffc0000 [ 645.907991][ T31] audit: type=1326 audit(1790160264.970:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.2286" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285639e159 code=0x7ffc0000 [ 645.908063][ T31] audit: type=1326 audit(1790160264.970:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.2286" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285639e159 code=0x7ffc0000 [ 645.921978][ T31] audit: type=1326 audit(1790160264.990:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.2286" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f285639e159 code=0x7ffc0000 [ 645.931604][ T31] audit: type=1326 audit(1790160265.000:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.2286" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285639e159 code=0x7ffc0000 [ 645.933475][ T31] audit: type=1326 audit(1790160265.010:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.2286" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285639e159 code=0x7ffc0000 [ 645.970903][ T31] audit: type=1326 audit(1790160265.040:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.2286" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f285639e159 code=0x7ffc0000 [ 645.970981][ T31] audit: type=1326 audit(1790160265.040:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15377 comm="syz.4.2286" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285639e159 code=0x7ffc0000 [ 649.947125][T15444] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 651.091988][T15444] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 651.223581][T15455] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 653.949488][T15501] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 659.249097][T15554] fuse: Bad value for 'fd' [ 662.242922][T15589] netlink: 'syz.4.2340': attribute type 4 has an invalid length. [ 662.269981][T15589] netlink: 'syz.4.2340': attribute type 4 has an invalid length. [ 662.509274][T15595] netlink: 'syz.7.2339': attribute type 1 has an invalid length. [ 662.695167][T15600] bond6: (slave bridge2): making interface the new active one [ 662.726184][T15600] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 662.768889][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2342'. [ 662.905422][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2339'. [ 662.932967][T15595] bond6: entered promiscuous mode [ 662.932992][T15595] bridge2: entered promiscuous mode [ 662.934748][T15595] bond6: entered allmulticast mode [ 662.934780][T15595] bridge2: entered allmulticast mode [ 662.937777][T15595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 663.000986][ T59] bond6: (slave bridge2): link status definitely down, disabling slave [ 663.001305][ T59] bridge2: left promiscuous mode [ 663.022449][ T59] bridge2: left allmulticast mode [ 663.025463][ T59] bond6: now running without any active interface! [ 663.898108][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 663.898179][ T31] audit: type=1326 audit(1790160282.970:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.7.2351" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 663.898681][ T31] audit: type=1326 audit(1790160282.970:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.7.2351" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 663.933584][ T31] audit: type=1326 audit(1790160282.980:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.7.2351" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 663.933662][ T31] audit: type=1326 audit(1790160282.980:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.7.2351" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 663.933735][ T31] audit: type=1326 audit(1790160282.980:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.7.2351" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f141439e159 code=0x7ffc0000 [ 663.985596][ T31] audit: type=1326 audit(1790160283.060:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.7.2351" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f141435e98e code=0x7ffc0000 [ 664.013305][ T31] audit: type=1326 audit(1790160283.060:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.7.2351" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f141435e98e code=0x7ffc0000 [ 664.013386][ T31] audit: type=1326 audit(1790160283.060:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.7.2351" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f141435e98e code=0x7ffc0000 [ 664.013460][ T31] audit: type=1326 audit(1790160283.060:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.7.2351" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f141435e98e code=0x7ffc0000 [ 664.013532][ T31] audit: type=1326 audit(1790160283.060:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.7.2351" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f141435e98e code=0x7ffc0000 [ 665.267501][T15654] VFS: Mount too revealing [ 665.465600][T15662] fuse: fd is not a fuse device [ 665.943843][T15672] loop4: detected capacity change from 0 to 256 [ 666.146155][T15678] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 666.146196][T15678] FAT-fs (loop4): Filesystem has been set read-only [ 671.430880][T15743] Set syz0 is full, maxelem 0 reached [ 675.067919][T15793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2386'. [ 675.067951][T15793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2386'. [ 675.067979][T15793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2386'. [ 675.628861][T15810] ip_tables: iptables: counters copy to user failed while replacing table [ 677.431219][T15837] netlink: 'syz.1.2397': attribute type 1 has an invalid length. [ 678.348340][T15849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2397'. [ 678.549669][T15846] bond1: (slave bridge1): making interface the new active one [ 678.566572][T15846] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 678.582850][T15849] bond1: entered promiscuous mode [ 678.582877][T15849] bridge1: entered promiscuous mode [ 678.584689][T15849] bond1: entered allmulticast mode [ 678.584715][T15849] bridge1: entered allmulticast mode [ 678.585916][T15849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 678.595788][ T7717] bond1: (slave bridge1): link status definitely down, disabling slave [ 678.632057][ T7717] bridge1: left promiscuous mode [ 678.688695][ T7717] bridge1: left allmulticast mode [ 678.708415][ T7717] bond1: now running without any active interface! [ 678.718677][T15851] loop2: detected capacity change from 0 to 256 [ 678.742461][T15851] exfat: Unknown parameter '' [ 681.612231][T15877] CIFS mount error: No usable UNC path provided in device string! [ 681.612231][T15877] [ 681.612481][T15877] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 684.426223][T15902] netlink: 'syz.5.2411': attribute type 2 has an invalid length. [ 684.426257][T15902] netlink: 'syz.5.2411': attribute type 2 has an invalid length. [ 685.115311][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.115387][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.298729][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2418'. [ 687.431613][T15928] loop4: detected capacity change from 0 to 256 [ 687.432810][T15928] exfat: Unknown parameter '' [ 687.776332][T15932] netlink: 'syz.2.2421': attribute type 1 has an invalid length. [ 689.440010][T15936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2421'. [ 689.959812][T15934] bond6: (slave geneve2): making interface the new active one [ 689.960681][T15934] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 689.960799][T15943] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 689.984919][ T5924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.985342][ T7708] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.985414][ T7708] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.985483][ T7708] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 690.183344][T15936] 8021q: adding VLAN 0 to HW filter on device bond6 [ 690.761064][T15960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2427'. [ 690.761095][T15960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2427'. [ 690.761124][T15960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2427'. [ 691.038668][T15969] loop2: detected capacity change from 0 to 256 [ 691.055200][T15969] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 691.055226][T15969] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 691.184188][T15969] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 691.273635][T15969] exFAT-fs (loop2): failed to load alloc-bitmap [ 691.273657][T15969] exFAT-fs (loop2): failed to recognize exfat type [ 695.661158][ T7715] IPVS: starting estimator thread 0... [ 695.762259][T16000] IPVS: using max 22 ests per chain, 52800 per kthread [ 697.649874][T16025] bridge0: port 1(dummy0) entered blocking state [ 697.649999][T16025] bridge0: port 1(dummy0) entered disabled state [ 697.650209][T16025] dummy0: entered allmulticast mode [ 697.674789][ T4932] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 697.674825][ T4932] CPU: 0 UID: 0 PID: 4932 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.674880][ T4932] Tainted: [L]=SOFTLOCKUP [ 697.674895][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 697.674922][ T4932] Workqueue: hci3 hci_rx_work [ 697.674979][ T4932] Call Trace: [ 697.674992][ T4932] [ 697.675007][ T4932] dump_stack_lvl+0x100/0x190 [ 697.675065][ T4932] sysfs_warn_dup.cold+0x1c/0x28 [ 697.675118][ T4932] sysfs_create_dir_ns+0x24b/0x2b0 [ 697.675157][ T4932] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 697.675195][ T4932] ? find_held_lock+0x2b/0x80 [ 697.675245][ T4932] ? kobject_add_internal+0x25f/0x930 [ 697.675301][ T4932] ? kobject_add_internal+0x25f/0x930 [ 697.675353][ T4932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.675396][ T4932] ? do_raw_spin_unlock+0x145/0x1e0 [ 697.675442][ T4932] kobject_add_internal+0x2c8/0x930 [ 697.675497][ T4932] kobject_add+0x16a/0x1e0 [ 697.675543][ T4932] ? __pfx_kobject_add+0x10/0x10 [ 697.675586][ T4932] ? preempt_schedule_thunk+0x16/0x40 [ 697.675632][ T4932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.675675][ T4932] ? kobject_put+0xb9/0x640 [ 697.675721][ T4932] ? _raw_spin_unlock+0x3e/0x50 [ 697.675783][ T4932] device_add+0x294/0x1970 [ 697.675819][ T4932] ? __pfx_dev_set_name+0x10/0x10 [ 697.675860][ T4932] ? __pfx_device_add+0x10/0x10 [ 697.675894][ T4932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.675935][ T4932] ? mgmt_send_event_skb+0x2fb/0x460 [ 697.676002][ T4932] hci_conn_add_sysfs+0x1a3/0x260 [ 697.676039][ T4932] le_conn_complete_evt+0x122f/0x2130 [ 697.676099][ T4932] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 697.676149][ T4932] ? hci_event_packet+0x186/0xcd0 [ 697.676201][ T4932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.676254][ T4932] hci_le_conn_complete_evt+0x23c/0x3a0 [ 697.676317][ T4932] ? skb_pull_data+0x15f/0x1e0 [ 697.676363][ T4932] hci_le_meta_evt+0x34a/0x5f0 [ 697.676417][ T4932] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 697.676477][ T4932] hci_event_packet+0x51c/0xcd0 [ 697.676527][ T4932] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 697.676579][ T4932] ? __pfx_hci_event_packet+0x10/0x10 [ 697.676635][ T4932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.676677][ T4932] ? lockdep_hardirqs_on+0x7d/0x110 [ 697.676712][ T4932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.676763][ T4932] hci_rx_work+0x451/0xfc0 [ 697.676824][ T4932] process_one_work+0xac7/0x1b10 [ 697.676894][ T4932] ? __pfx_process_one_work+0x10/0x10 [ 697.676948][ T4932] ? lock_acquire+0x1d1/0x380 [ 697.676994][ T4932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.677042][ T4932] worker_thread+0x5ef/0xe50 [ 697.677111][ T4932] ? kthread+0x13a/0x450 [ 697.677154][ T4932] ? __pfx_worker_thread+0x10/0x10 [ 697.677202][ T4932] kthread+0x373/0x450 [ 697.677243][ T4932] ? __pfx_kthread+0x10/0x10 [ 697.677297][ T4932] ret_from_fork+0x730/0xd60 [ 697.677336][ T4932] ? __pfx_ret_from_fork+0x10/0x10 [ 697.677375][ T4932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.677418][ T4932] ? __switch_to+0x800/0x10f0 [ 697.677465][ T4932] ? __switch_to_asm+0x39/0x70 [ 697.677500][ T4932] ? __pfx_kthread+0x10/0x10 [ 697.677550][ T4932] ret_from_fork_asm+0x1a/0x30 [ 697.677606][ T4932] [ 697.677636][ T4932] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 697.677680][ T4932] Bluetooth: hci3: failed to register connection device [ 699.710384][T16051] syz.6.2457: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 699.710724][T16051] CPU: 1 UID: 0 PID: 16051 Comm: syz.6.2457 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.710781][T16051] Tainted: [L]=SOFTLOCKUP [ 699.710801][T16051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 699.710825][T16051] Call Trace: [ 699.710838][T16051] [ 699.710853][T16051] dump_stack_lvl+0x100/0x190 [ 699.710913][T16051] warn_alloc.cold+0x9e/0xb2 [ 699.710958][T16051] ? __pfx_warn_alloc+0x10/0x10 [ 699.711010][T16051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.711059][T16051] ? rcu_is_watching+0x13/0xc0 [ 699.711110][T16051] ? trace_sched_exit_tp+0x120/0x160 [ 699.711163][T16051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.711211][T16051] ? __schedule+0x126b/0x6920 [ 699.711296][T16051] ? xsk_setsockopt+0x743/0xab0 [ 699.711357][T16051] __vmalloc_node_range_noprof+0x123b/0x1420 [ 699.711404][T16051] ? __pfx___schedule+0x10/0x10 [ 699.711474][T16051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.711527][T16051] ? xsk_setsockopt+0x743/0xab0 [ 699.711585][T16051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.711633][T16051] ? irqentry_exit+0x24d/0xa10 [ 699.711675][T16051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.711739][T16051] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 699.711801][T16051] ? xskq_create+0xc7/0x290 [ 699.711863][T16051] ? xsk_setsockopt+0x743/0xab0 [ 699.711922][T16051] xskq_create+0x18f/0x290 [ 699.711983][T16051] ? xsk_setsockopt+0x743/0xab0 [ 699.712046][T16051] xsk_setsockopt+0x743/0xab0 [ 699.712102][T16051] ? __pfx_aa_sk_perm+0x10/0x10 [ 699.712169][T16051] ? __pfx_xsk_setsockopt+0x10/0x10 [ 699.712227][T16051] ? __rcu_read_unlock+0x26a/0x5e0 [ 699.712267][T16051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.712322][T16051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.712370][T16051] ? aa_sock_opt_perm+0x114/0x1e0 [ 699.712424][T16051] ? __pfx_xsk_setsockopt+0x10/0x10 [ 699.712487][T16051] do_sock_setsockopt+0xf3/0x1d0 [ 699.712546][T16051] __sys_setsockopt+0x195/0x220 [ 699.712618][T16051] __x64_sys_setsockopt+0xbd/0x160 [ 699.712675][T16051] ? do_syscall_64+0xae/0x790 [ 699.712715][T16051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.712763][T16051] ? lockdep_hardirqs_on+0x7d/0x110 [ 699.712835][T16051] do_syscall_64+0x123/0x790 [ 699.712882][T16051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.712923][T16051] RIP: 0033:0x7ff3d0f9e159 [ 699.712955][T16051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.712994][T16051] RSP: 002b:00007ff3cf1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 699.713032][T16051] RAX: ffffffffffffffda RBX: 00007ff3d1226180 RCX: 00007ff3d0f9e159 [ 699.713060][T16051] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 699.713085][T16051] RBP: 00007ff3d103506b R08: 0000000000000004 R09: 0000000000000000 [ 699.713111][T16051] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.713136][T16051] R13: 00007ff3d1226218 R14: 00007ff3d1226180 R15: 00007ffc7ad2c828 [ 699.713190][T16051] [ 699.713311][T16051] Mem-Info: [ 699.713384][T16051] active_anon:145079 inactive_anon:52 isolated_anon:0 [ 699.713384][T16051] active_file:2397 inactive_file:62321 isolated_file:0 [ 699.713384][T16051] unevictable:0 dirty:114 writeback:2 [ 699.713384][T16051] slab_reclaimable:8060 slab_unreclaimable:113031 [ 699.713384][T16051] mapped:83301 shmem:137014 pagetables:2050 [ 699.713384][T16051] sec_pagetables:0 bounce:0 [ 699.713384][T16051] kernel_misc_reclaimable:0 [ 699.713384][T16051] free:1103512 free_pcp:13701 free_cma:0 [ 699.713517][T16051] Node 0 active_anon:580316kB inactive_anon:208kB active_file:9588kB inactive_file:249060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:333188kB dirty:456kB writeback:8kB shmem:548056kB shmem_thp:4096kB shmem_pmdmapped:4096kB anon_thp:0kB kernel_stack:17068kB pagetables:8032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 699.713659][T16051] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 699.713804][T16051] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.713976][T16051] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 699.714245][T16051] Node 0 DMA32 free:452380kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:580316kB inactive_anon:208kB active_file:9588kB inactive_file:249060kB unevictable:0kB writepending:464kB zspages:0kB present:3129332kB managed:2530548kB mlocked:0kB bounce:0kB free_pcp:52756kB local_pcp:15996kB free_cma:0kB [ 699.714423][T16051] lowmem_reserve[]: 0 0 0 0 0 [ 699.714694][T16051] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.714869][T16051] lowmem_reserve[]: 0 0 0 0 0 [ 699.715138][T16051] Node 1 Normal free:3946308kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 699.715312][T16051] lowmem_reserve[]: 0 0 0 0 0 [ 699.715578][T16051] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 699.716326][T16051] Node 0 DMA32: 16*4kB (E) 80*8kB (UME) 265*16kB (UME) 42*32kB (UME) 44*64kB (UE) 17*128kB (E) 17*256kB (UE) 25*512kB (UME) 22*1024kB (UE) 4*2048kB (U) 96*4096kB (UM) = 452368kB [ 699.717400][T16051] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 699.718077][T16051] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 8*16kB (UM) 9*32kB (UM) 6*64kB (U) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 3*2048kB (UM) 961*4096kB (UM) = 3946308kB [ 699.719148][T16051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 699.719209][T16051] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 699.719270][T16051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 699.719331][T16051] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 699.719398][T16051] 201676 total pagecache pages [ 699.719447][T16051] 0 pages in swap cache [ 699.719488][T16051] Free swap = 124996kB [ 699.719530][T16051] Total swap = 124996kB [ 699.719573][T16051] 2097051 pages RAM [ 699.719621][T16051] 0 pages HighMem/MovableOnly [ 699.719662][T16051] 432779 pages reserved [ 699.719703][T16051] 0 pages cma reserved [ 702.834702][T16059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2459'. [ 704.029418][T16058] syz.2.2458 (16058): drop_caches: 2 [ 704.151873][T13828] Bluetooth: hci3: command 0x0406 tx timeout [ 706.705855][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2470'. [ 709.401868][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 33 (since boot) is 1004 jiffies old. [ 712.280208][T16138] CIFS mount error: No usable UNC path provided in device string! [ 712.280208][T16138] [ 712.280302][T16138] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 713.132264][ T31] kauditd_printk_skb: 82 callbacks suppressed [ 713.132297][ T31] audit: type=1800 audit(1790160332.200:377): pid=16136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2482" name="file1" dev="ramfs" ino=50212 res=0 errno=0 [ 713.818526][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2485'. [ 715.557521][T16163] fuse: fd is not a fuse device [ 716.365367][T16171] loop4: detected capacity change from 0 to 65 [ 717.306282][T16171] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 717.422766][ T7708] IPVS: starting estimator thread 0... [ 717.497172][T16177] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 717.512097][T16176] IPVS: using max 23 ests per chain, 55200 per kthread [ 720.422848][T16209] CIFS mount error: No usable UNC path provided in device string! [ 720.422848][T16209] [ 720.422962][T16209] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 723.178573][T16228] batman_adv: batadv0: Interface deactivated: dummy0 [ 726.767651][T16258] loop2: detected capacity change from 0 to 512 [ 726.828407][T16258] EXT4-fs (loop2): 1 truncate cleaned up [ 726.851289][T16258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.968002][T16250] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 727.117069][T16267] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 727.386678][T16258] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.2511: invalid indirect mapped block 4294901760 (level 0) [ 727.420937][T16258] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.2511: invalid indirect mapped block 2185560079 (level 0) [ 727.425712][T16258] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.2511: invalid indirect mapped block 65535 (level 2) [ 729.134390][T16283] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 729.173579][T16282] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 729.207396][T16285] CIFS mount error: No usable UNC path provided in device string! [ 729.207396][T16285] [ 729.207452][T16285] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 729.462678][ T8610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.883927][T16288] loop4: detected capacity change from 0 to 2048 [ 730.015228][T16288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.065119][T16278] IPVS: stopping master sync thread 16283 ... [ 730.144155][T16293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2523'. [ 730.169044][T16293] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.2523'. [ 730.427173][T10654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.450966][T16297] xt_hashlimit: size too large, truncated to 1048576 [ 730.497824][T16300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2521'. [ 730.593264][T16302] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2526'. [ 730.598883][T16303] IPVS: dh: FWM 3 0x00000003 - no destination available [ 730.653208][T16304] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2526'. [ 731.084227][ T31] audit: type=1326 audit(1790160350.160:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.7.2528" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f141439e159 code=0x0 [ 732.080252][ T31] audit: type=1326 audit(1790160351.150:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.7.2528" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f141439e159 code=0x0 [ 737.468413][T16374] ERROR: Out of memory at tomoyo_memory_ok. [ 737.996499][T16382] xt_hashlimit: max too large, truncated to 1048576 [ 739.681798][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 33 (since boot) is 4032 jiffies old. [ 741.344335][ T31] audit: type=1326 audit(1790160360.420:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.2550" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd74b9e159 code=0x0 [ 741.531116][ T31] audit: type=1326 audit(1790160360.600:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.2550" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd74b9e159 code=0x0 [ 742.091856][ T6944] libceph: connect (1)[c::]:6789 error -101 [ 742.092065][ T6944] libceph: mon0 (1)[c::]:6789 connect error [ 742.316590][T16407] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2551'. [ 742.985869][T16401] ceph: No mds server is up or the cluster is laggy [ 743.079278][ T6944] libceph: connect (1)[c::]:6789 error -101 [ 743.079479][ T6944] libceph: mon0 (1)[c::]:6789 connect error [ 744.141093][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2557'. [ 745.297066][T16428] fuse: fd is not a fuse device [ 746.496551][T16439] No control pipe specified [ 746.581537][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.581644][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.660786][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2567'. [ 747.748819][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2567'. [ 749.149969][T16475] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2573'. [ 751.758297][T16496] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2578'. [ 752.405517][T16505] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[8610] was attempted by " [ 759.722202][T16574] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 761.241328][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 761.241379][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 761.241421][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 761.241460][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 761.241500][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 761.241540][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 761.241580][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 761.241620][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 762.873849][T16598] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 764.048802][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 764.057950][T16615] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2614'. [ 764.114134][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 764.122437][T16620] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2614'. [ 767.024818][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2620'. [ 771.094933][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2636'. [ 774.313547][T16728] netlink: 'syz.5.2645': attribute type 39 has an invalid length. [ 774.353141][T16728] hsr_slave_0 (unregistering): left promiscuous mode [ 778.400226][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2655'. [ 778.426150][T16766] hsr_slave_1: left promiscuous mode [ 781.613820][T16812] netlink: 'syz.5.2670': attribute type 1 has an invalid length. [ 781.974551][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2670'. [ 782.398144][T16812] bond5: (slave bridge2): making interface the new active one [ 782.435671][T16812] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 784.072526][T16840] netlink: 264 bytes leftover after parsing attributes in process `syz.5.2676'. [ 785.513749][T16851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 786.305576][T16862] tipc: Enabling of bearer rejected, failed to enable media [ 786.829040][T16867] netlink: 'syz.7.2683': attribute type 9 has an invalid length. [ 786.829066][T16867] netlink: 'syz.7.2683': attribute type 7 has an invalid length. [ 786.829084][T16867] netlink: 'syz.7.2683': attribute type 8 has an invalid length. [ 787.717324][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2684'. [ 787.769477][T16875] vlan1: entered allmulticast mode [ 787.769505][T16875] bridge1: entered allmulticast mode [ 787.786644][T16875] bridge1: port 1(erspan0) entered blocking state [ 787.786847][T16875] bridge1: port 1(erspan0) entered disabled state [ 787.789356][T16875] erspan0: entered allmulticast mode [ 787.812049][T16875] erspan0: entered promiscuous mode [ 795.654671][T16959] No source specified [ 796.244563][T16961] ip6gre1: entered allmulticast mode [ 796.414021][T16963] ip_tables: iptables: counters copy to user failed while replacing table [ 797.104702][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 800.334677][T17006] Bluetooth: MGMT ver 1.23 [ 800.392408][T17011] syz.2.2725 (17011): drop_caches: 2 [ 803.727314][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 37 (since boot) is 1087 jiffies old. [ 803.861259][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2731'. [ 808.003371][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.003458][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.491371][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'. [ 812.030411][T17114] loop2: detected capacity change from 0 to 512 [ 812.039153][T17114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 812.039190][T17114] EXT4-fs: Ignoring removed orlov option [ 812.061850][T17114] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 812.061887][T17114] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 812.062185][T17114] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 812.062216][T17114] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 812.070506][T17114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0008-0000-000000000000 ro without journal. Quota mode: none. [ 816.058634][ T31] audit: type=1326 audit(1790160435.130:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.6.2760" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3d0f9e159 code=0x0 [ 818.203167][ T8610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 818.354267][T17161] fuse: Bad value for 'fd' [ 818.446200][T17165] tipc: Enabling of bearer rejected, failed to enable media [ 818.666098][T17172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2766'. [ 818.843038][T17178] bond7: entered promiscuous mode [ 818.843070][T17178] bond7: entered allmulticast mode [ 825.102140][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2774'. [ 827.317737][T17213] tipc: Enabling of bearer rejected, failed to enable media [ 827.446953][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2781'. [ 827.727300][T17232] bond1: entered promiscuous mode [ 827.727326][T17232] bond1: entered allmulticast mode [ 828.331985][T15787] syz.7.2385 (15787) used greatest stack depth: 18264 bytes left [ 833.812026][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 37 (since boot) is 4096 jiffies old. [ 834.342393][T17268] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[17268] [ 835.678416][T17291] netlink: 'syz.4.2799': attribute type 2 has an invalid length. [ 835.678448][T17291] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 835.678471][T17291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2799'. [ 835.678496][T17291] netlink: 'syz.4.2799': attribute type 2 has an invalid length. [ 835.678519][T17291] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 835.678541][T17291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2799'. [ 835.678563][T17291] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 836.005423][T15798] syz.7.2385 (15798) used greatest stack depth: 17576 bytes left [ 836.382101][T17305] loop2: detected capacity change from 0 to 164 [ 836.511093][T17309] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2804'. [ 836.522295][T17309] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2804'. [ 838.716791][T17339] No source specified [ 839.140467][T17336] tipc: Enabling of bearer rejected, failed to enable media [ 841.555627][T13828] Bluetooth: hci2: unexpected event for opcode 0x202a [ 841.876708][T17374] Cannot find del_set index 4 as target [ 845.129581][T17404] syzkaller0: entered promiscuous mode [ 845.129782][T17404] syzkaller0: entered allmulticast mode [ 845.257161][T17408] FAULT_INJECTION: forcing a failure. [ 845.257161][T17408] name failslab, interval 1, probability 0, space 0, times 0 [ 845.257219][T17408] CPU: 1 UID: 0 PID: 17408 Comm: syz.4.2833 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.257275][T17408] Tainted: [L]=SOFTLOCKUP [ 845.257290][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 845.257320][T17408] Call Trace: [ 845.257332][T17408] [ 845.257348][T17408] dump_stack_lvl+0x100/0x190 [ 845.257416][T17408] should_fail_ex.cold+0x5/0xa [ 845.257462][T17408] ? srso_alias_return_thunk+0x5/0xfbef5 [ 845.257518][T17408] should_failslab+0xc2/0x120 [ 845.257560][T17408] __kmalloc_cache_noprof+0x91/0x6d0 [ 845.257615][T17408] ? x509_cert_parse+0xfc/0x910 [ 845.257674][T17408] x509_cert_parse+0xfc/0x910 [ 845.257729][T17408] x509_key_preparse+0x65/0x9c0 [ 845.257781][T17408] ? srso_alias_return_thunk+0x5/0xfbef5 [ 845.257838][T17408] asymmetric_key_preparse+0xce/0x1d0 [ 845.257880][T17408] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 845.257927][T17408] __key_create_or_update+0x463/0xe30 [ 845.257977][T17408] ? __pfx___key_create_or_update+0x10/0x10 [ 845.258021][T17408] ? srso_alias_return_thunk+0x5/0xfbef5 [ 845.258069][T17408] ? lookup_user_key+0x3f3/0x1300 [ 845.258155][T17408] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 845.258229][T17408] key_create_or_update+0x42/0x60 [ 845.258276][T17408] __do_sys_add_key+0x2e8/0x460 [ 845.258329][T17408] ? __pfx___do_sys_add_key+0x10/0x10 [ 845.258393][T17408] ? srso_alias_return_thunk+0x5/0xfbef5 [ 845.258451][T17408] do_syscall_64+0x123/0x790 [ 845.258500][T17408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.258542][T17408] RIP: 0033:0x7f285639e159 [ 845.258572][T17408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.258613][T17408] RSP: 002b:00007f28571c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 845.258651][T17408] RAX: ffffffffffffffda RBX: 00007f2856625fa0 RCX: 00007f285639e159 [ 845.258678][T17408] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 845.258704][T17408] RBP: 00007f285643506b R08: ffffffffffffffff R09: 0000000000000000 [ 845.258730][T17408] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 845.258755][T17408] R13: 00007f2856626038 R14: 00007f2856625fa0 R15: 00007ffdbcfb9b78 [ 845.258809][T17408] [ 846.557226][T17410] netlink: 'syz.5.2834': attribute type 10 has an invalid length. [ 846.660079][T17410] tipc: Disabling bearer [ 846.720147][T17410] team0 (unregistering): Port device xfrm0 removed [ 846.899337][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2835'. [ 848.001822][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 41 (since boot) is 1100 jiffies old. [ 851.901829][ T6560] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 852.069420][ T6560] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 852.081699][ T6560] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 852.081732][ T6560] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 852.081758][ T6560] usb 3-1: config 4 has no interface number 0 [ 852.081798][ T6560] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 852.088945][ T6560] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.088974][ T6560] usb 3-1: Product: syz [ 852.088994][ T6560] usb 3-1: Manufacturer: syz [ 852.089014][ T6560] usb 3-1: SerialNumber: syz [ 852.314141][T17475] futex_wake_op: syz.5.2855 tries to shift op by 144; fix this program [ 852.583793][ T6560] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 852.685409][ T6560] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 852.689393][ T6560] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 852.689454][ T6560] usb 3-1: media controller created [ 852.727674][ T6560] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.865514][ T6560] DVB: Unable to find symbol dib7000p_attach() [ 853.865538][ T6560] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 854.651777][ T6560] rc_core: IR keymap rc-dib0700-rc5 not found [ 854.651803][ T6560] Registered IR keymap rc-empty [ 854.653048][ T6560] dvb-usb: could not initialize remote control. [ 854.653065][ T6560] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 856.056822][ T6560] usb 3-1: USB disconnect, device number 11 [ 856.201369][ T6560] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 862.447007][T17562] loop2: detected capacity change from 0 to 128 [ 867.936084][T17592] loop4: detected capacity change from 0 to 512 [ 867.941964][T17592] ext4: Unknown parameter 'noacl' [ 869.434071][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.434149][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.529355][T17607] pim6reg: entered allmulticast mode [ 869.543925][T17607] pim6reg: left allmulticast mode [ 873.785055][T17641] fuse: fd is not a fuse device [ 878.573923][T17690] fuse: fd is not a fuse device [ 885.961982][T17757] loop4: detected capacity change from 0 to 512 [ 888.006338][T17766] netlink: 'syz.1.2931': attribute type 10 has an invalid length. [ 888.006378][T17766] bridge0: left promiscuous mode [ 888.010950][T17766] bridge0: entered promiscuous mode [ 888.013590][T17766] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 888.349907][T17771] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2932'. [ 889.207621][T17771] netlink: 'syz.7.2932': attribute type 8 has an invalid length. [ 889.207654][T17771] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.2932'. [ 890.353269][T17782] xt_limit: Overflow, try lower: 0/0 [ 894.559033][T17806] syz_tun: entered allmulticast mode [ 894.599192][T17798] syz_tun: left allmulticast mode [ 897.571157][T17834] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2950'. [ 897.611972][T17834] netlink: 'syz.5.2950': attribute type 4 has an invalid length. [ 897.612004][T17834] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.2950'. [ 903.800422][T17874] fuse: fd is not a fuse device [ 908.160233][T17912] bond0: option arp_interval: invalid value ( ) [ 908.160325][T17912] bond0: option arp_interval: allowed values 0 - 2147483647 [ 910.100066][T17926] loop4: detected capacity change from 0 to 128 [ 911.884141][T17940] gadgetfs: bound to dummy_udc driver [ 912.165082][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 912.165701][ C0] gadgetfs: connected [ 912.166881][ T9] gadgetfs: disconnected [ 912.320126][ C0] gadgetfs: connected [ 912.474384][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 912.480729][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 912.505187][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.691470][T17936] gadgetfs: suspended from state 3 [ 912.691780][T17936] gadgetfs: disconnected [ 912.867720][ T9] usb 1-1: can't set config #1, error -71 [ 912.897630][ T9] usb 1-1: USB disconnect, device number 6 [ 913.034739][T17945] overlayfs: failed to clone lowerpath [ 918.584713][T17986] loop2: detected capacity change from 0 to 512 [ 923.059002][ T4932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 923.118616][ T4932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 923.152327][ T4932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 923.155234][ T4932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 923.156879][ T4932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 923.804241][T18028] gadgetfs: bound to dummy_udc driver [ 924.271862][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 924.272568][ C0] gadgetfs: connected [ 924.273452][ T9] gadgetfs: disconnected [ 924.592898][ C0] gadgetfs: connected [ 924.978356][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 924.983012][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 924.983071][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.042493][ C0] gadgetfs: configuration #1 [ 925.278354][T18025] gadgetfs: suspended from state 3 [ 925.278429][T18025] gadgetfs: disconnected [ 925.411268][T13828] Bluetooth: hci4: command tx timeout [ 925.663599][ T7233] usb 1-1: USB disconnect, device number 7 [ 927.433474][T13828] Bluetooth: hci4: command tx timeout [ 929.513072][T13828] Bluetooth: hci4: command tx timeout [ 930.873868][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.873978][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.616526][T13828] Bluetooth: hci4: command tx timeout [ 932.121925][T18083] netlink: 550 bytes leftover after parsing attributes in process `syz.2.3015'. [ 933.771393][T18094] ipip0: entered allmulticast mode [ 935.063089][T18095] tipc: Enabled bearer , priority 0 [ 935.070178][T18095] syzkaller0: entered promiscuous mode [ 935.070209][T18095] syzkaller0: entered allmulticast mode [ 935.321083][T18103] tipc: Resetting bearer [ 935.376053][T18107] loop4: detected capacity change from 0 to 512 [ 935.459297][T18107] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 935.577420][T18092] tipc: Resetting bearer [ 936.476577][T18107] [ 936.478946][T18107] ====================================================== [ 936.485960][T18107] WARNING: possible circular locking dependency detected [ 936.492979][T18107] syzkaller #0 Tainted: G L [ 936.498959][T18107] ------------------------------------------------------ [ 936.506147][T18107] syz.4.3022/18107 is trying to acquire lock: [ 936.512211][T18107] ffffffff904010a8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 936.523949][T18107] [ 936.523949][T18107] but task is already holding lock: [ 936.531323][T18107] ffff88804917cf80 (&sb->s_type->i_mutex_key#34){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 936.541832][T18107] [ 936.541832][T18107] which lock already depends on the new lock. [ 936.541832][T18107] [ 936.552241][T18107] [ 936.552241][T18107] the existing dependency chain (in reverse order) is: [ 936.561242][T18107] [ 936.561242][T18107] -> #3 (&sb->s_type->i_mutex_key#34){++++}-{4:4}: [ 936.569962][T18107] lock_acquire+0x1d1/0x380 [ 936.574995][T18107] down_write+0x8b/0x1f0 [ 936.579771][T18107] configfs_depend_item_unlocked+0xf3/0x6a0 [ 936.586210][T18107] usbg_make_tpg+0x251/0x610 [ 936.591345][T18107] target_fabric_make_tpg+0xab/0x8c0 [ 936.597155][T18107] configfs_mkdir+0x525/0xd40 [ 936.602380][T18107] vfs_mkdir+0x364/0x850 [ 936.607163][T18107] filename_mkdirat+0x48b/0x5e0 [ 936.612540][T18107] __x64_sys_mkdirat+0x89/0xc0 [ 936.617830][T18107] do_syscall_64+0x123/0x790 [ 936.622951][T18107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.629372][T18107] [ 936.629372][T18107] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 936.637296][T18107] lock_acquire+0x1d1/0x380 [ 936.642328][T18107] __mutex_lock+0x1a4/0x1bd0 [ 936.647452][T18107] tcm_alloc_inst+0x5f/0x1e0 [ 936.652684][T18107] try_get_usb_function_instance+0x136/0x1f0 [ 936.659201][T18107] usb_get_function_instance+0x16/0x70 [ 936.665200][T18107] function_make+0x18c/0x3f0 [ 936.670315][T18107] configfs_mkdir+0x525/0xd40 [ 936.675533][T18107] vfs_mkdir+0x364/0x850 [ 936.680311][T18107] filename_mkdirat+0x48b/0x5e0 [ 936.685687][T18107] __x64_sys_mkdirat+0x89/0xc0 [ 936.690977][T18107] do_syscall_64+0x123/0x790 [ 936.696094][T18107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.702515][T18107] [ 936.702515][T18107] -> #1 (func_lock){+.+.}-{4:4}: [ 936.709657][T18107] lock_acquire+0x1d1/0x380 [ 936.714693][T18107] __mutex_lock+0x1a4/0x1bd0 [ 936.719814][T18107] try_get_usb_function_instance+0x26/0x1f0 [ 936.726241][T18107] usb_get_function_instance+0x16/0x70 [ 936.732235][T18107] function_make+0x18c/0x3f0 [ 936.737352][T18107] configfs_mkdir+0x525/0xd40 [ 936.742573][T18107] vfs_mkdir+0x364/0x850 [ 936.747352][T18107] filename_mkdirat+0x48b/0x5e0 [ 936.752728][T18107] __x64_sys_mkdirat+0x89/0xc0 [ 936.758020][T18107] do_syscall_64+0x123/0x790 [ 936.763136][T18107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.769556][T18107] [ 936.769556][T18107] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 936.777826][T18107] check_prev_add+0xeb/0xe60 [ 936.782943][T18107] __lock_acquire+0x1528/0x1f40 [ 936.788405][T18107] lock_acquire+0x1d1/0x380 [ 936.793433][T18107] __mutex_lock+0x1a4/0x1bd0 [ 936.798552][T18107] uvcg_streaming_header_allow_link+0x7c/0x650 [ 936.805254][T18107] configfs_symlink+0x695/0x1340 [ 936.810737][T18107] vfs_symlink+0x178/0x4d0 [ 936.815689][T18107] filename_symlinkat+0x2a6/0x560 [ 936.821242][T18107] __x64_sys_symlink+0x79/0xb0 [ 936.826536][T18107] do_syscall_64+0x123/0x790 [ 936.831655][T18107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.838099][T18107] [ 936.838099][T18107] other info that might help us debug this: [ 936.838099][T18107] [ 936.848325][T18107] Chain exists of: [ 936.848325][T18107] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#34 [ 936.848325][T18107] [ 936.863334][T18107] Possible unsafe locking scenario: [ 936.863334][T18107] [ 936.870771][T18107] CPU0 CPU1 [ 936.876123][T18107] ---- ---- [ 936.881476][T18107] lock(&sb->s_type->i_mutex_key#34); [ 936.886957][T18107] lock(tpg_instances_lock); [ 936.894506][T18107] lock(&sb->s_type->i_mutex_key#34); [ 936.902502][T18107] lock(gadget_subsys.su_mutex); [ 936.907532][T18107] [ 936.907532][T18107] *** DEADLOCK *** [ 936.907532][T18107] [ 936.915663][T18107] locks held by syz.4.3022/18107: 2, last CPU#1: [ 936.921990][T18107] #0: ffff88801e736460 (sb_writers#23){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 936.931545][T18107] #1: ffff88804917cf80 (&sb->s_type->i_mutex_key#34){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 936.942500][T18107] [ 936.942500][T18107] stack backtrace: [ 936.948386][T18107] CPU: 1 UID: 0 PID: 18107 Comm: syz.4.3022 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.959337][T18107] Tainted: [L]=SOFTLOCKUP [ 936.963654][T18107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 936.973709][T18107] Call Trace: [ 936.976983][T18107] [ 936.979909][T18107] dump_stack_lvl+0x100/0x190 [ 936.984612][T18107] print_circular_bug.cold+0x178/0x1be [ 936.990107][T18107] check_noncircular+0x146/0x160 [ 936.995071][T18107] ? lock_acquire+0x1d1/0x380 [ 936.999765][T18107] check_prev_add+0xeb/0xe60 [ 937.004358][T18107] ? lockdep_hardirqs_on+0x7d/0x110 [ 937.009568][T18107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.015219][T18107] __lock_acquire+0x1528/0x1f40 [ 937.020082][T18107] ? kasan_save_free_info+0x3b/0x70 [ 937.025297][T18107] ? __kasan_slab_free+0x5f/0x80 [ 937.030244][T18107] lock_acquire+0x1d1/0x380 [ 937.034755][T18107] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 937.041116][T18107] ? __pfx___might_resched+0x10/0x10 [ 937.046436][T18107] __mutex_lock+0x1a4/0x1bd0 [ 937.051038][T18107] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 937.057399][T18107] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 937.063764][T18107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.069441][T18107] ? __pfx___mutex_lock+0x10/0x10 [ 937.074486][T18107] ? __pfx___might_resched+0x10/0x10 [ 937.079801][T18107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.085451][T18107] ? make_vfsgid+0xf1/0x140 [ 937.089987][T18107] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 937.096370][T18107] uvcg_streaming_header_allow_link+0x7c/0x650 [ 937.102565][T18107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.108213][T18107] ? inode_permission+0x374/0x620 [ 937.113256][T18107] ? mntput_no_expire+0xe7/0x220 [ 937.118227][T18107] configfs_symlink+0x695/0x1340 [ 937.123196][T18107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.128845][T18107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.134493][T18107] ? security_inode_permission+0xbf/0x250 [ 937.140245][T18107] ? __pfx_configfs_symlink+0x10/0x10 [ 937.145648][T18107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.151302][T18107] vfs_symlink+0x178/0x4d0 [ 937.155737][T18107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.161389][T18107] filename_symlinkat+0x2a6/0x560 [ 937.166430][T18107] ? __pfx_filename_symlinkat+0x10/0x10 [ 937.171991][T18107] ? strncpy_from_user+0x19d/0x2d0 [ 937.177128][T18107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.182777][T18107] ? do_getname+0x191/0x390 [ 937.187301][T18107] __x64_sys_symlink+0x79/0xb0 [ 937.192082][T18107] do_syscall_64+0x123/0x790 [ 937.196687][T18107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.202684][T18107] RIP: 0033:0x7f285639e159 [ 937.207101][T18107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.226748][T18107] RSP: 002b:00007f28571c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 937.235168][T18107] RAX: ffffffffffffffda RBX: 00007f2856625fa0 RCX: 00007f285639e159 [ 937.243142][T18107] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000001000 [ 937.251134][T18107] RBP: 00007f285643506b R08: 0000000000000000 R09: 0000000000000000 [ 937.259106][T18107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.267080][T18107] R13: 00007f2856626038 R14: 00007f2856625fa0 R15: 00007ffdbcfb9b78 [ 937.275066][T18107] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 937.561953][T18092] tipc: Disabling bearer [ 938.898501][T13741] tipc: Node number set to 2357702392