last executing test programs: 9m10.742362587s ago: executing program 2 (id=222): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) timer_create(0xfffffffffffffffc, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_clone3(0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) 9m9.640544733s ago: executing program 2 (id=228): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 9m7.750064833s ago: executing program 2 (id=237): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 9m6.173868714s ago: executing program 2 (id=249): mount(0x0, 0x0, 0x0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b80)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="07de9ae3004865f36195c93617594bca658e0b966b6d116ecd4910edb0e65f31cb794b50544910eb6456aa609c6861b309b45ef6567d4e820a14ff961ba2f4a3713fdf8adc13aa34115d481dc607cf6ecefc260ef52c3ec19b03986055d54904fe9cd76a923407c252e18073e276f22da9f4d528729fe74609970ff0f1fd20dedc46c4c077d1907c6e56c95506ef8d787b61e0c37b0159a50a5f6be5dfa0afe9eaeed8ffd1a325b8982c80dd9e45d1aea60565aa8c0f427ebeac1f101ad7c598679e1899e7fc2462b3e55ec2b037aeec6af78d058f96bef36411fe2e5db3c4575668515aac63f8ce589f000845efd4e4321cecb196", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16, @ANYRES32], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 9m5.307778309s ago: executing program 2 (id=255): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x1341d000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000200000faffffff0002000200000000000200001f0000000002"], 0x24, 0x3) 9m1.88774603s ago: executing program 2 (id=265): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000500)=0xffeb) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "8e09000000001000"}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m0.606742596s ago: executing program 32 (id=265): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000500)=0xffeb) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "8e09000000001000"}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m20.816493976s ago: executing program 0 (id=428): socket$kcm(0x2d, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000001c98000000000000bf980000000000004c080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 8m20.193279595s ago: executing program 0 (id=432): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x8b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m18.951062756s ago: executing program 0 (id=441): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x0, 0x22, 0x10, 0x5, 0x0, 0x3, 0xe661, 0x4, 0x7, 0x20003, 0x6, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xb, 0x17, 0x1, 0x7, 0x77a, 0x3e, 0x18e, 0x200006, 0x6, 0x3, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd74, 0x0, 0x8, 0x9, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x4, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x3, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x4, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0xfffffffd, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x5, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r1 = socket(0x2b, 0x1, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) 8m17.793816025s ago: executing program 0 (id=447): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000100)=0x2, 0x4) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) chmod(0x0, 0x3fe) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 8m16.481222634s ago: executing program 0 (id=458): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1f7) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 8m15.857131963s ago: executing program 0 (id=460): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/125, 0x7d}, 0x1}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x8014) 8m15.330538894s ago: executing program 33 (id=460): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/125, 0x7d}, 0x1}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x8014) 7m46.257568863s ago: executing program 3 (id=568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xf) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7m45.742602913s ago: executing program 3 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d61630000000005000500000000001400078008001240000500000500150028000000090002"], 0x5c}}, 0x4000894) 7m44.557651741s ago: executing program 3 (id=578): ptrace(0x10, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, 0x0, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@stripe={'stripe', 0x3d, 0xa}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@errors_continue}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001280)=ANY=[@ANYBLOB='d=', @ANYRESHEX=0x0, @ANYBLOB=',utf8=1,nonumtail=0,codepage=949,shortname=win95,utf8=0,shortname=win95,utf8=0,shortname=mixed,uni_xlate=0,iocharset=macturkish,shortname=win95,uni_xlate=1,shortname=lower,showexec,uni_xlate=1,uni_xlate=1,\x00'], 0x7f, 0x2c1, &(0x7f0000001640)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r1, 0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/184, 0xb8) 7m41.219535098s ago: executing program 3 (id=589): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d2, &(0x7f0000000e80)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, 0x0, 0x0) 7m38.871179861s ago: executing program 3 (id=598): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000007000000170300000ee600a8bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 7m35.636928337s ago: executing program 3 (id=608): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x80000, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xc}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x0, 0x5, 0x0, 0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 7m34.596305081s ago: executing program 34 (id=608): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x80000, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xc}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x0, 0x5, 0x0, 0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 2m10.136782764s ago: executing program 7 (id=1697): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x203, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2m9.600999127s ago: executing program 7 (id=1702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r5}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 2m7.543815894s ago: executing program 7 (id=1706): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$inet(0xa, 0x801, 0x84) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x7, 0x1000, 0xfffffffd, 0x1ba}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m6.244743606s ago: executing program 7 (id=1710): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) 2m2.54392418s ago: executing program 7 (id=1718): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2m1.265959841s ago: executing program 7 (id=1722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1m45.684190302s ago: executing program 35 (id=1722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 19.680412901s ago: executing program 1 (id=1933): syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) 16.661813504s ago: executing program 5 (id=1939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 15.970541293s ago: executing program 1 (id=1942): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001940)={&(0x7f0000000940)=[0x5, 0x1, 0x4a3, 0xad6, 0x80, 0x6, 0x0, 0x3, 0x5, 0x4, 0x4, 0x7, 0x0, 0xc7a6, 0x5, 0x100, 0x3ff, 0x1, 0x9, 0x5, 0xd, 0x0, 0x8, 0x2, 0x0, 0x800, 0xffffff21, 0xfffffffd, 0x3, 0x8, 0x0, 0x0, 0x4, 0x7fffffff, 0x80000000, 0x0, 0xb87b, 0xfffffff7, 0x2, 0x1, 0x3, 0x8, 0xe550, 0xd37, 0x1, 0x6, 0x1, 0x81b, 0x1, 0x5, 0x81, 0x8, 0x1, 0x9, 0x4, 0xffffffff, 0xfffffffc, 0xd6ee, 0x5, 0x81, 0x1, 0x0, 0x47, 0x9d4, 0x7, 0x2, 0x7, 0x684, 0x1c27, 0x1, 0x9, 0x3, 0x2, 0x100, 0x1, 0x20000000, 0x4, 0xf, 0x400, 0x80, 0x2, 0x1, 0x2, 0x10, 0x1, 0x3, 0xe0000000, 0x0, 0x8, 0x1, 0x7f, 0x7, 0x4, 0x8, 0x1, 0x2bb, 0x5, 0x2, 0x80000000, 0x7, 0x8, 0x71b4, 0x9, 0x6, 0x8, 0x2, 0x3, 0x3, 0x3, 0x9, 0x6, 0x8, 0x0, 0x7ff, 0x1, 0x8, 0x400, 0x7f, 0xff, 0x4f9f608a, 0x8de, 0x2, 0x5, 0x6, 0x40, 0x3, 0x7, 0x4, 0x493, 0x392, 0x9, 0x5c45, 0x7fffffff, 0x8, 0x2, 0x1, 0xfffffffb, 0x401, 0x81, 0x7, 0x0, 0x4, 0x6, 0x8417, 0x1, 0x36, 0x5d714430, 0xf, 0x6, 0x7f, 0x6, 0x86, 0x8, 0x7, 0x1c91, 0x1, 0x0, 0x2, 0x0, 0xe, 0x0, 0xa, 0x7, 0x5, 0x3ff, 0x2, 0x151, 0x9, 0xfffffff5, 0x5, 0x1, 0x1000, 0x0, 0x800, 0x4, 0x2, 0x8, 0x400, 0x8, 0x3, 0xfffffffe, 0x10001, 0x8, 0x9, 0x7, 0x8, 0xfff, 0x9, 0x0, 0x3ff, 0xffffffff, 0x7, 0x9, 0xa, 0x8, 0x1, 0x8f, 0x3, 0x81, 0x81, 0xb, 0x9, 0x9, 0x2c, 0xaef9, 0x7, 0xffffffff, 0x7, 0x6, 0x1, 0x7, 0x1, 0x8, 0x3, 0x5, 0x8, 0x55e7, 0x1000, 0x80000000, 0x4, 0xe0, 0xdd, 0x200, 0x9, 0xe9e3, 0xfffffff7, 0x81, 0x7, 0x3, 0x9, 0x4, 0x9, 0xffffffff, 0xebc8, 0x3, 0x7ff, 0xeab, 0xa, 0x7ff, 0x80000001, 0x101, 0xf, 0x6, 0x200, 0x8, 0x8000, 0xa00000, 0x1, 0x2, 0x2, 0x9, 0x6, 0x8, 0x8000000, 0x4, 0x3, 0x905, 0x28c, 0x7, 0x8, 0x5, 0xffffffff, 0x2, 0x2, 0x2, 0x7fffffff, 0x1, 0xc, 0x4, 0x3, 0xffffffff, 0x7fffffff, 0x9, 0x6, 0x9f15, 0x6, 0x4, 0x19, 0x3, 0x7ff, 0x5, 0x0, 0xa, 0x100, 0x48b6954e, 0x80000000, 0x8, 0x5d8, 0x7ff, 0x0, 0x2b2b, 0x528fe8e0, 0x5, 0x3, 0x3, 0x3, 0x2, 0x9, 0xbe63, 0x80, 0x2, 0x4, 0x0, 0x0, 0x101, 0x10, 0x1953, 0x40, 0x0, 0x10001, 0x6ad, 0x7c6, 0x40, 0x54d, 0xc, 0x1, 0x6, 0x3, 0xb, 0x1, 0x4749, 0x4, 0x9, 0x9, 0x81, 0x8, 0x10000, 0x0, 0x1, 0x81, 0x5, 0x356, 0x715b, 0x1000, 0x8, 0xfffffffb, 0x3, 0x2, 0x80000000, 0xbf8a, 0xe, 0x9, 0x0, 0x7fffffff, 0x1, 0x9625, 0xc, 0x4, 0xd, 0x7c, 0x6, 0x724, 0x3, 0xfffffff9, 0x2, 0x1ff, 0x8, 0x0, 0xd99, 0x0, 0x5, 0x7, 0x2, 0xa869fff8, 0x6, 0x7, 0x10, 0x5b, 0x3, 0x8, 0x1000000, 0x3ff, 0x4, 0xfffffffe, 0x1929, 0xffffffff, 0x4, 0x36, 0x4, 0x2, 0x8, 0xfffffffd, 0x8, 0xe28, 0x6, 0x3, 0x2, 0x2, 0x1, 0x0, 0xffff, 0x80000001, 0x100, 0x84, 0xd, 0xfffffffb, 0x3, 0x9, 0x4, 0x2, 0x10, 0x7, 0x4, 0x6, 0x1, 0x4, 0xc9, 0x3, 0x10001, 0x3, 0x5, 0x9, 0x1, 0x9, 0x4, 0x80, 0xff, 0xbc5a, 0x0, 0x10, 0x7, 0x8000, 0x9, 0x5, 0x9, 0x8000, 0x4, 0x4, 0x1, 0x3, 0x1, 0x24000, 0x1, 0x4d76, 0x4, 0x9, 0xfff, 0x8f6, 0x10000, 0x7fffffff, 0x1, 0x6, 0x6, 0x8, 0x0, 0x0, 0x1, 0x1ff, 0xf899, 0x8, 0xffffffff, 0xfffff800, 0x5, 0x10000, 0xa195, 0x8, 0x1, 0x1, 0x10001, 0x4, 0x8, 0xe2ad, 0x48ba, 0x3d3f2dd6, 0x8, 0x5, 0x5, 0x8, 0x5, 0x6, 0x5e0, 0x2, 0x4, 0x8000, 0xe2, 0x6, 0x5, 0x5c, 0xa, 0x8, 0x15, 0xfffffff9, 0x4a, 0xf2, 0x53, 0xc000000, 0x7fffffff, 0xff, 0x1, 0x9, 0x7, 0x20000, 0x1a, 0x0, 0x0, 0x1, 0xe6, 0x9, 0xda, 0x2, 0x9632, 0x5, 0x8, 0xd, 0x6, 0x2, 0x7, 0x77, 0x4, 0x1, 0xe, 0x2, 0x7fff, 0xf, 0x1, 0x6, 0x6, 0x5, 0x8000, 0x7, 0xdcd, 0xfffffffe, 0x200, 0x4, 0x8, 0x71, 0x4, 0x5, 0x401, 0xffff9756, 0x800, 0xbf3, 0x9, 0x2, 0xfffffff8, 0x1, 0x3, 0x8a4, 0x6, 0x4, 0x1, 0x0, 0x7, 0x1000, 0x8, 0x1, 0x1, 0x5, 0xff, 0x3, 0xc882, 0x2e, 0xe, 0x1, 0xffff8000, 0x401, 0x80000000, 0x81, 0x100, 0x31, 0xd, 0xa3adb627, 0x1fffc00, 0x3, 0x1, 0x28c5, 0x4, 0x966d, 0x477, 0x100, 0x3, 0x0, 0x5, 0x4f2b, 0x4, 0xf2e, 0x8001, 0x3, 0x9, 0xb9c7, 0x3ff, 0x7, 0x7d12, 0x7, 0x9, 0x200, 0x0, 0xcef5, 0x8, 0x5, 0x4, 0x4, 0x0, 0xd, 0x7f, 0x6, 0x6, 0x6, 0x8000, 0x7, 0x2, 0x0, 0x5, 0x3, 0x83d, 0x1, 0x7, 0x8, 0x4, 0x4, 0x6, 0x7, 0x8, 0x9, 0x5, 0x8a, 0x4, 0x81, 0x8000, 0x9, 0x1, 0x2, 0xad7b, 0x7922, 0x3, 0x400, 0x5, 0x2, 0x1000, 0x80c8, 0xfffffff8, 0x7, 0x0, 0x70d6, 0xfffffffb, 0x2, 0x1, 0x72012517, 0x3, 0x10000, 0xffff, 0x7, 0x8000, 0x0, 0x0, 0xfe, 0x1, 0xc2de, 0x400, 0x1ff, 0x7, 0x401, 0x5, 0x2, 0x2, 0x7ff, 0x3, 0xffffff0f, 0x7fff, 0xfc, 0x6, 0x7fff, 0x1000, 0x2, 0x62, 0x7, 0x0, 0x0, 0x7, 0x0, 0x4, 0xa67, 0x8, 0x2e, 0x8, 0x3, 0x7fffffff, 0x4, 0x9, 0x3, 0x2, 0x5, 0x8, 0x80, 0x1, 0x1ff, 0x4, 0x9, 0x7, 0xa34c, 0x0, 0xb3d, 0x6, 0x0, 0x3, 0xac, 0x0, 0x1, 0x3, 0x3, 0x6, 0xdec8, 0x3, 0xf, 0x80000001, 0x9, 0x92, 0x3ff, 0xc0, 0x1, 0x609f, 0x5, 0x6, 0x1c229b73, 0xff, 0x9, 0x81, 0x781, 0x200, 0x5, 0x9, 0x80000000, 0x6, 0x4, 0x7, 0x10000, 0x2, 0xffff, 0x7ff, 0x9, 0xb1d, 0x3, 0x101, 0x0, 0x8, 0xd183, 0x81, 0x1, 0x2, 0x2, 0x0, 0x5, 0x0, 0x81, 0x9, 0x4, 0x4, 0x3, 0x4, 0x80, 0xffffffff, 0xa4fc, 0x74248b0, 0xffff0def, 0x0, 0xb, 0xfffffff6, 0x7, 0x6, 0x7, 0x8, 0x9, 0x380000, 0xf, 0x3, 0x3, 0xfff, 0x1, 0x2, 0x4, 0x2, 0x401, 0xaf8c, 0x80000000, 0x3, 0x9, 0x100, 0xf18, 0x7, 0x3, 0x9, 0x7fff, 0xb, 0x2634, 0x7, 0x7, 0x4, 0x2, 0xfffff6d7, 0x2, 0x20fc, 0x7fff, 0xfffffff7, 0xb0, 0x6, 0x6, 0xffffff9a, 0x6, 0x1, 0x10000, 0x2, 0xfffff000, 0x9, 0x0, 0x8, 0x1, 0x3, 0xc4d, 0x2244, 0x1ff, 0x0, 0x5, 0xe, 0xffffffff, 0x8001, 0x3, 0xa, 0x5e2, 0x7, 0x2, 0x5, 0x6, 0x1, 0x6, 0x4, 0xae62, 0x80000000, 0x9, 0x2, 0x4, 0x836, 0xfffffffa, 0x7fff, 0x401, 0x0, 0x74, 0x9, 0xdd9, 0x4, 0x3, 0xd, 0x7, 0xb05, 0xd669, 0x0, 0x8, 0x5, 0x1, 0x11c4, 0xffff, 0x8, 0x0, 0x4, 0x9, 0xffff, 0x3, 0xc70, 0x80, 0x7, 0x3, 0x23c, 0x8c8a, 0x5c1b, 0x6, 0x9, 0x7f, 0x0, 0x2, 0x297, 0x6, 0x5, 0x8, 0x1, 0x3, 0x3, 0x1, 0xb73e, 0x7, 0xd30, 0xfffffff8, 0x9, 0x2, 0x80000001, 0x3, 0x6, 0xfffffff9, 0x8, 0x6, 0x100, 0x1ff, 0x3, 0x7637acd8, 0x8, 0x7, 0x4, 0x3, 0x2, 0xffffff86, 0x2, 0x4, 0xf548, 0x8, 0x81, 0xa, 0x5, 0xff, 0x1, 0x4, 0x6, 0x6, 0x10001, 0x9cb6d50d, 0x3, 0xc, 0x81, 0x3, 0x18, 0x7, 0x9, 0x761, 0x312, 0xffff2deb, 0x2, 0x4, 0x4, 0x0, 0x3, 0x3ff, 0x6bf, 0x101, 0x800, 0x0, 0xf83, 0xa6, 0x1, 0x101, 0x2, 0x1, 0x8, 0x5b, 0x9, 0x9, 0x1, 0x597, 0x6, 0x5, 0xffff, 0x8, 0x7, 0xd6, 0xc, 0x30dc4dc5, 0x7, 0x2, 0x95a, 0x8828, 0x4263, 0x1, 0x4, 0x2, 0x6, 0x800, 0x1, 0x2, 0x7ff, 0x10, 0x6, 0x5, 0xe, 0xfff, 0x1c, 0x8, 0x7, 0x4, 0x986, 0x1, 0x7, 0x8, 0x7, 0x1, 0x4, 0x80000, 0x55e70eba, 0xd, 0x9, 0x40, 0x0, 0x7, 0x3, 0x3, 0x3, 0xfe46, 0xc4b3, 0x0, 0x7, 0x0, 0x80000001, 0x200, 0x10000, 0x80, 0x5, 0x7, 0x2, 0x0, 0x0, 0x7fff, 0x8, 0x4, 0x3, 0x2, 0x80000001, 0x0, 0xdadb, 0x7, 0x8, 0x9, 0xd5, 0x8, 0x10001, 0x53, 0x2, 0x6, 0x6b2f, 0x5], 0x2, 0x400, 0x80000001}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac000905040310000607030905050308000e0e9a0905fdff"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000000f2ffffff000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}}, 0x0) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$eJzs3UtsHHcdB/DvrDdrO6DUaZO2IKRGjYigEYmdpSQIEAEhlEOFInHphYOVOI2VTVo5LnIrRFyeV4499FCEwqEn1ANSEYeKckZCQhy45B6Ju08smtnZ9Tp+xJvEXRs+H2l2/jP/129+npl9ydoA/7cuvZpDqyly6fQrK+X2vbvtzr277Zv9cpLJJI2k2VuluJUUnyQX01vyuXJnPVyx3Twv3//ovVPvftDubTXrpWrf2KnfJlu2XK2XnEgyUa8fw4bxrjz2eMUg7jJhJ/uJg3HrbrI6SvfdX7fAvlX0njc3mUkOJ5mqXwekvjs0Pt3onryR7nIAAABwQD21lrWs5Mi44wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICDpP79/6JeGv3yiRT93/9vVftaVfPWuON9XB+POwAAAAAAAAAAeAJeWMtaVnKkv90tqu/8X6w2jlWPn8mbuZ2FLOVMVjKf5SxnKXNJZqr6d6rH1sr88vLS3HY9u93une5E1fPcoGeGep7bFFqxc+Tdycc+eAAAAAAAAAA4YHb4svxnubT+/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwHRTLRW1XLsX55Jo1mkqkkrbLdavLnfvkg+3jcAQAAAMCn4Km1rGUlR4r/9La7RfWe/9nqff9U3sytLGcxy+lkIVerzwJ67/obf19td+7dbd8sl83jfuffI4VRjZjeZw9bzzxbtThet19N8v38MKdzIpezlMX8OPNZzkJO5HtVaT5FZqqx/vWtpI5zU7yT5cPFDaFcflisz1eRTOdaFqvYzuTK4GOQRr/N0Gx/bCUbMtTIO2V2im/XHpqdXtavDm39ZrB3P5ipDurQICOzde7LbBy9t13uK73zZHL0mZr1nsbgM6hjO800cs57DtfrMte/Gs75C7uNeK8M57yM6lwag7Pv2Z1znnz5H3+5fL1z68b1a7dP75/TaFvdbvfO9rUPnn3tQSam8tzuM7G6TSY+3Lg5sVWbqREPaI+06mz0Yly/WyaXhu+W3W6y6W75YtX3SBbzg7yeq1nI+cxmLhcym6/nXNobzrDjO+e1utYao11rJ79UF6aT/Lpe7w+tQ8nRobwO3+nKfB/dsGc9S0/vIksj3pGan68L5Rw/H3rGGb8HMzE3lIlnds7Eb8szMrc7t24sXZ9/Y5fznarX5WX7y43Ph797Esfz6Mrr8Onyj1VtbTw7yrpntqybq+qODeoam+qOD+oedqW26tdwm0fq1T23ZV27qns+/6yf9h54lZPX0xm8CgFgv+hu3nX4pcOt6fvTf5t+f/oX09enX5n67uSFyS+0cuivzT9N/KHx+8Y3i5fyfn6aI+MIGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/tfcfuvtG/OdzsLSPiykMVqv8nj2OLCpvZ9ijwqTSUbp1b3T7RbNJxvGh0keuXv/twL7e77YWchnd+jVHDrD13vti7/F4xe+8aM6GQ9p3BztMp+uB9w/Py4G7J2zyzffOHv7rbe/snhz/rWF1xZunbtw/sL59tfmvnr22mJnYbb3OO4ogb2w/uw/7kgAAAAAAAAAAACA3drLf1Qo6v/WGPcxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfbpVdzaDVF5mbPzJbb9+62O+XSL6+3bCZpJCl+khSfJBfTWzIzNFyx3Twv3//ovVPvftBeH6vZb9/Yqd/urCYTq2XhRJKJev1Agy1M7jBeBuNdGR6v8SjhFYMjLBN2sp84GLf/BgAA///RGv9P") r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a, 0xfffffffc}) connect(r1, &(0x7f0000000000)=@in={0x2, 0x4e21, @broadcast}, 0x80) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0xffffffffffffffff) 15.239084501s ago: executing program 5 (id=1943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20004874) socket(0xa, 0x3, 0xff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 13.999080303s ago: executing program 8 (id=1945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 13.00024546s ago: executing program 5 (id=1947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 10.622967979s ago: executing program 6 (id=1948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe18, 0xa0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 10.622689925s ago: executing program 4 (id=1949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, 0x0, 0x0, 0x10001, 0x0) socket(0x28, 0x5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000080)=""/119, 0x77}, &(0x7f0000001b40)=[{&(0x7f0000000200)=""/80, 0x50}], 0x1, 0x21}}], 0x48}, 0x0) 10.429452145s ago: executing program 5 (id=1950): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x8, 0x1, 0x100000d, 0x0, 0x275, 0x1000000, 0x6ae0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 10.093596949s ago: executing program 8 (id=1951): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xfe) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0xd1, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) mq_timedreceive(0xffffffffffffffff, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 9.216538927s ago: executing program 4 (id=1952): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6020, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) syz_clone3(&(0x7f0000000980)={0x200000000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, &(0x7f0000000880)=""/186, 0x0, 0x0, {r4}}, 0x58) 8.484420866s ago: executing program 1 (id=1953): r0 = socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={{0x14, 0x3ed, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x3ed, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r4, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) 8.474670752s ago: executing program 6 (id=1954): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000280)={0xffffcf93, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003b00010324bd702202dcdf25040000005bd4520811424c1476600e7998b96f71813424cad4537c7c57a9fae3a8e79fc1a59820106449414c4650f33dfbd1d9485cf34922a4aecabb31"], 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x408c0) 8.472432198s ago: executing program 5 (id=1955): socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x0, 0x346, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000005580)=""/102392, 0x18ff8) fcntl$addseals(r7, 0x409, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 7.723621304s ago: executing program 4 (id=1956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20) 6.505862604s ago: executing program 6 (id=1957): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x30) syz_create_resource$binfmt(0x0) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="f78d9ca3", 0x4}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/93, 0x5d}], 0x1}, 0x0) 6.340400576s ago: executing program 1 (id=1958): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f0000000800), 0x0}, 0x20) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0406"], 0xc) dup(r4) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 6.339753116s ago: executing program 8 (id=1959): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000001180)) r2 = dup(r1) mmap(&(0x7f0000505000/0x2000)=nil, 0x2000, 0xb, 0x110, r2, 0xab10c000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000032300)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) 5.338523179s ago: executing program 4 (id=1960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.024042463s ago: executing program 8 (id=1961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.383007282s ago: executing program 6 (id=1962): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@usrquota}, {@nodelalloc}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '$:],-}\x12-\x0e)^\''}}, {@appraise_type}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) writev(r3, &(0x7f0000002a00)=[{&(0x7f0000001880)="fd", 0x1}], 0x1) 3.376982315s ago: executing program 1 (id=1963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) copy_file_range(r3, 0x0, r5, 0x0, 0xfffffbffa003e45f, 0x700000000000000) 3.31983449s ago: executing program 8 (id=1964): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 3.109569445s ago: executing program 5 (id=1965): semget(0x3, 0x2, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_buf(r4, 0x1, 0x52, 0xffffffffffffffff, &(0x7f0000000000)=0xa) r5 = semget(0x2, 0x3, 0x33a) semtimedop(r5, 0x0, 0x0, 0x0) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000000140)=""/91) 1.483764068s ago: executing program 8 (id=1966): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2000) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x75, @string={0x75, 0x3, "2431daa7dc448f65496993b81809abb673b5b261eaf377172e6227c75ab1a276ac22a3c586f71cd770b83ecb0ded87b95acdf5fa641e5e2c01855a8b6f920795c87875c5085dddcedab4bd4c0314c0223b01ab4641d687c55107b88b7085fbf88e7242c86b431321bd7e1a4e5d3fadeac86cc4"}}, 0x0, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x669}}}}, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="140000"], 0x18}}], 0x1, 0x44081) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x3}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.473962518s ago: executing program 6 (id=1967): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x30, &(0x7f0000000080)={0x3f, 0x6, 0x7}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x0, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x759e, 0xfffffff8, 0x3523, 0xb3c2, 0xfb34, 0x9}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1c4d}}}, {{@ip={@loopback, @broadcast, 0x0, 0xff000000, 'vxcan1\x00', 'wlan1\x00', {0xff}, {}, 0x21, 0x3, 0x4}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0xfffffffffffffffd}}, @common=@icmp={{0x28}, {0xf, "1ac9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @empty, 0xffffff00, 0x0, 'wg0\x00', 'geneve1\x00', {0xff}, {}, 0x2f, 0x3, 0x20}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x25, "3fc1fdae24fa5cc6d7d12d3e01846141504e077ce58adbb23b45918f5cff"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r3, 0x7000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd3}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r5, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) 1.473256319s ago: executing program 4 (id=1968): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x638) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @remote, 0x9}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000440)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 478.28476ms ago: executing program 1 (id=1969): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) fchmod(0xffffffffffffffff, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x2, 0x18}, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000a00)={0x0, 0x0, 0x800}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) 191.287144ms ago: executing program 4 (id=1970): socket$netlink(0x10, 0x3, 0xb) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000001cc0), 0x800) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003075f3740"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000c40)={{0x12, 0x1, 0x201, 0xb2, 0xc2, 0xad, 0x8, 0x458, 0x7005, 0x7a55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1c, 0x1, 0x90, 0x4, "", [{{0x9, 0x4, 0x1d, 0xfc, 0x0, 0x4f, 0x25, 0xbe, 0x4}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007da000/0x4000)=nil, &(0x7f00009fa000/0x3000)=nil, &(0x7f000033d000/0x1000)=nil, &(0x7f0000151000/0x2000)=nil, &(0x7f0000906000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000ea000/0x9000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xc, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 6 (id=1971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20) kernel console output (not intermixed with test programs): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.447830][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.131580][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.150881][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.170934][ T6767] bridge_slave_0: entered allmulticast mode [ 170.201864][ T6767] bridge_slave_0: entered promiscuous mode [ 170.237068][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 170.260574][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.283122][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.312282][ T6767] bridge_slave_1: entered allmulticast mode [ 170.346105][ T6767] bridge_slave_1: entered promiscuous mode [ 170.386936][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.319'. [ 170.508321][ T6767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.689646][ T6767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.719389][ T30] audit: type=1326 audit(1784393131.194:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.4.313" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f3b9de99 code=0x7ffc0000 [ 170.828121][ T30] audit: type=1326 audit(1784393131.194:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.4.313" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f3b9de99 code=0x7ffc0000 [ 170.879616][ T6767] team0: Port device team_slave_0 added [ 170.936391][ T6767] team0: Port device team_slave_1 added [ 171.166756][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.198261][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.295151][ T6767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.349030][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.383885][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.496836][ T6767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.586434][ T7004] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 171.647050][ T7004] overlayfs: failed to set xattr on upper [ 171.698082][ T7004] overlayfs: ...falling back to redirect_dir=nofollow. [ 171.755678][ T7004] overlayfs: ...falling back to index=off. [ 171.803571][ T6767] hsr_slave_0: entered promiscuous mode [ 171.822865][ T7004] overlayfs: ...falling back to uuid=null. [ 171.835010][ T6767] hsr_slave_1: entered promiscuous mode [ 171.875810][ T6767] debugfs: 'hsr0' already exists in 'hsr' [ 171.894908][ T7004] overlayfs: failed to clone lowerpath [ 171.906159][ T6767] Cannot create hsr debugfs directory [ 172.485967][ T7025] loop4: detected capacity change from 0 to 2048 [ 172.530111][ T7025] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.333622][ T30] audit: type=1800 audit(1784393133.804:56): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.328" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 175.969413][ T7047] tipc: Started in network mode [ 176.009862][ T7047] tipc: Node identity f2508ec9a334, cluster identity 4711 [ 176.078448][ T7047] tipc: Enabled bearer , priority 0 [ 176.125926][ T7045] syzkaller0: MTU too low for tipc bearer [ 176.178098][ T7045] tipc: Disabling bearer [ 176.265694][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 176.422174][ T6767] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 176.437119][ T5758] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 176.505281][ T6767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.534550][ T7061] warning: `syz.4.338' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 176.561579][ T6767] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 176.607451][ T7046] syz.1.333 (7046): drop_caches: 2 [ 176.631609][ T6767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.646901][ T5758] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 176.658292][ T6767] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 176.703364][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.736163][ T5758] usb 1-1: Product: syz [ 176.738669][ T6767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.769920][ T5758] usb 1-1: Manufacturer: syz [ 176.778443][ T6767] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 176.791883][ T5758] usb 1-1: SerialNumber: syz [ 176.824687][ T5758] usb 1-1: config 0 descriptor?? [ 176.838426][ T7065] process 'syz.5.339' launched './file0' with NULL argv: empty string added [ 176.912443][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'. [ 176.999691][ T6767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.047229][ T5758] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 177.113931][ T7072] binder: 7071:7072 ioctl c0306201 200000000640 returned -22 [ 177.155833][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 177.507956][ T30] audit: type=1800 audit(1784393137.984:57): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.339" name="/" dev="fuse" ino=4 res=0 errno=0 [ 177.869716][ T7067] loop4: detected capacity change from 0 to 131072 [ 177.934982][ T7067] F2FS-fs (loop4): invalid crc value [ 178.102771][ T7067] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 178.120465][ T7067] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 178.338750][ T7096] loop1: detected capacity change from 0 to 256 [ 178.375652][ T6767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.395580][ T7096] exfat: Deprecated parameter 'utf8' [ 178.515171][ T5758] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 178.527452][ T6767] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.583043][ T5758] usb 1-1: USB disconnect, device number 5 [ 178.604644][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.611945][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.726812][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.734135][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.639630][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 179.810899][ T7126] orangefs_devreq_open: device cannot be opened in blocking mode [ 180.033040][ T7125] overlayfs: workdir and upperdir must reside under the same mount [ 180.622415][ T7141] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 180.957203][ T7148] loop4: detected capacity change from 0 to 256 [ 180.995872][ T7148] exfat: Deprecated parameter 'utf8' [ 181.193242][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 181.236233][ T7155] Bluetooth: MGMT ver 1.23 [ 181.284021][ T7155] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 181.289917][ T7160] binder: 7159:7160 ioctl c0306201 200000000180 returned -14 [ 181.390357][ T7157] hsr_slave_0 (unregistering): left promiscuous mode [ 181.442811][ T5728] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 181.626154][ T6767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.633500][ T5728] usb 4-1: Using ep0 maxpacket: 32 [ 181.642273][ T5728] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.659661][ T5728] usb 4-1: config 0 has no interface number 0 [ 181.676081][ T5728] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 181.696976][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.721026][ T5728] usb 4-1: Product: syz [ 181.729846][ T5728] usb 4-1: Manufacturer: syz [ 181.738478][ T5728] usb 4-1: SerialNumber: syz [ 181.757377][ T5728] usb 4-1: config 0 descriptor?? [ 181.805189][ T5728] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 181.836767][ T5728] usb 4-1: selecting invalid altsetting 1 [ 181.852247][ T5728] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 181.915002][ T5728] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 181.940559][ T5728] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 181.960127][ T5728] usb 4-1: media controller created [ 182.021870][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.127780][ T5728] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 182.135477][ T5728] zl10353_read_register: readreg error (reg=127, ret==-71) [ 182.148048][ T5728] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 182.216518][ T5728] usb 4-1: USB disconnect, device number 3 [ 182.229083][ T6767] veth0_vlan: entered promiscuous mode [ 182.258561][ T6767] veth1_vlan: entered promiscuous mode [ 182.351563][ T6767] veth0_macvtap: entered promiscuous mode [ 182.365447][ T6767] veth1_macvtap: entered promiscuous mode [ 182.397253][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.419090][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.444580][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.458918][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.472790][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.499450][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.615674][ T5956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.640501][ T5956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.695171][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.712760][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.841894][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807fe5a400: rx timeout, send abort [ 182.853423][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807fe5a400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 182.868809][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807f46c800: rx timeout, send abort [ 182.877839][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807f46c800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 183.263423][ T7190] loop3: detected capacity change from 0 to 512 [ 183.277143][ T7190] EXT4-fs: Ignoring removed oldalloc option [ 183.604505][ T7190] EXT4-fs (loop3): Test dummy encryption mode enabled [ 184.162150][ T7190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.751046][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.250904][ T7245] loop0: detected capacity change from 0 to 4096 [ 186.363149][ T5773] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 186.552785][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.594520][ T5773] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 186.640841][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.695509][ T5773] usb 4-1: config 0 descriptor?? [ 186.735339][ T5773] pwc: Askey VC010 type 2 USB webcam detected. [ 186.830309][ T7266] fuse: fd is not a fuse device [ 187.165117][ T5773] pwc: recv_control_msg error -32 req 02 val 2b00 [ 187.324300][ T5773] pwc: recv_control_msg error -32 req 02 val 2700 [ 187.521284][ T5773] pwc: recv_control_msg error -32 req 02 val 2c00 [ 187.635078][ T5773] pwc: recv_control_msg error -32 req 04 val 1000 [ 187.703485][ T5773] pwc: recv_control_msg error -32 req 04 val 1300 [ 187.728479][ T5773] pwc: recv_control_msg error -32 req 04 val 1400 [ 187.736361][ T5773] pwc: recv_control_msg error -32 req 02 val 2000 [ 187.951445][ T5773] pwc: recv_control_msg error -71 req 04 val 1500 [ 187.987969][ T5773] pwc: recv_control_msg error -71 req 02 val 2500 [ 188.024053][ T5773] pwc: recv_control_msg error -71 req 02 val 2400 [ 188.058541][ T5773] pwc: recv_control_msg error -71 req 02 val 2600 [ 188.081803][ T5773] pwc: recv_control_msg error -71 req 02 val 2900 [ 188.133021][ T5773] pwc: recv_control_msg error -71 req 02 val 2800 [ 188.177164][ T5773] pwc: recv_control_msg error -71 req 04 val 1100 [ 188.355979][ T5773] pwc: recv_control_msg error -71 req 04 val 1200 [ 189.481431][ T7291] netlink: 64 bytes leftover after parsing attributes in process `syz.0.388'. [ 189.561342][ T5773] pwc: Registered as video103. [ 189.729282][ T5773] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 190.012998][ T5773] usb 4-1: USB disconnect, device number 4 [ 190.154417][ T7307] tipc: Failed to remove unknown binding: 66,0,0/0:3346378758/3346378759 [ 190.222449][ T7307] tipc: Failed to remove unknown binding: 66,0,0/0:3346378758/3346378759 [ 191.847056][ T30] audit: type=1800 audit(191.797:58): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.401" name="/" dev="fuse" ino=1 res=0 errno=0 [ 192.331124][ T30] audit: type=1326 audit(192.277:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.404" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27b339de99 code=0x0 [ 193.717091][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.725814][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.678754][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 196.715619][ T7427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.720057][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 196.805841][ T7427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.869754][ T7427] bond0 (unregistering): Released all slaves [ 199.793088][ T185] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 199.998377][ T185] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 200.039445][ T185] usb 2-1: config 0 has no interface number 0 [ 200.070792][ T185] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 200.145948][ T185] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 200.205016][ T185] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 200.250369][ T185] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 200.282165][ T7495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.301257][ T185] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 200.347844][ T7495] bond0 (unregistering): Released all slaves [ 200.367374][ T185] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 200.401134][ T185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.474433][ T185] usb 2-1: config 0 descriptor?? [ 200.508621][ T7477] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.618564][ T185] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 201.152072][ T7509] loop0: detected capacity change from 0 to 512 [ 201.203477][ T24] usb 2-1: USB disconnect, device number 4 [ 201.218127][ T7509] EXT4-fs (loop0): invalid journal inode [ 201.245814][ T7509] EXT4-fs (loop0): can't get journal size [ 201.306440][ T7509] EXT4-fs (loop0): 1 truncate cleaned up [ 201.349945][ T7509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.374188][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 201.602626][ T7509] loop0: detected capacity change from 512 to 64 [ 201.803141][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 201.989089][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 202.019791][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.051807][ T24] usb 2-1: Product: syz [ 202.069665][ T24] usb 2-1: Manufacturer: syz [ 202.088641][ T24] usb 2-1: SerialNumber: syz [ 202.263867][ T5633] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 202.303877][ T5633] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 202.545933][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 202.586861][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 202.693709][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.891486][ T7214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.911328][ T7214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.078629][ T7214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.107480][ T7214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.275670][ T7214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.303399][ T7214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.476927][ T7214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.502250][ T7214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.768143][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.416078][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.430463][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.443015][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.453004][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.679137][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 204.694034][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 204.723230][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 204.747157][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 205.411398][ T7562] netlink: 596 bytes leftover after parsing attributes in process `syz.4.467'. [ 205.495693][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 205.576268][ T7214] bridge_slave_1: left allmulticast mode [ 205.624419][ T7214] bridge_slave_1: left promiscuous mode [ 205.677641][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.712572][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 205.728122][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 205.740068][ T7214] bridge_slave_0: left allmulticast mode [ 205.771664][ T7214] bridge_slave_0: left promiscuous mode [ 205.790467][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.872366][ T7214] dvmrp0: left allmulticast mode [ 205.894660][ T7555] loop6: detected capacity change from 0 to 131072 [ 205.908742][ T24] usb 2-1: USB disconnect, device number 5 [ 205.914824][ T7555] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 205.921972][ T7555] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 205.949289][ T7555] F2FS-fs (loop6): invalid crc value [ 206.039703][ T7555] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 206.066399][ T7555] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 206.075323][ T7555] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 206.113506][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 206.120028][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 206.195372][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 206.201514][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 206.227585][ T30] audit: type=1800 audit(206.177:60): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.465" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 206.515076][ T5628] Bluetooth: hci4: command tx timeout [ 206.830017][ T7214] bond1 (unregistering): (slave gretap1): Releasing active interface [ 207.110454][ T7214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.171100][ T7214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.214055][ T7214] bond0 (unregistering): Released all slaves [ 207.278683][ T7214] bond1 (unregistering): Released all slaves [ 208.578329][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 208.593670][ T5628] Bluetooth: hci4: command tx timeout [ 209.580797][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 209.639083][ T7615] tc_dump_action: action bad kind [ 210.109300][ T7632] netlink: 'syz.1.480': attribute type 10 has an invalid length. [ 210.272451][ T7214] hsr_slave_1: left promiscuous mode [ 210.297835][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.326453][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.371822][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.420002][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.503758][ T5773] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 210.530995][ T7214] veth1_macvtap: left promiscuous mode [ 210.559265][ T7214] veth0_macvtap: left promiscuous mode [ 210.579660][ T7214] veth1_vlan: left promiscuous mode [ 210.600405][ T7214] veth0_vlan: left promiscuous mode [ 210.673359][ T5628] Bluetooth: hci4: command tx timeout [ 210.705430][ T5773] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 210.758813][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.814356][ T5773] usb 4-1: Product: syz [ 210.846108][ T5773] usb 4-1: Manufacturer: syz [ 210.873763][ T5773] usb 4-1: SerialNumber: syz [ 210.924152][ T5773] usb 4-1: config 0 descriptor?? [ 210.974718][ T5773] ch341 4-1:0.0: ch341-uart converter detected [ 212.219489][ T7214] team0 (unregistering): Port device team_slave_1 removed [ 212.227185][ T5773] ch341-uart ttyUSB0: break control not supported, using simulated break [ 212.296863][ T5773] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 212.320766][ T7214] team0 (unregistering): Port device team_slave_0 removed [ 212.753397][ T5628] Bluetooth: hci4: command tx timeout [ 212.914343][ T24] usb 4-1: USB disconnect, device number 5 [ 212.999473][ T24] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 213.048979][ T24] ch341 4-1:0.0: device disconnected [ 213.055972][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 213.330736][ T7681] loop3: detected capacity change from 0 to 8192 [ 213.450051][ T7681] loop3: p1[EZD] p2 p3 p4 [ 213.471821][ T7681] loop3: partition table partially beyond EOD, truncated [ 213.515497][ T7681] loop3: p1 size 32768 extends beyond EOD, truncated [ 213.528436][ T7681] loop3: p2 start 930308 is beyond EOD, truncated [ 213.535737][ T7681] loop3: p3 start 117772289 is beyond EOD, truncated [ 213.542558][ T7681] loop3: p4 size 262144 extends beyond EOD, truncated [ 213.634216][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 213.828215][ T24] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 214.020293][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.076170][ T24] usb 4-1: Product: syz [ 214.096319][ T24] usb 4-1: Manufacturer: syz [ 214.813225][ T24] usb 4-1: SerialNumber: syz [ 216.559217][ T24] rtl8150 4-1:1.0: couldn't reset the device [ 217.186320][ T24] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 217.480253][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.520682][ T7545] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.595325][ T7545] bridge_slave_0: entered allmulticast mode [ 217.714698][ T7725] comedi comedi4: bad chanlist[1]=0x0000b89f chan=47263 range length=2 [ 217.834006][ T7545] bridge_slave_0: entered promiscuous mode [ 218.036945][ T7545] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.119858][ T7545] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.237886][ T7545] bridge_slave_1: entered allmulticast mode [ 218.259288][ T24] usb 4-1: USB disconnect, device number 6 [ 218.535038][ T7545] bridge_slave_1: entered promiscuous mode [ 218.742396][ T7545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.772624][ T7545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.815568][ T7664] udevd[7664]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 218.988972][ T7545] team0: Port device team_slave_0 added [ 219.065162][ T7545] team0: Port device team_slave_1 added [ 219.266348][ T7545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.290746][ T7545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.397048][ T7545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.463971][ T7545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.491014][ T7545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.605592][ T7545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.670998][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 219.967884][ T7545] hsr_slave_0: entered promiscuous mode [ 219.977322][ T7749] loop6: detected capacity change from 0 to 256 [ 219.987916][ T7545] hsr_slave_1: entered promiscuous mode [ 220.018308][ T7749] FAT-fs (loop6): data area starts beyond volume (274 > 64) [ 220.060459][ T7749] FAT-fs (loop6): Can't find a valid FAT filesystem [ 220.550315][ T7760] loop1: detected capacity change from 0 to 1024 [ 220.855945][ T5628] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 220.866907][ T5628] CPU: 1 UID: 0 PID: 5628 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 220.866938][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 220.866954][ T5628] Workqueue: hci0 hci_rx_work [ 220.866991][ T5628] Call Trace: [ 220.867001][ T5628] [ 220.867010][ T5628] dump_stack_lvl+0xe8/0x150 [ 220.867051][ T5628] sysfs_create_dir_ns+0x271/0x2a0 [ 220.867089][ T5628] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 220.867126][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.867156][ T5628] ? do_raw_spin_unlock+0xf5/0x210 [ 220.867190][ T5628] kobject_add_internal+0x622/0xcd0 [ 220.867237][ T5628] kobject_add+0x163/0x240 [ 220.867264][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.867301][ T5628] ? __pfx_kobject_add+0x10/0x10 [ 220.867327][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.867358][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.867391][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.867419][ T5628] ? get_device_parent+0x366/0x3a0 [ 220.867450][ T5628] device_add+0x3fa/0xb80 [ 220.867479][ T5628] hci_conn_add_sysfs+0xd5/0x210 [ 220.867523][ T5628] le_conn_complete_evt+0xfef/0x1580 [ 220.867568][ T5628] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 220.867602][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.867630][ T5628] ? __mutex_unlock_slowpath+0x731/0x900 [ 220.867660][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.867688][ T5628] ? skb_pull_data+0xf0/0x200 [ 220.867723][ T5628] hci_le_conn_complete_evt+0x187/0x470 [ 220.867764][ T5628] hci_event_packet+0x67a/0xf10 [ 220.867798][ T5628] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 220.867826][ T5628] ? __pfx_hci_event_packet+0x10/0x10 [ 220.867858][ T5628] ? audit_trim_trees+0x280/0x7e0 [ 220.867886][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.867914][ T5628] ? hci_send_to_monitor+0xe2/0x590 [ 220.867954][ T5628] hci_rx_work+0x3ee/0x1020 [ 220.867997][ T5628] ? process_scheduled_works+0xa20/0x14e0 [ 220.868026][ T5628] process_scheduled_works+0xa8e/0x14e0 [ 220.868086][ T5628] ? __pfx_process_scheduled_works+0x10/0x10 [ 220.868121][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.868149][ T5628] ? assign_work+0x3cf/0x5d0 [ 220.868183][ T5628] worker_thread+0xa47/0xfb0 [ 220.868246][ T5628] kthread+0x388/0x470 [ 220.868282][ T5628] ? __pfx_worker_thread+0x10/0x10 [ 220.868308][ T5628] ? __pfx_kthread+0x10/0x10 [ 220.868345][ T5628] ret_from_fork+0x514/0xb70 [ 220.868385][ T5628] ? __pfx_ret_from_fork+0x10/0x10 [ 220.868420][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.868448][ T5628] ? __switch_to+0xc89/0x1420 [ 220.868483][ T5628] ? __pfx_kthread+0x10/0x10 [ 220.868520][ T5628] ret_from_fork_asm+0x1a/0x30 [ 220.868564][ T5628] [ 220.870132][ T5628] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 221.158887][ T5628] Bluetooth: hci0: failed to register connection device [ 221.160110][ T7770] Driver unsupported XDP return value 0 on prog (id 54) dev N/A, expect packet loss! [ 221.662247][ T7545] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 221.709058][ T7545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.764006][ T7545] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 221.818576][ T7545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.848835][ T7545] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 221.899306][ T7545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.921298][ T7545] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 221.938850][ T7545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.276215][ T7545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.361856][ T7545] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.415538][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.422801][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.474582][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 222.521221][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.528517][ T7225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.629869][ T7819] batman_adv: batadv0: Adding interface: dummy0 [ 222.654500][ T7819] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.712064][ T7819] batman_adv: batadv0: Interface activated: dummy0 [ 222.830775][ T7820] batadv0: mtu less than device minimum [ 222.875485][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.890590][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.903040][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.915025][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.926890][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.938767][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.951107][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.963204][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.975234][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.979445][ T7826] netlink: 'syz.1.527': attribute type 2 has an invalid length. [ 223.246468][ T50] Bluetooth: hci5: unexpected event for opcode 0x040d [ 223.990525][ T7826] : entered promiscuous mode [ 225.317853][ T7853] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 225.510104][ T7853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.607018][ T7853] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 226.525957][ T7873] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 226.814345][ T7873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.852414][ T7876] vlan2: entered allmulticast mode [ 226.858191][ T7876] bond1: entered allmulticast mode [ 226.883456][ T7878] bond1: (slave geneve2): making interface the new active one [ 226.891240][ T7878] geneve2: entered allmulticast mode [ 226.900884][ T7878] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 227.084928][ T185] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 227.201800][ T7897] loop1: detected capacity change from 0 to 512 [ 227.230667][ T7897] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.263083][ T185] usb 7-1: Using ep0 maxpacket: 16 [ 227.284984][ T185] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 227.323747][ T185] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 227.359434][ T185] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 227.386540][ T185] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.412851][ T185] usb 7-1: Product: syz [ 227.427808][ T185] usb 7-1: Manufacturer: syz [ 227.435599][ T185] usb 7-1: SerialNumber: syz [ 227.457211][ T185] usb 7-1: config 0 descriptor?? [ 227.501130][ T185] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 227.530009][ T185] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 227.597026][ T7545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.651653][ T7904] netlink: 596 bytes leftover after parsing attributes in process `syz.1.546'. [ 228.761550][ T185] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 228.806783][ T185] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 229.469240][ T185] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 229.500086][ T185] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 229.629491][ T7545] veth0_vlan: entered promiscuous mode [ 229.703900][ T7545] veth1_vlan: entered promiscuous mode [ 229.730055][ T185] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 229.768796][ T7545] veth0_macvtap: entered promiscuous mode [ 229.804161][ T185] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 229.820802][ T185] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 229.840583][ T185] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 230.447089][ T185] usb 7-1: USB disconnect, device number 2 [ 230.534138][ T7545] veth1_macvtap: entered promiscuous mode [ 230.560931][ T7545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.573962][ T7545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.689567][ T976] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.724972][ T976] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.748377][ T976] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.809189][ T976] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.059621][ T7957] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.083948][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 231.909490][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 231.924110][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.943842][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.992575][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.028344][ T7225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.035044][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 232.074463][ T7225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.086629][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 232.103014][ T50] Bluetooth: hci3: Malformed LE Event: 0x0d [ 232.152445][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 232.210820][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 232.229983][ T24] usb 2-1: Manufacturer: syz [ 232.249458][ T24] usb 2-1: config 0 descriptor?? [ 232.252595][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.291177][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.535659][ T30] audit: type=1326 audit(2000000017.179:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7971 comm="syz.6.567" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f956659de99 code=0x0 [ 232.697664][ T7980] bridge0: port 3(erspan0) entered blocking state [ 232.708292][ T24] rc_core: IR keymap rc-hauppauge not found [ 232.726371][ T24] Registered IR keymap rc-empty [ 232.739434][ T7980] bridge0: port 3(erspan0) entered disabled state [ 232.747927][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.758826][ T7980] erspan0: entered allmulticast mode [ 232.782888][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.808120][ T7980] erspan0: entered promiscuous mode [ 232.826312][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 232.845024][ T7980] bridge0: port 3(erspan0) entered blocking state [ 232.854339][ T7980] bridge0: port 3(erspan0) entered forwarding state [ 232.887247][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 232.957521][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 233.028074][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 233.036501][ T7984] erspan0: left allmulticast mode [ 233.065255][ T7984] erspan0: left promiscuous mode [ 233.079642][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 233.112013][ T7984] bridge0: port 3(erspan0) entered disabled state [ 233.120712][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 233.153222][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 233.225621][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 233.297569][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 233.969574][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 234.023583][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 234.107981][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 234.204869][ T50] Bluetooth: hci5: unexpected subevent 0x0e length: 32 > 15 [ 234.212372][ T50] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 234.269386][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 234.318108][ T8004] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 234.335291][ T8009] tipc: Failed to remove unknown binding: 66,2,2/0:541874151/541874155 [ 234.349442][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 234.419175][ T8006] loop3: detected capacity change from 0 to 512 [ 234.433567][ T24] usb 2-1: USB disconnect, device number 6 [ 234.492264][ T8006] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 234.564498][ T8006] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.578: corrupted in-inode xattr: e_value size too large [ 234.625649][ T8006] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.632692][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 234.648423][ C1] EXT4-fs (loop3): initial error at time 2000000019: ext4_iget_extra_inode:5180: inode 15 [ 234.658538][ C1] EXT4-fs (loop3): last error at time 2000000019: ext4_iget_extra_inode:5180: inode 15 [ 234.677287][ T8006] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.578: couldn't read orphan inode 15 (err -117) [ 234.771630][ T8006] loop3: lost filesystem error report for type 5 error -117 [ 236.340234][ T8006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.564500][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.716237][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.588'. [ 238.849095][ T8057] loop3: detected capacity change from 0 to 1024 [ 238.870289][ T8057] EXT4-fs: Ignoring removed orlov option [ 238.970869][ T8057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.206759][ T8057] loop3: detected capacity change from 1024 to 0 [ 239.320310][ T8075] loop6: detected capacity change from 0 to 512 [ 239.379941][ T8075] EXT4-fs (loop6): Test dummy encryption mode enabled [ 239.417294][ T8057] EXT4-fs error (device loop3): ext4_get_inode_loc:5024: inode #2: block 5: comm syz.3.589: unable to read itable block [ 239.458111][ T8057] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 239.468408][ T8057] EXT4-fs (loop3): I/O error while writing superblock [ 239.475922][ T8057] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: IO failure [ 239.485667][ T8057] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 239.494983][ T8057] EXT4-fs (loop3): I/O error while writing superblock [ 239.504349][ T8075] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.594: corrupted xattr block 95: invalid header [ 239.504465][ T8075] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 239.518871][ T8057] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz.3.589: mark_inode_dirty error [ 239.522657][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 239.529064][ T8057] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 239.539257][ C0] EXT4-fs (loop6): initial error at time 2000000024: ext4_expand_extra_isize_ea:2810: inode 11 [ 239.539306][ C0] EXT4-fs (loop6): last error at time 2000000024: ext4_expand_extra_isize_ea:2810: inode 11 [ 239.577270][ T8057] EXT4-fs (loop3): I/O error while writing superblock [ 239.631330][ T8075] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 239.700060][ T8075] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.594: bg 0: block 7: invalid block bitmap [ 239.742966][ T8075] loop6: lost filesystem error report for type 5 error -117 [ 239.743909][ T8075] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 239.791376][ T8075] loop6: lost filesystem error report for type 5 error -117 [ 239.791899][ T8075] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #11: comm syz.6.594: corrupted xattr block 95: invalid header [ 239.863410][ T8075] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 239.870957][ T8075] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 239.943307][ T7225] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:5009: inode #2: block 5: comm kworker/u8:17: unable to read itable block [ 239.961883][ T7225] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 239.974717][ T7225] EXT4-fs (loop3): I/O error while writing superblock [ 239.983898][ T8075] EXT4-fs (loop6): 1 orphan inode deleted [ 240.005066][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.118496][ T8075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.168034][ T5619] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 240.253577][ T5619] EXT4-fs (loop3): I/O error while writing superblock [ 240.535100][ T8064] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 240.605577][ T30] audit: type=1804 audit(2000000025.209:62): pid=8092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.594" name="/newroot/35/file0/file1" dev="loop6" ino=15 res=1 errno=0 [ 241.651489][ T6767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.641060][ T1095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.153806][ T1095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.959165][ T1095] bond0: (slave netdevsim1): Releasing backup interface [ 246.089015][ T1095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.195522][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.208052][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.224460][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.241866][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.254673][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.545467][ T1095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.762521][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.771899][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.040475][ T30] audit: type=1804 audit(2000000031.679:63): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.621" name="/newroot/38/file0" dev="tmpfs" ino=214 res=1 errno=0 [ 247.584059][ T8199] dummy0: entered allmulticast mode [ 247.594788][ T8199] dummy0: left allmulticast mode [ 248.951180][ T50] Bluetooth: hci1: command tx timeout [ 249.717251][ T8247] loop1: detected capacity change from 0 to 256 [ 249.793758][ T1095] bridge_slave_1: left allmulticast mode [ 249.850122][ T1095] bridge_slave_1: left promiscuous mode [ 249.882038][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.951621][ T1095] bridge_slave_0: left allmulticast mode [ 249.986309][ T1095] bridge_slave_0: left promiscuous mode [ 250.013308][ T8247] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 250.028134][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.113002][ T8247] FAT-fs (loop1): Filesystem has been set read-only [ 250.995189][ T50] Bluetooth: hci1: command tx timeout [ 251.961004][ T1095] bond1 (unregistering): (slave geneve2): Releasing active interface [ 252.008844][ T1095] geneve2 (unregistering): left allmulticast mode [ 252.181403][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.396418][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.456310][ T1095] bond0 (unregistering): Released all slaves [ 252.735756][ T1095] bond1 (unregistering): Released all slaves [ 253.024660][ T8295] netlink: 36 bytes leftover after parsing attributes in process `syz.7.647'. [ 253.068266][ T8295] netlink: 36 bytes leftover after parsing attributes in process `syz.7.647'. [ 253.078514][ T50] Bluetooth: hci1: command tx timeout [ 253.151989][ T8295] vlan0: entered promiscuous mode [ 254.251776][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.312169][ T8295] batadv_slave_0: entered promiscuous mode [ 255.153156][ T50] Bluetooth: hci1: command tx timeout [ 255.165241][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.171978][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.240782][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.298102][ T8326] batadv_slave_1: entered promiscuous mode [ 256.408235][ T8339] loop7: detected capacity change from 0 to 32768 [ 256.415829][ T8339] btrfs: Deprecated parameter 'usebackuproot' [ 256.421919][ T8339] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 256.463357][ T8339] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.657 (8339) [ 256.500871][ T8345] loop5: detected capacity change from 0 to 512 [ 256.511100][ T8339] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.521378][ T8339] BTRFS info (device loop7): using crc32c checksum algorithm [ 256.531709][ T8345] EXT4-fs: inline encryption not supported [ 256.565034][ T8345] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 256.583409][ T8345] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.630749][ T7211] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 256.671341][ T8339] BTRFS error (device loop7): failed to load root extent [ 256.679131][ T8339] BTRFS warning (device loop7): try to load backup roots slot 1 [ 256.687308][ T7211] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 256.709465][ T8339] BTRFS warning (device loop7): couldn't read tree root [ 256.716603][ T8339] BTRFS warning (device loop7): try to load backup roots slot 2 [ 256.727861][ T7214] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 256.789789][ T8345] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 256.810706][ T8339] BTRFS warning (device loop7): couldn't read tree root [ 256.823851][ T8339] BTRFS warning (device loop7): try to load backup roots slot 3 [ 256.865592][ T8339] BTRFS info (device loop7): rebuilding free space tree [ 256.900553][ T8339] BTRFS info (device loop7): disabling free space tree [ 256.908491][ T8339] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 256.912008][ T8345] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.659: bg 0: block 248: padding at end of block bitmap is not set [ 256.919693][ T8339] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 256.956567][ T8339] BTRFS info (device loop7): checking UUID tree [ 256.967423][ T8339] BTRFS info (device loop7): enabling ssd optimizations [ 256.974459][ T8339] BTRFS info (device loop7): turning on async discard [ 256.981241][ T8339] BTRFS info (device loop7): force clearing of disk cache [ 256.988754][ T8339] BTRFS info (device loop7): enabling auto defrag [ 256.995306][ T8339] BTRFS info (device loop7): trying to use backup root at mount time [ 257.003481][ T8339] BTRFS info (device loop7): use zstd compression, level 3 [ 257.027832][ T8345] loop5: lost filesystem error report for type 5 error -117 [ 257.032672][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 257.046880][ C1] EXT4-fs (loop5): last error at time 2000000041: ext4_validate_block_bitmap:441 [ 257.062230][ T8345] Quota error (device loop5): write_blk: dquota write failed [ 257.082924][ T8345] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 257.122861][ T8345] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.659: Failed to acquire dquot type 1 [ 257.155380][ T8345] loop5: lost filesystem error report for type 5 error -28 [ 257.173921][ T8345] EXT4-fs (loop5): 1 truncate cleaned up [ 257.260526][ T8345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 257.482018][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 257.527602][ T7545] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.551947][ T8376] netlink: 48 bytes leftover after parsing attributes in process `syz.5.659'. [ 257.683609][ T1095] hsr_slave_0: left promiscuous mode [ 257.730884][ T1095] hsr_slave_1: left promiscuous mode [ 257.809679][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.890697][ T1095] net_ratelimit: 10 callbacks suppressed [ 257.890722][ T1095] batadv0: mtu less than device minimum [ 257.952597][ T1095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.965984][ T1095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.977961][ T1095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.990050][ T1095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 258.002166][ T1095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 258.014256][ T1095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 258.026247][ T1095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 258.038364][ T1095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 258.050402][ T1095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 258.125832][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.143841][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.293442][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.331336][ T1095] batman_adv: batadv0: Interface deactivated: dummy0 [ 258.351534][ T1095] batman_adv: batadv0: Removing interface: dummy0 [ 258.413011][ T1095] veth1_macvtap: left promiscuous mode [ 258.536229][ T1095] veth0_macvtap: left promiscuous mode [ 258.541913][ T1095] veth1_vlan: left promiscuous mode [ 258.547425][ T1095] veth0_vlan: left promiscuous mode [ 261.059690][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 261.072862][ T30] audit: type=1326 audit(2000000045.709:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.7.672" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2aa39de99 code=0x0 [ 261.105162][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 261.587242][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.677'. [ 261.797316][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.806094][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.814514][ T8157] bridge_slave_0: entered allmulticast mode [ 261.825486][ T8157] bridge_slave_0: entered promiscuous mode [ 261.837560][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.845816][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.854043][ T8157] bridge_slave_1: entered allmulticast mode [ 261.874126][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.677'. [ 261.886369][ T8157] bridge_slave_1: entered promiscuous mode [ 261.973610][ T7211] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 261.977607][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 262.010022][ T7211] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:13: Failed to release dquot type 1 [ 262.094973][ T7211] loop5: lost filesystem error report for type 5 error -117 [ 262.343857][ T8157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.391359][ T8427] netlink: 'syz.5.679': attribute type 1 has an invalid length. [ 262.452319][ T8157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.712462][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.809598][ T8430] bond0: (slave syz_tun): making interface the new active one [ 262.863664][ T8430] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 263.271317][ T8448] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 263.297226][ T8157] team0: Port device team_slave_0 added [ 263.999914][ T8157] team0: Port device team_slave_1 added [ 264.157001][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.193524][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.270083][ T8157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.362517][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.418354][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.536701][ T8157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.894640][ T8157] hsr_slave_0: entered promiscuous mode [ 264.929445][ T8157] hsr_slave_1: entered promiscuous mode [ 264.954994][ T8157] debugfs: 'hsr0' already exists in 'hsr' [ 265.211811][ T8157] Cannot create hsr debugfs directory [ 265.221078][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 267.095177][ T8157] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 267.137372][ T8157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.186524][ T8157] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 267.235444][ T8157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.281232][ T8157] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 267.349791][ T8157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.375069][ T8157] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 267.446090][ T8157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.726110][ T8529] xt_hashlimit: size too large, truncated to 1048576 [ 267.890643][ T8157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.984399][ T8157] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.019064][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.026289][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.110832][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.118045][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.183116][ T30] audit: type=1326 audit(2000000052.819:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.6.707" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f956659de99 code=0x0 [ 268.227554][ T8540] loop7: detected capacity change from 0 to 128 [ 268.564944][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 271.089143][ T8610] loop5: detected capacity change from 0 to 64 [ 273.870338][ T8157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.971233][ T8625] fuse: fd is not a fuse device [ 274.010532][ T8620] syz.5.722: attempt to access beyond end of device [ 274.010532][ T8620] loop5: rw=0, sector=71, nr_sectors = 1 limit=64 [ 274.053578][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 274.141929][ T8620] Buffer I/O error on dev loop5, logical block 71, async page read [ 274.230161][ T8620] syz.5.722: attempt to access beyond end of device [ 274.230161][ T8620] loop5: rw=0, sector=72, nr_sectors = 1 limit=64 [ 274.282461][ T8635] ALSA: mixer_oss: invalid OSS volume '' [ 274.392313][ T8620] Buffer I/O error on dev loop5, logical block 72, async page read [ 274.721229][ T8620] syz.5.722: attempt to access beyond end of device [ 274.721229][ T8620] loop5: rw=0, sector=73, nr_sectors = 1 limit=64 [ 274.826353][ T8620] Buffer I/O error on dev loop5, logical block 73, async page read [ 274.861137][ T8620] syz.5.722: attempt to access beyond end of device [ 274.861137][ T8620] loop5: rw=0, sector=74, nr_sectors = 1 limit=64 [ 274.919913][ T8620] Buffer I/O error on dev loop5, logical block 74, async page read [ 274.963144][ T8620] syz.5.722: attempt to access beyond end of device [ 274.963144][ T8620] loop5: rw=0, sector=75, nr_sectors = 1 limit=64 [ 275.015641][ T8620] Buffer I/O error on dev loop5, logical block 75, async page read [ 275.578525][ T8157] veth0_vlan: entered promiscuous mode [ 275.638197][ T8157] veth1_vlan: entered promiscuous mode [ 275.698808][ T8663] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 275.818701][ T8157] veth0_macvtap: entered promiscuous mode [ 275.872491][ T8157] veth1_macvtap: entered promiscuous mode [ 276.005193][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.181840][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.756449][ T1095] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.794833][ T1095] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.862404][ T1095] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.894662][ T1095] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.147213][ T7213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.186655][ T7213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.303167][ T8683] syz_tun: entered allmulticast mode [ 277.338373][ T7211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.369365][ T7211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.769151][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.744'. [ 279.852674][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.860273][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.053410][ T5765] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 280.228360][ T5765] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.239122][ T5765] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.268931][ T5765] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.290951][ T5765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 280.307978][ T5765] usb 6-1: SerialNumber: syz [ 280.565236][ T5765] usb 6-1: No union descriptors [ 280.585503][ T5765] usb 6-1: USB disconnect, device number 5 [ 280.705875][ T8748] binder_alloc: 8747: binder_alloc_buf, no vma [ 281.219302][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.758'. [ 281.293247][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.758'. [ 281.363726][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.758'. [ 281.587389][ T8771] fuse: fd is not a fuse device [ 281.625271][ T8773] fuse: fd is not a fuse device [ 282.180888][ T30] audit: type=1326 audit(2000000066.819:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.769" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f3b9de99 code=0x7ffc0000 [ 282.301775][ T30] audit: type=1326 audit(2000000066.819:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.769" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f3b9de99 code=0x7ffc0000 [ 282.404599][ T30] audit: type=1326 audit(2000000066.819:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.769" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f94f3b9de99 code=0x7ffc0000 [ 282.534517][ T30] audit: type=1326 audit(2000000066.819:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.769" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f3b9de99 code=0x7ffc0000 [ 282.645895][ T30] audit: type=1326 audit(2000000066.879:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.769" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f3b9de99 code=0x7ffc0000 [ 282.842043][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 283.453321][ T5795] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 285.540338][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.550358][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.640786][ T8856] sctp: [Deprecated]: syz.8.789 (pid 8856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.640786][ T8856] Use struct sctp_sack_info instead [ 285.991326][ T8818] loop5: detected capacity change from 0 to 32768 [ 286.022354][ T8835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.204844][ T30] audit: type=1800 audit(2000000070.839:71): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.778" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 286.961669][ T8855] IPVS: starting estimator thread 0... [ 287.022908][ T8852] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 287.077076][ T6451] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.087876][ T8884] IPVS: using max 26 ests per chain, 62400 per kthread [ 287.136010][ T6451] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.175222][ T6451] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.218438][ T6451] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.674225][ T5737] IPVS: starting estimator thread 0... [ 287.923004][ T8897] IPVS: using max 22 ests per chain, 52800 per kthread [ 288.992740][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 289.174842][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 289.213231][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.238658][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.307489][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.346641][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.381758][ T24] usb 2-1: Product: syz [ 289.412175][ T24] usb 2-1: Manufacturer: syz [ 289.430509][ T24] usb 2-1: SerialNumber: syz [ 289.495137][ T24] usb 2-1: 0:2 : does not exist [ 289.696361][ T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 290.008627][ T24] usb 2-1: USB disconnect, device number 7 [ 290.401430][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.606585][ T8978] binder: 8976:8978 unknown command 0 [ 291.628392][ T8978] binder: 8976:8978 ioctl c0306201 2000000003c0 returned -22 [ 291.742429][ T8981] netlink: 24 bytes leftover after parsing attributes in process `syz.8.821'. [ 293.231378][ T9000] syz_tun: entered allmulticast mode [ 293.346665][ T8997] syz_tun: left allmulticast mode [ 294.530238][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 295.952323][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'. [ 295.999643][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'. [ 300.435417][ T9087] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 302.022040][ T30] audit: type=1326 audit(2000000086.659:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9125 comm="syz.5.864" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x0 [ 303.748426][ T30] audit: type=1800 audit(2000000088.389:73): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.869" name="bus" dev="tmpfs" ino=820 res=0 errno=0 [ 304.372744][ T8874] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 304.583985][ T8874] usb 2-1: Using ep0 maxpacket: 16 [ 304.631827][ T8874] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 304.680520][ T8874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.702923][ T9160] loop5: detected capacity change from 0 to 8192 [ 304.721470][ T8874] usb 2-1: Product: syz [ 304.810313][ T8874] usb 2-1: Manufacturer: syz [ 304.916008][ T8874] usb 2-1: SerialNumber: syz [ 305.324784][ T9160] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.471878][ T8874] r8152-cfgselector 2-1: Unknown version 0x0000 [ 305.506840][ T8874] r8152-cfgselector 2-1: config 0 descriptor?? [ 306.062732][ T9179] fuse: fd is not a fuse device [ 306.792093][ T8875] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 307.408782][ T9186] loop7: detected capacity change from 0 to 2048 [ 307.465122][ T9186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.530183][ T30] audit: type=1800 audit(2000000092.169:74): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.883" name="bus" dev="loop7" ino=1367 res=0 errno=0 [ 311.156407][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.901'. [ 311.357190][ T9244] veth0: entered promiscuous mode [ 311.423985][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.903'. [ 311.503906][ T9251] fuse: fd is not a fuse device [ 311.578658][ T9244] bond0: (slave bond_slave_1): Releasing backup interface [ 311.691817][ T9243] veth0: left promiscuous mode [ 312.805245][ T9266] netlink: 'syz.4.910': attribute type 1 has an invalid length. [ 312.945808][ T30] audit: type=1326 audit(2000000097.589:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 313.015426][ T30] audit: type=1326 audit(2000000097.659:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 313.042476][ T9266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.051048][ T30] audit: type=1326 audit(2000000097.659:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 313.059470][ T9268] vlan2: entered allmulticast mode [ 313.091414][ T30] audit: type=1326 audit(2000000097.659:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 313.134109][ T9268] bond1: entered allmulticast mode [ 313.184648][ T30] audit: type=1326 audit(2000000097.659:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 313.305959][ T30] audit: type=1326 audit(2000000097.769:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f298855e6ce code=0x7ffc0000 [ 313.370545][ T9270] bond1: (slave geneve2): making interface the new active one [ 313.395021][ T30] audit: type=1326 audit(2000000097.769:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f298855e6ce code=0x7ffc0000 [ 313.429064][ T9270] geneve2: entered allmulticast mode [ 313.476856][ T9270] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 313.502328][ T30] audit: type=1326 audit(2000000097.769:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f298855e6ce code=0x7ffc0000 [ 313.611009][ T30] audit: type=1326 audit(2000000097.789:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f298855e6ce code=0x7ffc0000 [ 313.640720][ T9286] overlayfs: failed to resolve './cgroup': -2 [ 313.711564][ T30] audit: type=1326 audit(2000000097.799:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f298855e6ce code=0x7ffc0000 [ 313.932682][ T9290] overlayfs: failed to clone upperpath [ 316.598832][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.607008][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.031636][ T9351] netlink: 'syz.5.936': attribute type 1 has an invalid length. [ 319.397286][ T9351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.547082][ T9356] bond1: (slave veth3): Enslaving as an active interface with a down link [ 319.584971][ T9358] veth0_virt_wifi: entered promiscuous mode [ 319.699314][ T9358] bond1: (slave veth0_virt_wifi): making interface the new active one [ 319.740997][ T9358] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 319.779171][ T9361] bond1: (slave veth0_virt_wifi): Releasing active interface [ 319.869220][ T9373] tipc: Enabling of bearer rejected, failed to enable media [ 321.532834][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 326.273060][ T9443] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 327.190549][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.964'. [ 327.295533][ T9448] bridge1: port 1(dummy0) entered blocking state [ 327.324473][ T9448] bridge1: port 1(dummy0) entered disabled state [ 327.362278][ T9454] netlink: 'syz.5.964': attribute type 10 has an invalid length. [ 327.395860][ T9448] dummy0: entered allmulticast mode [ 327.411159][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.965'. [ 327.435033][ T9448] dummy0: entered promiscuous mode [ 327.442315][ T9454] netlink: 40 bytes leftover after parsing attributes in process `syz.5.964'. [ 327.497279][ T9454] bridge1: port 1(dummy0) entered blocking state [ 327.505316][ T9454] bridge1: port 1(dummy0) entered forwarding state [ 327.549578][ T9454] dummy0: left allmulticast mode [ 327.561895][ T9454] bridge1: port 1(dummy0) entered disabled state [ 328.278983][ T9461] loop5: detected capacity change from 0 to 4096 [ 328.339209][ T9461] ntfs3(loop5): ino=0, mi_enum_attr [ 328.448155][ T9461] ntfs3(loop5): ino=0, mi_enum_attr [ 328.473620][ T9461] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 328.529631][ T9461] ntfs3(loop5): ino=0, mi_enum_attr [ 328.921175][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 328.967323][ T9482] batadv_slave_1: left promiscuous mode [ 331.940637][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.5.986'. [ 333.439129][ T9538] netlink: 'syz.1.991': attribute type 1 has an invalid length. [ 333.474543][ T9538] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 333.522048][ T9538] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.991'. [ 334.017970][ T9552] fuse: fd is not a fuse device [ 334.020903][ T9545] loop7: detected capacity change from 0 to 4096 [ 334.180356][ T9545] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 334.430899][ T9545] ntfs3(loop7): ino=1a, mi_enum_attr [ 334.459203][ T9545] ntfs3(loop7): ino=1a, mi_enum_attr [ 334.497155][ T9545] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 335.384435][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 335.384461][ T30] audit: type=1800 audit(2000000120.019:150): pid=9545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.995" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 335.457668][ T9542] ntfs3(loop7): ino=1e, "file1" attr_set_size_ex [ 335.645057][ T30] audit: type=1326 audit(2000000120.289:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.8.1002" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee5d9de99 code=0x7ffc0000 [ 335.677592][ T30] audit: type=1326 audit(2000000120.289:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.8.1002" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee5d9de99 code=0x7ffc0000 [ 335.738378][ T30] audit: type=1326 audit(2000000120.289:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.8.1002" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7feee5d9de99 code=0x7ffc0000 [ 335.801533][ T30] audit: type=1326 audit(2000000120.289:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.8.1002" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee5d9de99 code=0x7ffc0000 [ 335.877988][ T30] audit: type=1326 audit(2000000120.289:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.8.1002" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7feee5d9de99 code=0x7ffc0000 [ 335.940267][ T30] audit: type=1326 audit(2000000120.289:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.8.1002" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee5d9de99 code=0x7ffc0000 [ 336.027068][ T30] audit: type=1326 audit(2000000120.299:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.8.1002" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7feee5d9de99 code=0x7ffc0000 [ 336.143969][ T30] audit: type=1326 audit(2000000120.299:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.8.1002" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee5d9de99 code=0x7ffc0000 [ 336.376108][ T30] audit: type=1326 audit(2000000120.319:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.8.1002" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee5d9de99 code=0x7ffc0000 [ 336.439394][ T9582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.668589][ T9595] loop5: detected capacity change from 0 to 512 [ 337.893885][ T9595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.921823][ T9595] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.029156][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1019'. [ 339.784834][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.951393][ T9630] binder_alloc: 9629: pid 9629 spamming oneway? 1 buffers allocated for a total size of 4096 [ 340.116644][ T9630] binder_alloc: 9629: pid 9629 spamming oneway? 2 buffers allocated for a total size of 5120 [ 341.141909][ T9645] loop5: detected capacity change from 0 to 4096 [ 341.407415][ T9645] ntfs3(loop5): ino=21, "file1" failed to extend initialized size to 8000c61. [ 341.512246][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1029'. [ 341.559493][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1029'. [ 341.627149][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1029'. [ 341.687086][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1029'. [ 341.882260][ T9659] binder: 9658:9659 unknown command 0 [ 341.910557][ T9659] binder: 9658:9659 ioctl c0306201 2000000001c0 returned -22 [ 342.562896][ T9681] capability: warning: `syz.6.1041' uses 32-bit capabilities (legacy support in use) [ 344.524812][ T9662] loop5: detected capacity change from 0 to 40427 [ 344.544668][ T9662] F2FS-fs (loop5): Image doesn't support compression [ 344.561310][ T9662] F2FS-fs (loop5): build fault injection rate: 690 [ 344.581062][ T9662] F2FS-fs (loop5): invalid crc value [ 345.030061][ T9662] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 350.202693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 351.579419][ T9780] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 352.845631][ T9785] fuse: fd is not a fuse device [ 352.992895][ T9789] net_ratelimit: 30 callbacks suppressed [ 352.992919][ T9789] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 353.176705][ T9795] loop7: detected capacity change from 0 to 2048 [ 353.230036][ T9795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.246340][ T9793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.295301][ T9793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.721819][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1092'. [ 358.760363][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1092'. [ 360.260888][ T7225] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.292730][ T7225] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.170399][ T7225] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.302335][ T7225] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.095389][ T9866] loop5: detected capacity change from 0 to 128 [ 362.161371][ T9866] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 362.323644][ T9866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.778671][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 363.834161][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 364.002972][ T5750] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 364.322683][ T5750] usb 6-1: Using ep0 maxpacket: 32 [ 364.343618][ T5750] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 364.353051][ T5750] usb 6-1: config 0 has no interface number 0 [ 364.359609][ T5750] usb 6-1: config 0 interface 184 has no altsetting 0 [ 364.534679][ T5750] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 364.767463][ T5750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.979945][ T5750] usb 6-1: Product: syz [ 364.985572][ T5750] usb 6-1: Manufacturer: syz [ 364.990256][ T5750] usb 6-1: SerialNumber: syz [ 365.220408][ T5750] usb 6-1: config 0 descriptor?? [ 366.280826][ T9934] loop7: detected capacity change from 0 to 128 [ 366.338742][ T5750] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 366.391666][ T5750] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 366.401863][ T9934] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.448213][ T9934] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 366.965747][ T7545] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.287283][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1125'. [ 367.567831][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1125'. [ 367.917300][ T5750] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 368.008837][ T5750] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 368.222645][ T5750] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 368.355729][ T5750] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 368.381437][ T5750] usb 6-1: USB disconnect, device number 6 [ 368.451262][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 368.451285][ T30] audit: type=1326 audit(2000000153.089:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.6.1129" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f956659de99 code=0x0 [ 368.582796][ T30] audit: type=1326 audit(2000000153.219:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.8.1132" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feee5d9de99 code=0x0 [ 370.312050][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 371.274445][T10000] netlink: 'syz.6.1143': attribute type 13 has an invalid length. [ 371.291740][ T9988] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.310689][ T9988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.446413][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.482244][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.631056][ T9988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.642254][ T9988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.320604][ T9988] veth1_vlan: left promiscuous mode [ 372.356395][ T9988] veth0_vlan: left promiscuous mode [ 372.389076][ T9988] veth0_vlan: entered promiscuous mode [ 372.405398][ T9988] veth1_vlan: entered promiscuous mode [ 372.437842][ T9988] veth1_macvtap: left promiscuous mode [ 372.461553][ T9988] veth0_macvtap: left promiscuous mode [ 372.468560][ T9988] veth0_macvtap: entered promiscuous mode [ 372.476572][ T9988] veth1_macvtap: entered promiscuous mode [ 372.489343][ T9988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.498519][ T9988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.513883][ T9988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.522417][ T9988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.026872][ T7238] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.034118][ T7238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.070349][ T7238] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.077796][ T7238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.878320][ T7225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.903308][ T7225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.933238][ T7225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.962240][ T7225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.975722][T10032] fuse: fd is not a fuse device [ 374.127800][T10036] mmap: syz.5.1153 (10036) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 378.433581][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.444226][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.675663][T10094] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 378.737868][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 378.798392][T10096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.949199][T10102] tipc: Failed to remove unknown binding: 66,0,0/0:2161935822/2161935823 [ 379.016445][T10102] tipc: Failed to remove unknown binding: 66,0,0/0:2161935822/2161935823 [ 379.240320][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1178'. [ 379.401160][T10105] bridge_slave_1: left allmulticast mode [ 379.559883][T10105] bridge_slave_1: left promiscuous mode [ 379.658343][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.695966][T10111] loop7: detected capacity change from 0 to 512 [ 379.725115][T10111] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 380.024824][T10105] bridge_slave_0: left allmulticast mode [ 380.034590][T10105] bridge_slave_0: left promiscuous mode [ 380.104256][T10123] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 380.121820][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.803449][T10111] EXT4-fs (loop7): 1 truncate cleaned up [ 380.856766][T10111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.731890][ T7545] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.944876][T10151] loop1: detected capacity change from 0 to 256 [ 383.017396][T10151] FAT-fs (loop1): bogus sectors per cluster 0 [ 383.204023][T10151] FAT-fs (loop1): Can't find a valid FAT filesystem [ 384.433540][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1192'. [ 384.465579][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1192'. [ 385.039610][ T5628] Bluetooth: hci2: Unknown advertising packet type: 0x11 [ 385.039672][ T5628] Bluetooth: hci2: Unknown advertising packet type: 0x17 [ 385.052732][ T5628] Bluetooth: hci2: Unknown advertising packet type: 0x1d [ 385.060743][ T5628] Bluetooth: hci2: Malformed LE Event: 0x0d [ 385.792550][T10182] syz_tun: entered allmulticast mode [ 385.822509][T10180] syz_tun: left allmulticast mode [ 388.325011][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1206'. [ 388.345345][T10210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.331528][T10210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.755090][T10229] syzkaller0: entered promiscuous mode [ 390.964204][T10229] syzkaller0: entered allmulticast mode [ 391.980011][T10240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.510512][T10266] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 394.276504][T10275] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1230'. [ 394.299705][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.307501][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.663769][T10278] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1230'. [ 394.994181][T10278] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.001581][T10278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.009168][T10278] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.016349][T10278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.162707][T10278] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1230'. [ 395.225742][T10278] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.233103][T10278] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.204440][ T5628] Bluetooth: Wrong link type (-71) [ 400.184275][T10352] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 402.005874][T10375] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 402.880580][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1262'. [ 403.030757][T10388] netlink: 'syz.6.1265': attribute type 12 has an invalid length. [ 403.060714][ T5628] Bluetooth: hci0: unexpected event for opcode 0x201c [ 403.121830][T10394] netlink: 'syz.6.1265': attribute type 4 has an invalid length. [ 403.132339][T10395] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 403.132339][T10395] The task syz.1.1266 (10395) triggered the difference, watch for misbehavior. [ 407.279440][ T30] audit: type=1804 audit(2000000191.919:273): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1276" name="bus" dev="ramfs" ino=24830 res=1 errno=0 [ 407.558274][ T30] audit: type=1804 audit(2000000191.919:274): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1276" name="bus" dev="ramfs" ino=24830 res=1 errno=0 [ 410.404907][T10468] fuse: Bad value for 'fd' [ 411.763722][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1296'. [ 413.051262][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1298'. [ 415.143994][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 417.436998][ T30] audit: type=1107 audit(2000000202.079:275): pid=10516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 418.887577][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 418.946707][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 421.951749][ T30] audit: type=1326 audit(2000000206.559:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.1.1318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc68699de99 code=0x0 [ 422.956148][T10574] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1322'. [ 424.274834][T10587] syzkaller0: entered promiscuous mode [ 424.290350][T10587] syzkaller0: entered allmulticast mode [ 430.002900][T10635] netlink: 'syz.4.1339': attribute type 1 has an invalid length. [ 430.714463][T10643] loop5: detected capacity change from 0 to 2048 [ 430.767339][T10643] loop5: p1 < > p4 < > [ 430.896000][T10652] fuse: Bad value for 'fd' [ 430.935451][T10652] fuse: Bad value for 'fd' [ 432.357335][ T5914] udevd[5914]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 432.418851][ T5751] udevd[5751]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 432.436816][ T5914] udevd[5914]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 434.058870][T10659] syz_tun (unregistering): left allmulticast mode [ 435.884461][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1365'. [ 435.949969][T10706] ip6gre1: entered promiscuous mode [ 435.978301][T10706] ip6gre1: entered allmulticast mode [ 436.098147][T10719] tipc: Failed to remove unknown binding: 66,0,0/0:3733828502/3733828504 [ 436.106752][T10719] tipc: Failed to remove unknown binding: 66,0,0/0:3733828502/3733828503 [ 436.119149][T10719] tipc: Failed to remove unknown binding: 66,0,0/0:3733828502/3733828504 [ 436.127781][T10719] tipc: Failed to remove unknown binding: 66,0,0/0:3733828502/3733828503 [ 436.269297][ T7229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 436.281102][ T7229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 436.303036][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.103143][T10727] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[10731] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[10727] [ 438.430963][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 438.462821][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 438.977832][T10746] netlink: 'syz.7.1375': attribute type 13 has an invalid length. [ 439.480599][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.506628][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.672907][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.123167][T10794] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[10802] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[10794] [ 447.358694][T10814] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 449.713259][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 451.504979][T10850] fuse: fd is not a fuse device [ 454.661868][ T8875] IPVS: starting estimator thread 0... [ 454.681958][T10891] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1416'. [ 454.743918][T10891] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1416'. [ 454.807394][T10891] tipc: Invalid UDP bearer configuration [ 454.807465][T10891] tipc: Enabling of bearer rejected, failed to enable media [ 455.040948][T10893] IPVS: using max 27 ests per chain, 64800 per kthread [ 456.126441][T10910] netlink: 'syz.6.1422': attribute type 1 has an invalid length. [ 457.080237][T10910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.131587][T10927] overlayfs: failed to clone upperpath [ 457.329868][T10916] bond1: (slave veth3): Enslaving as an active interface with a down link [ 457.509230][T10918] bond1: (slave dummy0): making interface the new active one [ 457.573709][ T5628] Bluetooth: Unknown LE signaling command 0x41 [ 457.582827][ T5628] Bluetooth: Wrong link type (-22) [ 457.595839][T10918] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 458.032269][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1429'. [ 459.461703][T10957] evm: overlay not supported [ 460.582057][T10961] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1437'. [ 461.252580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 464.226885][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 464.721335][T11015] IPVS: length: 4096 != 24 [ 465.172169][T11027] fuse: fd is not a fuse device [ 466.992903][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.660948][T11068] __vm_enough_memory: pid: 11068, comm: syz.5.1470, bytes: 4503599627366400 not enough memory for the allocation [ 471.687234][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1473'. [ 474.052789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 479.962041][ T30] audit: type=1326 audit(2000000263.859:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.1.1495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc68699de99 code=0x0 [ 480.006872][T11148] netlink: 'syz.8.1496': attribute type 39 has an invalid length. [ 493.103252][T11240] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 493.108110][T11243] tc_dump_action: action bad kind [ 493.155703][T11240] sock: sock_set_timeout: `syz.8.1524' (pid 11240) tries to set negative timeout [ 493.866173][T11252] overlayfs: failed to clone upperpath [ 494.059753][T11268] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 494.086609][T11268] CIFS mount error: No usable UNC path provided in device string! [ 494.086609][T11268] [ 494.097051][T11268] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 495.496966][T11278] bond2: entered allmulticast mode [ 497.563827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 500.915809][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.917716][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.935512][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.004638][T11357] batman_adv: batadv0: Adding interface: vlan2 [ 502.013378][T11357] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.094564][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.336415][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.360234][T11357] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 514.111718][T11475] o2cb: This node has not been configured. [ 514.117859][T11475] o2cb: Cluster check failed. Fix errors before retrying. [ 514.126893][T11475] (syz.1.1583,11475,0):user_dlm_register:674 ERROR: status = -22 [ 514.134868][T11475] (syz.1.1583,11475,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 514.470987][T11481] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1587'. [ 517.572794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 518.252582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 519.873179][T11517] virtio-fs: tag not found [ 523.596188][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1605'. [ 523.640417][T11546] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1605'. [ 526.848332][T11575] Invalid source name [ 526.855006][T11575] 9p: Bad value for 'rfdno' [ 527.963167][T11582] kernel read not supported for file /!selinuxw (pid: 11582 comm: syz.5.1611) [ 529.277676][ T5628] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 532.612411][ T5750] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 533.062985][ T5750] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 533.315608][ T5628] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 533.324368][ T5628] Bluetooth: hci4: Injecting HCI hardware error event [ 533.338022][ T5628] Bluetooth: hci4: hardware error 0x00 [ 535.084696][T11610] fido_id[11610]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 538.032873][ T5628] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 538.080842][T11635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.460164][T11655] kernel read not supported for file /!selinuxw (pid: 11655 comm: syz.8.1634) [ 541.378303][T11665] fuse: fd is not a fuse device [ 545.732602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 546.829104][T11701] overlayfs: failed to clone upperpath [ 547.884957][T11715] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1648'. [ 548.358848][T11716] tipc: Enabling of bearer rejected, failed to enable media [ 556.133964][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1667'. [ 560.352348][T11835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.526168][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 560.706249][T11828] team0: Port device vxlan0 added [ 560.736982][ T7238] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.758495][T11838] loop5: detected capacity change from 0 to 1024 [ 560.772134][ T9560] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.814884][ T9560] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.865973][ T9562] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.355730][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.364214][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.651294][T11858] loop5: detected capacity change from 0 to 2048 [ 564.175023][T11858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.388080][T11858] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.725487][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.249827][T11908] overlayfs: failed to clone upperpath [ 572.593199][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 576.128663][T11976] afs: Unknown parameter 'fowner>18446744073709551615' [ 579.103202][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1723'. [ 580.601251][T12018] loop5: detected capacity change from 0 to 4096 [ 583.002296][T12024] tipc: Enabling of bearer rejected, failed to enable media [ 583.581048][T12018] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 584.390297][T12018] ntfs3(loop5): Failed to read $AttrDef (-4). [ 589.069950][T12075] bridge0: port 3(vlan2) entered blocking state [ 589.137293][T12075] bridge0: port 3(vlan2) entered disabled state [ 589.213183][T12075] vlan2: entered allmulticast mode [ 589.241073][T12075] geneve0: entered allmulticast mode [ 589.265623][T12075] vlan2: entered promiscuous mode [ 589.281675][T12075] geneve0: entered promiscuous mode [ 593.320562][ T30] audit: type=1326 audit(2000000377.959:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 593.558038][ T30] audit: type=1326 audit(2000000377.959:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 595.790527][ T30] audit: type=1326 audit(2000000377.959:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 596.137024][ T30] audit: type=1326 audit(2000000377.959:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 596.916066][ T30] audit: type=1326 audit(2000000377.959:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 596.966296][T11608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 596.981729][T11608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 596.991313][T11608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 597.001946][T11608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 597.011793][T11608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 597.025925][ T30] audit: type=1326 audit(2000000377.999:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 597.983297][ T30] audit: type=1326 audit(2000000377.999:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 598.145177][ T30] audit: type=1326 audit(2000000377.999:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 598.242626][ T30] audit: type=1326 audit(2000000377.999:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 598.348100][ T30] audit: type=1326 audit(2000000377.999:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 598.458119][ T30] audit: type=1326 audit(2000000377.999:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 598.724853][ T30] audit: type=1326 audit(2000000377.999:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 598.771341][ T30] audit: type=1326 audit(2000000378.189:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 599.782807][T11608] Bluetooth: hci6: command tx timeout [ 599.923144][ T30] audit: type=1326 audit(2000000378.189:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 599.948536][ T30] audit: type=1326 audit(2000000378.239:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 600.933776][ T30] audit: type=1326 audit(2000000378.239:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 600.960579][ T30] audit: type=1326 audit(2000000378.239:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 601.245472][ T30] audit: type=1326 audit(2000000378.239:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 601.305068][ T30] audit: type=1326 audit(2000000378.749:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.5.1750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298859de99 code=0x7ffc0000 [ 602.094152][T12212] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 602.162599][ T5628] Bluetooth: hci6: command tx timeout [ 602.773889][ T9560] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.694284][T12215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.942375][T12213] loop5: detected capacity change from 0 to 512 [ 604.782605][ T5628] Bluetooth: hci6: command tx timeout [ 606.832883][ T5628] Bluetooth: hci6: command tx timeout [ 607.971353][ T9560] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.348063][ T5628] Bluetooth: hci2: unexpected event for opcode 0x202d [ 608.377774][ T9560] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.365003][ T9560] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.841672][T12298] loop5: detected capacity change from 0 to 2048 [ 610.698505][T12298] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=4096, location=4096 [ 610.708901][T12298] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 610.719330][T12298] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 610.729554][T12298] UDF-fs: Scanning with blocksize 512 failed [ 610.764866][T12298] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 610.774258][T12298] UDF-fs: Scanning with blocksize 1024 failed [ 610.803463][T12298] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 610.813283][T12298] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 610.821149][T12298] UDF-fs: Scanning with blocksize 2048 failed [ 610.832807][T12298] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 610.853270][T12298] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 610.864559][T12298] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 610.872212][T12298] UDF-fs: Scanning with blocksize 4096 failed [ 610.878489][T12298] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 610.996424][T12306] loop5: detected capacity change from 0 to 4096 [ 611.021960][T12306] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 611.109538][T12312] tipc: Enabling of bearer rejected, failed to enable media [ 612.641580][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 614.903020][T12368] overlayfs: failed to clone lowerpath [ 615.415313][T12370] fuse: Bad value for 'fd' [ 615.558943][ T9560] bridge_slave_1: left allmulticast mode [ 615.570152][ T9560] bridge_slave_1: left promiscuous mode [ 615.579791][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.632210][ T9560] bridge_slave_0: left allmulticast mode [ 615.651665][ T9560] bridge_slave_0: left promiscuous mode [ 615.667063][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.466386][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1805'. [ 618.094930][ T9560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.311478][ T9560] bond0 (unregistering): Released all slaves [ 618.502332][T12141] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.530345][T12141] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.585633][T12141] bridge_slave_0: entered allmulticast mode [ 618.612114][T12141] bridge_slave_0: entered promiscuous mode [ 618.792664][T12141] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.800157][T12141] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.808266][T12141] bridge_slave_1: entered allmulticast mode [ 618.816410][T12141] bridge_slave_1: entered promiscuous mode [ 619.463973][T12141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.479112][T12141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.432782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 621.624646][ T5280] 8021q: adding VLAN 0 to HW filter on device eth13 [ 621.672322][T12141] team0: Port device team_slave_0 added [ 623.285784][T12141] team0: Port device team_slave_1 added [ 623.589080][T12141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.204972][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.214467][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.308455][T12141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.388454][T12141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.679218][T12141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.704570][T12141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.809761][T12141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.022259][ T9560] hsr_slave_0: left promiscuous mode [ 625.061206][ T9560] hsr_slave_1: left promiscuous mode [ 625.078095][ T9560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.100050][ T5628] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 625.101486][ T9560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.321952][ T9560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.358280][ T9560] veth1_macvtap: left promiscuous mode [ 625.371609][ T9560] veth0_macvtap: left promiscuous mode [ 626.086104][ T9560] veth1_vlan: left promiscuous mode [ 626.621063][T12496] atomic_op ffff888033769198 conn xmit_atomic 0000000000000000 [ 629.032708][T12520] hugetlbfs: syz.1.1833 (12520): Using mlock ulimits for SHM_HUGETLB is obsolete [ 629.071861][ T9560] team0 (unregistering): Port device team_slave_1 removed [ 629.279441][ T9560] team0 (unregistering): Port device team_slave_0 removed [ 629.957723][T12141] hsr_slave_0: entered promiscuous mode [ 629.976969][T12141] hsr_slave_1: entered promiscuous mode [ 630.009584][ T5280] 8021q: adding VLAN 0 to HW filter on device eth14 [ 631.611247][T12543] overlayfs: missing 'lowerdir' [ 634.239959][ T5737] IPVS: starting estimator thread 0... [ 634.321783][T12559] lo: Caught tx_queue_len zero misconfig [ 635.093412][T12563] overlayfs: failed to clone lowerpath [ 635.495774][T12561] IPVS: using max 32 ests per chain, 76800 per kthread [ 637.573268][T12141] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 637.756237][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 637.791117][T12141] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 638.566514][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.712736][T12141] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 639.153358][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 639.347999][T12602] raw_sendmsg: syz.5.1850 forgot to set AF_INET. Fix it! [ 639.811704][T12141] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 640.853027][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 640.958422][T12597] fuse: fd is not a fuse device [ 641.727153][T12618] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1854'. [ 642.986996][ T5280] 8021q: adding VLAN 0 to HW filter on device eth15 [ 643.240739][T12141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.338705][T12141] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.390682][T12628] overlayfs: failed to clone upperpath [ 643.405885][ T9562] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.413132][ T9562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.460113][ T9562] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.467381][ T9562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.326137][T12651] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 645.335078][T12651] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 650.241392][T12708] trusted_key: syz.4.1865 sent an empty control message without MSG_MORE. [ 652.223971][ T5280] 8021q: adding VLAN 0 to HW filter on device eth16 [ 655.427292][T12750] overlayfs: failed to resolve './cgroup': -2 [ 656.227982][T11608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 656.240059][ T5788] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 656.266928][T11608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 656.279185][T11608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 657.430389][T11608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 657.439560][T11608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 657.553084][ T5788] usb 6-1: Using ep0 maxpacket: 16 [ 657.905861][ T5788] usb 6-1: device descriptor read/all, error -71 [ 659.533019][ T5628] Bluetooth: hci4: command tx timeout [ 661.557731][ T5628] Bluetooth: hci4: command tx timeout [ 663.664332][ T5628] Bluetooth: hci4: command tx timeout [ 664.051167][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1894'. [ 666.109166][ T5628] Bluetooth: hci4: command tx timeout [ 670.931237][ T7213] bridge_slave_1: left allmulticast mode [ 670.960500][ T7213] bridge_slave_1: left promiscuous mode [ 670.986405][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.032395][ T7213] bridge_slave_0: left allmulticast mode [ 671.048433][ T7213] bridge_slave_0: left promiscuous mode [ 671.183070][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.658361][T12921] fuse: Bad value for 'fd' [ 672.728009][ T7213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.759400][ T7213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.999187][ T7213] bond0 (unregistering): Released all slaves [ 674.966500][T12754] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.009665][T12754] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.042498][T12754] bridge_slave_0: entered allmulticast mode [ 675.120041][T12754] bridge_slave_0: entered promiscuous mode [ 675.376548][ T7213] hsr_slave_0: left promiscuous mode [ 675.417298][ T7213] hsr_slave_1: left promiscuous mode [ 675.445420][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.489434][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.120822][T12971] overlayfs: failed to clone upperpath [ 677.572873][T12987] Cannot find del_set index 0 as target [ 680.349242][T13009] netlink: 'syz.6.1934': attribute type 21 has an invalid length. [ 680.357819][T13009] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1934'. [ 680.960949][ T7213] team0 (unregistering): Port device team_slave_1 removed [ 681.083435][ T7213] team0 (unregistering): Port device team_slave_0 removed [ 682.025454][T12754] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.051602][T12754] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.105500][T12754] bridge_slave_1: entered allmulticast mode [ 682.420035][T12754] bridge_slave_1: entered promiscuous mode [ 682.458199][T13009] netlink: 'syz.6.1934': attribute type 5 has an invalid length. [ 682.466685][T13009] netlink: 'syz.6.1934': attribute type 6 has an invalid length. [ 682.474545][T13009] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1934'. [ 683.461624][T12754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.475163][T12754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.929544][T13043] bridge2: entered promiscuous mode [ 685.274157][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.283849][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.141480][T12754] team0: Port device team_slave_0 added [ 686.217597][T12754] team0: Port device team_slave_1 added [ 686.707914][T13070] overlayfs: failed to clone upperpath [ 688.757953][T13092] rdma_op ffff88802b6381f0 conn xmit_rdma 0000000000000000 [ 689.425380][T13093] overlayfs: missing 'lowerdir' [ 689.889900][T12754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.925910][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.073378][T12754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.121318][T12754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.239853][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.860936][T12754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.051100][T12754] hsr_slave_0: entered promiscuous mode [ 692.057955][T12754] hsr_slave_1: entered promiscuous mode [ 694.785407][ T5628] Bluetooth: hci0: unexpected event 0x06 length: 9 > 3 [ 698.712111][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 698.712135][ T30] audit: type=1326 audit(2000000483.349:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.4.1970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f3b9de99 code=0x7ffc0000 [ 698.827414][ T30] audit: type=1326 audit(2000000483.419:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.4.1970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f3b9de99 code=0x7ffc0000 [ 698.856606][ T30] audit: type=1326 audit(2000000483.419:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.4.1970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f3b9de99 code=0x7ffc0000 [ 699.171638][ T7225] ------------[ cut here ]------------ [ 699.180866][ T7225] time_after(jiffies, timeout) [ 699.180887][ T7225] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x4d0/0x9a0, CPU#0: kworker/u8:17/7225 [ 699.196366][ T7225] Modules linked in: [ 699.200727][ T7225] CPU: 0 UID: 0 PID: 7225 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.212122][ T7225] Tainted: [L]=SOFTLOCKUP [ 699.216541][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 699.226837][ T7225] Workqueue: iou_exit io_ring_exit_work [ 699.232411][ T7225] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 699.238299][ T7225] Code: c6 05 4c 03 16 0f 01 48 c7 c7 e0 40 49 8c be 25 00 00 00 48 c7 c2 00 3c 49 8c e8 8b 82 77 00 e9 70 fe ff ff e8 f1 85 9b 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 699.258039][ T7225] RSP: 0018:ffffc9000406f960 EFLAGS: 00010293 [ 699.264356][ T7225] RAX: ffffffff812aeb8f RBX: 0000000100009b71 RCX: ffff888033c51f00 [ 699.272821][ T7225] RDX: 0000000000000000 RSI: ffffffffffffffe9 RDI: 0000000000000000 [ 699.280850][ T7225] RBP: ffffc9000406faf0 R08: ffffc9000406f8e7 R09: 1ffff9200080df1c [ 699.289090][ T7225] R10: dffffc0000000000 R11: fffff5200080df1d R12: dffffc0000000000 [ 699.297240][ T7225] R13: 0000000100009b5a R14: 0000000000002000 R15: ffff88807dc08000 [ 699.305286][ T7225] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 699.314392][ T7225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.320999][ T7225] CR2: 0000001b33f16ff8 CR3: 000000002b28e000 CR4: 0000000000350ef0 [ 699.329134][ T7225] Call Trace: [ 699.332545][ T7225] [ 699.335500][ T7225] ? __pfx_io_ring_exit_work+0x10/0x10 [ 699.341021][ T7225] ? rcu_is_watching+0x15/0xb0 [ 699.345882][ T7225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.351592][ T7225] ? process_scheduled_works+0xa20/0x14e0 [ 699.357462][ T7225] process_scheduled_works+0xa8e/0x14e0 [ 699.363148][ T7225] ? __pfx_process_scheduled_works+0x10/0x10 [ 699.369176][ T7225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.375078][ T7225] ? assign_work+0x3cf/0x5d0 [ 699.376165][ T30] audit: type=1326 audit(2000000483.419:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.4.1970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f3b9de99 code=0x7ffc0000 [ 699.379703][ T7225] worker_thread+0xa47/0xfb0 [ 699.409406][ T7225] kthread+0x388/0x470 [ 699.413632][ T7225] ? __pfx_worker_thread+0x10/0x10 [ 699.418808][ T7225] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 699.423990][ T7225] ret_from_fork+0x514/0xb70 [ 699.428670][ T7225] ? __pfx_ret_from_fork+0x10/0x10 [ 699.433883][ T7225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.439553][ T7225] ? __switch_to+0xc89/0x1420 [ 699.444403][ T7225] ? __pfx_kthread+0x10/0x10 [ 699.449076][ T7225] ret_from_fork_asm+0x1a/0x30 [ 699.453987][ T7225] [ 699.457044][ T7225] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 699.464383][ T7225] CPU: 0 UID: 0 PID: 7225 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.475527][ T7225] Tainted: [L]=SOFTLOCKUP [ 699.480045][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 699.490160][ T7225] Workqueue: iou_exit io_ring_exit_work [ 699.495728][ T7225] Call Trace: [ 699.499024][ T7225] [ 699.501965][ T7225] vpanic+0x56c/0xa60 [ 699.505970][ T7225] ? __pfx__printk+0x10/0x10 [ 699.510595][ T7225] ? __pfx_vpanic+0x10/0x10 [ 699.515301][ T7225] ? is_bpf_text_address+0x292/0x2b0 [ 699.520595][ T7225] ? is_bpf_text_address+0x26/0x2b0 [ 699.525812][ T7225] panic+0xc5/0xd0 [ 699.529543][ T7225] ? __pfx_panic+0x10/0x10 [ 699.533973][ T7225] ? ret_from_fork_asm+0x1a/0x30 [ 699.538913][ T7225] __warn+0x315/0x4c0 [ 699.542924][ T7225] ? io_ring_exit_work+0x4d0/0x9a0 [ 699.548051][ T7225] ? io_ring_exit_work+0x4d0/0x9a0 [ 699.553158][ T7225] __report_bug+0x276/0x570 [ 699.557664][ T7225] ? io_ring_exit_work+0x4d0/0x9a0 [ 699.562885][ T7225] ? __pfx___report_bug+0x10/0x10 [ 699.567991][ T7225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.573649][ T7225] ? lockdep_hardirqs_on+0x7a/0x110 [ 699.578864][ T7225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.584495][ T7225] ? irqentry_exit+0x218/0x8f0 [ 699.589251][ T7225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.594891][ T7225] ? io_ring_exit_work+0x4d2/0x9a0 [ 699.600004][ T7225] ? io_ring_exit_work+0x4d0/0x9a0 [ 699.605115][ T7225] report_bug+0x16a/0x220 [ 699.609613][ T7225] ? io_ring_exit_work+0x4d0/0x9a0 [ 699.614710][ T7225] ? io_ring_exit_work+0x4d2/0x9a0 [ 699.619843][ T7225] handle_bug+0x9c/0x200 [ 699.624092][ T7225] exc_invalid_op+0x1a/0x50 [ 699.629033][ T7225] asm_exc_invalid_op+0x1a/0x20 [ 699.633899][ T7225] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 699.639618][ T7225] Code: c6 05 4c 03 16 0f 01 48 c7 c7 e0 40 49 8c be 25 00 00 00 48 c7 c2 00 3c 49 8c e8 8b 82 77 00 e9 70 fe ff ff e8 f1 85 9b 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 699.659320][ T7225] RSP: 0018:ffffc9000406f960 EFLAGS: 00010293 [ 699.665416][ T7225] RAX: ffffffff812aeb8f RBX: 0000000100009b71 RCX: ffff888033c51f00 [ 699.673471][ T7225] RDX: 0000000000000000 RSI: ffffffffffffffe9 RDI: 0000000000000000 [ 699.681430][ T7225] RBP: ffffc9000406faf0 R08: ffffc9000406f8e7 R09: 1ffff9200080df1c [ 699.689415][ T7225] R10: dffffc0000000000 R11: fffff5200080df1d R12: dffffc0000000000 [ 699.697492][ T7225] R13: 0000000100009b5a R14: 0000000000002000 R15: ffff88807dc08000 [ 699.705492][ T7225] ? io_ring_exit_work+0x4cf/0x9a0 [ 699.710627][ T7225] ? __pfx_io_ring_exit_work+0x10/0x10 [ 699.716199][ T7225] ? rcu_is_watching+0x15/0xb0 [ 699.721000][ T7225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.726633][ T7225] ? process_scheduled_works+0xa20/0x14e0 [ 699.732351][ T7225] process_scheduled_works+0xa8e/0x14e0 [ 699.737924][ T7225] ? __pfx_process_scheduled_works+0x10/0x10 [ 699.743934][ T7225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.749665][ T7225] ? assign_work+0x3cf/0x5d0 [ 699.754264][ T7225] worker_thread+0xa47/0xfb0 [ 699.758917][ T7225] kthread+0x388/0x470 [ 699.763022][ T7225] ? __pfx_worker_thread+0x10/0x10 [ 699.768185][ T7225] ? __pfx_kthread+0x10/0x10 [ 699.772797][ T7225] ret_from_fork+0x514/0xb70 [ 699.777407][ T7225] ? __pfx_ret_from_fork+0x10/0x10 [ 699.782649][ T7225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.788321][ T7225] ? __switch_to+0xc89/0x1420 [ 699.793011][ T7225] ? __pfx_kthread+0x10/0x10 [ 699.797792][ T7225] ret_from_fork_asm+0x1a/0x30 [ 699.802575][ T7225] [ 699.805696][ T7225] Kernel Offset: disabled [ 699.810189][ T7225] Rebooting in 86400 seconds..