last executing test programs: 4m3.030684911s ago: executing program 2 (id=183): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff3, 0x5}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m2.110724384s ago: executing program 2 (id=185): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 4m1.550355338s ago: executing program 2 (id=187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8702}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200410d0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 3m59.715276613s ago: executing program 2 (id=193): mknod(&(0x7f0000000680)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000640)='./file0\x00', 0x1c9800, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r2 = fanotify_init(0x0, 0x2) fanotify_mark(r2, 0x1, 0x8000039, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0}]) 3m59.236320115s ago: executing program 32 (id=193): mknod(&(0x7f0000000680)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000640)='./file0\x00', 0x1c9800, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r2 = fanotify_init(0x0, 0x2) fanotify_mark(r2, 0x1, 0x8000039, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0}]) 3m58.955248242s ago: executing program 3 (id=197): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 3m58.557214401s ago: executing program 3 (id=198): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3m57.468863779s ago: executing program 3 (id=206): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 3m56.849537324s ago: executing program 3 (id=209): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x414, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) lremovexattr(&(0x7f0000000200)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(&(0x7f0000000040)='./file1\x00', 0x0) 3m55.469532338s ago: executing program 3 (id=215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/85, 0x55}], 0x1}, 0x2001) 3m54.58652747s ago: executing program 3 (id=218): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m53.956836955s ago: executing program 33 (id=218): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m27.597897065s ago: executing program 6 (id=632): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r1, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './proc'}, 0xa) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x100000000) 2m26.56454418s ago: executing program 6 (id=640): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x0) listen(r1, 0xfffffffd) 2m26.254705438s ago: executing program 6 (id=641): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6a144b89, @private2, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000200)="fe86", 0x2}], 0x1}}], 0x1, 0x931766f6319eed40) r1 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2m25.158157845s ago: executing program 6 (id=654): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a313, 0xec63, 0xff, 0x8, 0x98b9, 0xfff, 0x0, 0x100000000000004, 0x10000, 0x200100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x3, 0x9, 0x400, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff6, 0x4, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x4, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0x11, 0x8000000000000000, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0x39790, 0x6, 0xe, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r3 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m24.881364732s ago: executing program 6 (id=659): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=""/21, 0x15}, 0x5}], 0x1, 0x1000000000fe, 0x0) 2m24.566289s ago: executing program 6 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='+4 +4.1 +4.2\n', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) 2m9.296054908s ago: executing program 34 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='+4 +4.1 +4.2\n', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) 1m59.311783935s ago: executing program 0 (id=818): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r1, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) setns(r4, 0x20000000) 1m58.387910578s ago: executing program 0 (id=828): syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@discard}, {@fatal_errors_bug}, {@discard}]}, 0xf4, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x90001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x68e, &(0x7f0000000880)="$eJzs3c9vHGf9B/D3rNfrbL79pm6atCmqlKiRABGR2LFSMJcGhFAOFarKgbOVOInVTVoSF7kVouH3tYf8AeWQGweExD2iXLjArVcfKyG49IIRh0U7O7tee+21nR9eO7xe0XiemWee5/k8n52d2fXG2gD/s66cS/1hilw59+ZKZ3v1wVxr9cHcrV45yVSSWlLvrlL8q91uf5pcTnfJK52dVXfFduPcX5p/+7MvVj/vbtWrpTy+Nqrd7tyrlpxJMlGtn1R/V3fq78hO3RX9GXYSdraXOBi3ySTt0j/ud/f86C/P9WsGNLdqveOZDxwCRfe+OWQ6OVo90TuvA7p3xe49+1C7N+4AAAAAYB88v5a1rOTYuOMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAw6T6/v+iWmq98pkUve//b1T7UpUPltN7O/zh04oDAAAAAAAAAPbR6bWsZSXHetvtovzM/7Vy40T58//yfu5mMXdyPitZyHKWcyezSaYHOmqsLCwv35ntt+z9z4Dhlhe3bHlxh0CnqnXzScwaAAAAAAAAAJ45P8+V9c//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgICiSie6qXE70ytOp1ZMcSdLoHHcv+VuvfJg9HHcAAAAA8BjaI+pqA+Xn17KWlRzrtyvK9/wvle/7j+T93M5ylrKcVhZzrfxdQPddf231wVxr9cHcrc4yPMa3/7mncBtVWBPl1lYjnyqPaOZ6lso953M176YorqXWn9CpXjxbx/WzTkzFG12TowOq9wrXqnVn5h9X6yEf7Wmy2xn1y5Sp4V3TZUYm+xmZqWLrZOOF0ZnY46OzeaTZ1PrBntg00qZJbMj5G7sc72i17szn19vlfCw2Z+LiwNn30n9G5jz5yh9/98Obrdvv3Lx+99zBmdLuTFTr7nWlOZyJwcf95dFn3+HOxJCZMhMn+9tX8r38IOdyJm/lTpby4yxkOYs5k++WpYXqfC4GnvLbZOryhq23doqkUZ2h3QdrY0zZIabXyrbHspTv591cy2JeL/9dzGy+kUu5lPmBc/3kLq60tW2e9e3/3zL4s1+tCs0kv6nWpRv1nSb+lHXy+sJAXgevudNl3eCe9Swd38P9qJel348Opf6lqtAZ4xebbubjtTkTswOZeHF0Jn5bXlbudm5yNxfeG6zZ/upw/OOBQ351oO4SnfPleP9FxMazo1P3YlU3WS7r+WpUn7h029WG6k7267rP1HvbPlMb1Wu44Z4ulnUvb1k3V9adGqjb/Hqr1X899Cx8+APwzDr6taON5t+bf21+0vxl82bzzSPfmfrm1KuNTP558lv1mYkv114t/pBP8tP19/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCju/vBh+8stFqLdzYV2u32Rxv2JEPHHMJC7+vM9nHQV54bX+oaSQ5G5v/dbrerPcWj9lPs2wPX7phK+xGb/ynJ7g6uJ9mq6vS4H6+F1pgvTMBTd2H51nsX7n7w4deXbi3cWLyxeHv+0qX5mflLr89duL7UWpzp/hx3lMDTsH7TH3ckAAAAAAAAAAAAwG49xl8IZHqXB28/+pH9nCoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwSF05l/rDFJmdOT/T2V59MNfqLL3y+pH1JLUkxU+S4tPkcrpLpge6K7Yb5/7S/NuffbH6+Xpf9d7xtVHtdudeteRMkolq/aT6u/rY/RX9GXYSdraXOBi3/wYAAP//iJAA+A==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000000)='3', 0x1, 0x4fed0) 1m56.735437729s ago: executing program 0 (id=843): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1m56.232429922s ago: executing program 0 (id=848): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040), 0x44) 1m56.035748076s ago: executing program 0 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m55.718236244s ago: executing program 0 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(r0, 0x0, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) 1m40.669920336s ago: executing program 35 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(r0, 0x0, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) 1m1.853998268s ago: executing program 7 (id=1237): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0x8000009, 0x1}, {0x2, 0x0, 0x0, 0x1}], 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000dc0)={&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="f9", 0x1}], 0x1}, 0x263171b11b81c78f) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8) 1m0.816219224s ago: executing program 7 (id=1241): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1f3) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) 59.655619383s ago: executing program 7 (id=1245): socket$rds(0x15, 0x5, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 59.215218594s ago: executing program 7 (id=1248): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 57.485611876s ago: executing program 7 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}], [], 0x6b}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x6000) 56.751724365s ago: executing program 7 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@noextend}]}}) chmod(&(0x7f0000000080)='./file0\x00', 0x80) 56.400540683s ago: executing program 36 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@noextend}]}}) chmod(&(0x7f0000000080)='./file0\x00', 0x80) 15.298050251s ago: executing program 8 (id=1563): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/35, 0x23) getdents64(r2, 0xfffffffffffffffe, 0xff80) 15.056818717s ago: executing program 8 (id=1566): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)}, 0x20) 14.709147456s ago: executing program 8 (id=1568): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) fallocate(r0, 0x10, 0x10c01, 0x8000) truncate(&(0x7f0000000940)='./file1\x00', 0x8daa) syz_read_part_table(0x1053, &(0x7f0000001080)="$eJzsz72pAkEUBeCzb/9mo9fHa+ElBlYgbD9boXUYGWu0MoKLFiAifF8wHGbOcLnho/7GDJmOP2mTlGRKdo+3tfwOKbWQ7uXTUo991jGnQ0n6tNfLf73rst49l8/9Fudli01Tx83lrcsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJe4BQAA//+3gRAH") 12.702189546s ago: executing program 8 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x126) 10.792488533s ago: executing program 8 (id=1603): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='9', 0x1}], 0x1) 10.626567357s ago: executing program 8 (id=1604): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) close(0x3) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000180)='e', 0x1) shutdown(r0, 0x1) 10.301053795s ago: executing program 37 (id=1604): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) close(0x3) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000180)='e', 0x1) shutdown(r0, 0x1) 4.03973998s ago: executing program 5 (id=1657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "eeba1daa3c696e33", "8cd11084a86e02071031ecd5f1cb8efeeee1da564cf9831268724500b699fa5e", "990ff934", "917ab8da99afa933"}, 0x38) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8000) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0xc, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000100)='0', 0x3fec, 0x0, 0x0, 0x0) 3.849531255s ago: executing program 5 (id=1658): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101001, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101003, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101004, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101005, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101006, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101007, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 3.61079878s ago: executing program 5 (id=1661): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="f7", 0xfdef}], 0x1) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x40002002, 0x0) 3.031775775s ago: executing program 4 (id=1662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ad000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) 2.737182752s ago: executing program 9 (id=1663): syz_open_dev$vcsa(0x0, 0x6, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod(0x0, 0x200, 0x7) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40}}}}}}, 0x0) 2.645428775s ago: executing program 4 (id=1664): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0x8}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.40368745s ago: executing program 9 (id=1665): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x7, 0x4, 0x7, 0x5, 0x3, 0x7, 0x47, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.285405484s ago: executing program 5 (id=1666): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x890c, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.986319561s ago: executing program 1 (id=1667): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_usb_connect$midi(0x6, 0x2a, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18, 0x1, 0x1, 0x0, 0x30, 0x20, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0xf3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x0, 0x7}]}}}}}]}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x9, 0x1, 0x1, 0x54, 0x0, 0x4002004c2, 0x3, 0x45c5, 0x6, 0x4, 0x4, 0x3, 0xfa23, 0xfffffffffffffffe, 0x1], 0xeeee0000, 0x12d7}) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.662964119s ago: executing program 9 (id=1668): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000200)='./file0/file0\x00', 0x12c) 1.59654699s ago: executing program 4 (id=1669): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x0, [0x200000002302, 0x2000, 0x3, 0x2000000024be, 0x1, 0x1], 0x0, 0x0, 0x0}, 0x296) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.358676536s ago: executing program 9 (id=1670): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) socket(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x4}) 1.298922658s ago: executing program 4 (id=1671): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="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", 0x318) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.2371798s ago: executing program 1 (id=1672): socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0xc) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 968.644196ms ago: executing program 1 (id=1673): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x59b, 0x4000, &(0x7f0000000940)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f00000006c0)="9c01bd6f9a6028c80d7364240f0700000000000000c565f0c7ac65dd4a0fadceb6c65dcb07f2421e69087e0f0700000000000000722709c46bef17c4cb9aed9fb1c342179ea3496361ccedfdb9ace43b54fa7516c64f6a4aa330b0870715169d054a78e0f38089ca5dfd878405265d5fc19365633436571ad49c85f8024a7a85a30c9094b986548e876736175d0c1e7cf4eb7ba63055ddf1b750f9a870161c6cfcde0d78700f3426f563dea457197237337448e430c6f90f8275cd4fb4ac203c9694d88e9b583829e8697aacf38ebfc7ec26f20061cfd8f676cbcaabd3efb063b8a637232c04263241b54d5d3c", &(0x7f0000001a40)="2c5b483103067e8a9bd26ffbe3489cf5aa50b1367c3de2b1d1cdc219274a5a514f852161bc4015e7564b08584290c5", 0x1}, 0x22) prlimit64(0x0, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 899.680368ms ago: executing program 4 (id=1674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 813.09175ms ago: executing program 5 (id=1675): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000007c0)=""/249, 0xf9, 0x10020, 0x0, 0x0) 755.141231ms ago: executing program 2 (id=1606): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x20000022, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r1, 0x0}]) 671.196064ms ago: executing program 1 (id=1676): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/key_exchange_enabled\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffe}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) 648.283534ms ago: executing program 4 (id=1677): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202000200070503020002000705840200020007050502000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000410)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000430)={0x0, 0x0, 0x2, @string={0x2, 0x0}}, &(0x7f0000000450)={0x0, 0x0, 0x5, {0x0, 0x0, 0x5}}, &(0x7f0000000470)={0x0, 0x0, 0xf, {0xf, 0x0}}, &(0x7f0000000490)={0x0, 0x0, 0xc, {0xc, 0x0}}}, &(0x7f0000000500)={0x84, &(0x7f0000000510), &(0x7f0000000520)={0x0, 0x0, 0x1}, &(0x7f0000000530)={0x0, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x4}, &(0x7f0000000550)={0x0, 0x0, 0x4}, &(0x7f0000000560)={0x0, 0x0, 0x2}, &(0x7f0000000570)={0x0, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x2}, &(0x7f0000000590)={0x0, 0x0, 0x2}, &(0x7f00000005a0)={0x0, 0x0, 0x6}, &(0x7f00000005b0)={0x0, 0x0, 0x6}, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f00000005d0)={0x0, 0x0, 0x2}, &(0x7f00000005e0)={0x0, 0x0, 0x1}, &(0x7f00000005f0)={0x0, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x1}}) nanosleep(&(0x7f0000000100)={0x2}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x81b6, 0xbc00) openat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x802, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000300)='AAAA') syz_usb_ep_write(r0, 0x82, 0x7, &(0x7f0000000300)='BBBBBBB') (async) nanosleep(&(0x7f0000000100)={0x1}, 0x0) 546.397037ms ago: executing program 5 (id=1678): syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x21, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x2d8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x400, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff7, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 421.98519ms ago: executing program 9 (id=1679): r0 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000480)=ANY=[], 0x0, 0x1d0, &(0x7f0000000040)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfIFoPRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMzDwcwQmnpkUXFlVXZiTk5qUfFChopbSzYwMTAyMExnYGBoluB0+CPP4cDA4KDDdMTHI2tGYwnnJKmefDb2TIWzZ64zMDBoHGF4tIJ5Y51nXmNdYerUvLS8pKqsqqx5EydunNnY2di4cmJdVJrfKsaWFJdNTZ2MTA5b1AQ2MxuqT7LRnvCufdXDJAfWHg+/5v0MDAypzJeMFxZJnWJkmDnhi9IfRsPvDHd4ylZIaGg4SVyRsGgwYThSx97gylBxKzmlAezPJDU2sbYtZ+aEMHMwMDAotCSfYAo9yrF0poTFAaGqkz8tNd86JLrNAIXoAVYGBoY1BX2CRsclGJwWCv6XARmT0NBQpsHMwMCw4EuRxl8JL06Qx93tmZY1QwOSBWzPSihPloGTgYEhIXmFh46mplFKckLDptgvDAychsoMW/dwrhZoYECKNhUGBobtjLC4ZWAAOeAaLF5HwSgYBaNgFIyCUTAKRsEoGAWjYBSMCAAIAAD//zwgh7g=") setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 307.767382ms ago: executing program 1 (id=1680): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000007d40)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x12) write$FUSE_BMAP(r1, &(0x7f00000065c0)={0x18, 0xfffffffffffffff5, 0x0, {0x9}}, 0x18) 267.246683ms ago: executing program 2 (id=1681): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x7fe, 0x8}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000001b40)={{r0}, "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"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0xe75}, 0x63) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x4, 0x4, 0x4, 0x1000, 0x0, r2, 0x90}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000180), &(0x7f00000002c0)=r2}, 0x20) 177.074236ms ago: executing program 9 (id=1682): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 0s ago: executing program 1 (id=1683): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x6, 0x1, {0xa, 0x4e23, 0x1, @mcast2, 0x9}}}, 0x3a) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000200)) kernel console output (not intermixed with test programs): 73] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.368289][ T5847] BTRFS info (device loop4): setting nodatasum [ 165.385881][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.423799][ T5847] BTRFS info (device loop4): force zlib compression, level 3 [ 165.449040][ T5847] BTRFS info (device loop4): turning on flush-on-commit [ 165.486175][ T5847] BTRFS info (device loop4): max_inline at 4096 [ 165.492616][ T5847] BTRFS info (device loop4): using free space tree [ 165.521054][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.713436][ T5847] BTRFS info (device loop4): enabling ssd optimizations [ 166.102386][ T5773] device hsr_slave_0 entered promiscuous mode [ 166.150148][ T5773] device hsr_slave_1 entered promiscuous mode [ 166.205242][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.240674][ T5773] Cannot create hsr debugfs directory [ 166.286985][ T130] sony 0003:054C:0268.0004: can't set operational mode: step 2 [ 166.306380][ T130] sony 0003:054C:0268.0004: Failed to set controller into operational mode [ 166.333389][ T27] audit: type=1800 audit(1787508754.507:9): pid=5847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.367" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 166.393802][ T130] sony 0003:054C:0268.0004: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.6-1/input0 [ 166.443214][ T130] sony 0003:054C:0268.0004: failed to claim input [ 166.517634][ T130] usb 7-1: USB disconnect, device number 3 [ 166.577515][ T4275] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.623303][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 166.953364][ T5904] fido_id[5904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 167.156001][ T4701] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (4701) [ 167.619352][ T5028] device hsr_slave_0 left promiscuous mode [ 167.643428][ T5028] device hsr_slave_1 left promiscuous mode [ 167.680474][ T5028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.718861][ T5028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.754088][ T5028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.778024][ T5028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.806873][ T5028] device bridge_slave_1 left promiscuous mode [ 167.817878][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.843855][ T5028] device bridge_slave_0 left promiscuous mode [ 167.850373][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.017014][ T5028] device veth1_macvtap left promiscuous mode [ 168.040397][ T5028] device veth0_macvtap left promiscuous mode [ 168.063288][ T5028] device veth1_vlan left promiscuous mode [ 168.069255][ T5028] device veth0_vlan left promiscuous mode [ 168.087718][ T5937] capability: warning: `syz.6.382' uses 32-bit capabilities (legacy support in use) [ 168.703438][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 170.291863][ T5028] team0 (unregistering): Port device team_slave_1 removed [ 170.440651][ T5028] team0 (unregistering): Port device team_slave_0 removed [ 170.565472][ T5028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.708548][ T5028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.295613][ T5028] bond0 (unregistering): Released all slaves [ 171.484699][ T5980] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 171.543549][ T5983] netlink: 108 bytes leftover after parsing attributes in process `syz.1.395'. [ 172.122725][ T6015] [ 172.509254][ T5773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.574985][ T5773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.621792][ T5773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.658346][ T5773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.781389][ T6031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 173.064267][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.108299][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.132017][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.170430][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.200660][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.221256][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.248405][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.256084][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.282019][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.324387][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.374172][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.384667][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.391895][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.440894][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.493415][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.413'. [ 173.512452][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.550648][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.598466][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.664278][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.413'. [ 173.784362][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.792737][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.810609][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.852319][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.876647][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.900005][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.930394][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.957025][ T5773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.788904][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.418'. [ 174.980986][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.998015][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.076816][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.623353][ T4317] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 175.813222][ T4317] usb 7-1: Using ep0 maxpacket: 8 [ 175.821715][ T4317] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 175.874096][ T4317] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 175.919687][ T4317] usb 7-1: config 250 has no interfaces? [ 175.967565][ T4317] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 176.026225][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 176.046538][ T4317] usb 7-1: Product: syz [ 176.050813][ T4317] usb 7-1: SerialNumber: syz [ 176.320084][ T4317] usb 7-1: USB disconnect, device number 4 [ 176.856515][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.891003][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.949777][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.969248][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.999755][ T6141] loop4: detected capacity change from 0 to 512 [ 177.026674][ T5773] device veth0_vlan entered promiscuous mode [ 177.035545][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.048429][ T6141] FAT-fs (loop4): Unrecognized mount option "erroots" or missing value [ 177.061621][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.090047][ T5773] device veth1_vlan entered promiscuous mode [ 177.246165][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.265151][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.307705][ T5773] device veth0_macvtap entered promiscuous mode [ 177.357985][ T5773] device veth1_macvtap entered promiscuous mode [ 177.464754][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.513293][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.533229][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.546145][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.571755][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.598189][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.637066][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.678634][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.694700][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.731476][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.769527][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.804562][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.821738][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.845096][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.866993][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.927162][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.957338][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.013809][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.048488][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.071917][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.092772][ T5773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.123829][ T5773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.132627][ T5773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.142037][ T5773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.431195][ T5005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.490610][ T5005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.530620][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.592572][ T5005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.618805][ T5005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.658472][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.151677][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 181.226352][ T6212] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.234725][ T6212] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.242970][ T6212] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.251379][ T6212] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.730242][ T6229] loop6: detected capacity change from 0 to 2048 [ 181.964325][ T6229] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 182.317211][ T6245] loop4: detected capacity change from 0 to 2048 [ 182.340020][ T5194] EXT4-fs (loop6): unmounting filesystem. [ 182.377202][ T6245] loop4: p2 p3 < > p4 < p5 > [ 182.382599][ T6245] loop4: partition table partially beyond EOD, truncated [ 182.440460][ T6245] loop4: p2 start 53543428 is beyond EOD, truncated [ 182.467544][ T6245] loop4: p3 start 2147483648 is beyond EOD, truncated [ 182.516294][ T6245] loop4: p5 start 53543428 is beyond EOD, truncated [ 182.760571][ T6252] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 183.016332][ T3638] loop4: p2 p3 < > p4 < p5 > [ 183.022656][ T6255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.035347][ T3638] loop4: partition table partially beyond EOD, truncated [ 183.060468][ T3638] loop4: p2 start 53543428 is beyond EOD, truncated [ 183.091047][ T3638] loop4: p3 start 2147483648 is beyond EOD, truncated [ 183.110281][ T3638] loop4: p5 start 53543428 is beyond EOD, truncated [ 183.137063][ T6255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.228292][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 183.279738][ T6255] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 183.346174][ T6255] bond0 (unregistering): Released all slaves [ 183.823380][ T6276] tipc: Started in network mode [ 183.830668][ T6276] tipc: Node identity 84e, cluster identity 4711 [ 183.891631][ T6276] tipc: Node number set to 2126 [ 185.550904][ T6314] block device autoloading is deprecated and will be removed. [ 185.596872][ T6315] fuse: root generation should be zero [ 185.648860][ T27] audit: type=1326 audit(1787508773.837:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.0.478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30e159e0d9 code=0x0 [ 185.821483][ T6325] lo speed is unknown, defaulting to 1000 [ 185.862069][ T6325] lo speed is unknown, defaulting to 1000 [ 185.912956][ T6325] lo speed is unknown, defaulting to 1000 [ 185.973769][ T6325] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.028768][ T6325] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 186.199548][ T6340] netlink: 'syz.6.482': attribute type 1 has an invalid length. [ 186.279210][ T6340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.318427][ T6325] lo speed is unknown, defaulting to 1000 [ 186.391102][ T6340] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 186.492020][ T6340] bond1: (slave batadv1): making interface the new active one [ 186.563815][ T6340] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 186.669952][ T6342] bond1: (slave veth3): Enslaving as an active interface with a down link [ 186.680804][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 186.740638][ T6325] lo speed is unknown, defaulting to 1000 [ 186.765706][ T6325] lo speed is unknown, defaulting to 1000 [ 186.807291][ T6325] lo speed is unknown, defaulting to 1000 [ 186.834321][ T6325] lo speed is unknown, defaulting to 1000 [ 187.965090][ T6377] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 188.297920][ T6386] netlink: 'syz.5.494': attribute type 15 has an invalid length. [ 188.346731][ T6386] netlink: 11594 bytes leftover after parsing attributes in process `syz.5.494'. [ 188.392686][ T6390] netlink: 'syz.5.494': attribute type 11 has an invalid length. [ 188.458828][ T6390] netlink: 'syz.5.494': attribute type 15 has an invalid length. [ 188.473135][ T6390] netlink: 'syz.5.494': attribute type 16 has an invalid length. [ 188.481067][ T6390] netlink: 'syz.5.494': attribute type 21 has an invalid length. [ 188.519528][ T6390] netlink: 'syz.5.494': attribute type 25 has an invalid length. [ 188.533185][ T4514] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 188.561716][ T6390] netlink: 'syz.5.494': attribute type 27 has an invalid length. [ 188.592665][ T6390] netlink: 'syz.5.494': attribute type 28 has an invalid length. [ 188.637079][ T6390] netlink: 'syz.5.494': attribute type 29 has an invalid length. [ 188.695772][ T6368] loop4: detected capacity change from 0 to 40427 [ 188.733443][ T4514] usb 2-1: Using ep0 maxpacket: 8 [ 188.744352][ T4514] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.750714][ T6368] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 188.774390][ T4514] usb 2-1: config 0 has no interface number 0 [ 188.802636][ T6368] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 188.818417][ T4514] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.851000][ T4514] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 188.899361][ T4514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.968108][ T4514] usb 2-1: config 0 descriptor?? [ 188.975109][ T6368] F2FS-fs (loop4): Found nat_bits in checkpoint [ 189.016462][ T4514] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 189.027611][ T4338] wlan1: Trigger new scan to find an IBSS to join [ 189.253108][ T130] usb 2-1: USB disconnect, device number 2 [ 189.282189][ T6368] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 189.321468][ T6368] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 189.761022][ T6417] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.501'. [ 189.803332][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.5.501'. [ 189.830990][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.6.502'. [ 189.920382][ T4275] syz-executor: attempt to access beyond end of device [ 189.920382][ T4275] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 191.824134][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.983621][ T5028] wlan1: Trigger new scan to find an IBSS to join [ 192.908637][ T6482] loop5: detected capacity change from 0 to 2048 [ 192.978958][ T6482] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.044319][ T5044] wlan1: Creating new IBSS network, BSSID 72:b1:3f:52:41:25 [ 193.740049][ T6507] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.000596][ T6516] overlayfs: failed to clone upperpath [ 194.091236][ T6520] loop1: detected capacity change from 0 to 512 [ 194.271864][ T6520] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 194.363469][ T6520] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.387282][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.393779][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.451971][ T6520] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.529: corrupted inode contents [ 194.533450][ T6520] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz.1.529: mark_inode_dirty error [ 194.600335][ T6520] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.529: corrupted inode contents [ 194.789770][ T6531] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.529: corrupted inode contents [ 194.883367][ T6531] EXT4-fs error (device loop1): ext4_setattr:5538: inode #2: comm syz.1.529: mark_inode_dirty error [ 195.062729][ T5236] EXT4-fs (loop1): unmounting filesystem. [ 195.086363][ T6543] validate_nla: 1 callbacks suppressed [ 195.086385][ T6543] netlink: 'syz.5.536': attribute type 1 has an invalid length. [ 195.681358][ T6557] lo speed is unknown, defaulting to 1000 [ 195.758877][ T6539] loop6: detected capacity change from 0 to 32768 [ 195.784383][ T6539] (syz.6.534,6539,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 195.827260][ T6539] (syz.6.534,6539,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 196.098075][ T6565] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 196.113550][ T4272] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 196.180717][ T6565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.269675][ T6569] bond2: (slave veth3): Enslaving as an active interface with a down link [ 196.325878][ T4272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.352833][ T4272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.379244][ T4272] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.399289][ T4272] usb 5-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 196.418231][ T4272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.451019][ T4272] usb 5-1: config 0 descriptor?? [ 196.489553][ T6565] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 196.542316][ T6565] bond2: (slave batadv1): making interface the new active one [ 196.582434][ T6565] device batadv1 entered promiscuous mode [ 196.612889][ T6565] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 196.653745][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 196.729068][ T4272] usbhid 5-1:0.0: can't add hid device: -71 [ 196.739888][ T4272] usbhid: probe of 5-1:0.0 failed with error -71 [ 196.804255][ T4272] usb 5-1: USB disconnect, device number 5 [ 197.007278][ T6582] netlink: 'syz.6.548': attribute type 12 has an invalid length. [ 197.056500][ T6585] batman_adv: batadv0: Adding interface: dummy0 [ 197.073459][ T6585] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.134363][ T6585] batman_adv: batadv0: Interface activated: dummy0 [ 197.627299][ T6608] lo speed is unknown, defaulting to 1000 [ 198.022480][ T6614] loop1: detected capacity change from 0 to 512 [ 198.049656][ T6614] ext4: Unknown parameter 'obj_role' [ 199.122929][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 199.371705][ T6647] netlink: 7 bytes leftover after parsing attributes in process `syz.1.565'. [ 200.653579][ T6661] netlink: 'syz.0.568': attribute type 2 has an invalid length. [ 200.820290][ T6670] device team0 left promiscuous mode [ 200.850229][ T6670] device team_slave_0 left promiscuous mode [ 200.885494][ T6670] device team_slave_1 left promiscuous mode [ 200.912263][ T6670] bridge0: port 3(team0) entered disabled state [ 200.952858][ T6670] device bridge_slave_0 left promiscuous mode [ 200.968602][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.987079][ T6670] device bridge_slave_1 left promiscuous mode [ 201.001819][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.042812][ T6670] bond0: (slave bond_slave_0): Releasing backup interface [ 201.076079][ T6670] bond0: (slave bond_slave_1): Releasing backup interface [ 201.136484][ T6670] team0: Port device team_slave_0 removed [ 201.184438][ T6670] team0: Port device team_slave_1 removed [ 201.191033][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.260098][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.301793][ T6670] team0: Port device bridge1 removed [ 201.583486][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 201.589849][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 202.190793][ T6686] netlink: 'syz.4.578': attribute type 4 has an invalid length. [ 202.313245][ T130] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 202.483882][ T6687] netlink: 'syz.4.578': attribute type 4 has an invalid length. [ 202.639031][ T130] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.00 [ 202.673181][ T130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.723812][ T130] usb 2-1: Product: syz [ 202.728084][ T130] usb 2-1: Manufacturer: syz [ 202.758772][ T130] usb 2-1: SerialNumber: syz [ 202.882369][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.583'. [ 202.998495][ T6705] HTB: quantum of class 80060007 is big. Consider r2q change. [ 203.013542][ T130] dln2 2-1:1.0: USB write failed: -110 [ 203.019655][ T130] dln2 2-1:1.0: failed to initialize hardware [ 203.050670][ T130] dln2: probe of 2-1:1.0 failed with error -110 [ 203.168671][ T6706] saa7115: probe of 0-0020 failed with error -5 [ 203.226627][ T6706] i2c i2c-0: new_device: Instantiated device gm7113c at 0x20 [ 205.068037][ T27] audit: type=1326 audit(1787508793.257:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.0.590" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30e159e0d9 code=0x0 [ 205.127456][ T4513] usb 2-1: USB disconnect, device number 3 [ 205.480467][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.6.592'. [ 205.818565][ T6758] net_ratelimit: 298 callbacks suppressed [ 205.818584][ T6758] ip_tables: iptables: counters copy to user failed while replacing table [ 206.617899][ T6778] loop6: detected capacity change from 0 to 2048 [ 206.768333][ T6778] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 206.958841][ T6777] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 206.993825][ T6777] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 207.033916][ T6777] EXT4-fs (loop6): This should not happen!! Data will be lost [ 207.033916][ T6777] [ 207.073393][ T6777] EXT4-fs (loop6): Total free blocks count 0 [ 207.079712][ T6777] EXT4-fs (loop6): Free/Dirty block details [ 207.143282][ T6777] EXT4-fs (loop6): free_blocks=4096 [ 207.149380][ T6777] EXT4-fs (loop6): dirty_blocks=64 [ 207.182705][ T6777] EXT4-fs (loop6): Block reservation details [ 207.253221][ T6777] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 207.291069][ T6778] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 207.863353][ T5005] device batadv1 left promiscuous mode [ 208.468360][ T6824] Set syz1 is full, maxelem 14 reached [ 209.132460][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.621'. [ 211.200110][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 211.219525][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 211.244997][ T6907] netlink: 'syz.4.635': attribute type 15 has an invalid length. [ 211.284889][ T6907] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 211.294462][ T6907] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 211.303428][ T6907] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 211.312167][ T6907] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 211.352245][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 211.394289][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 211.413644][ T6907] netlink: 'syz.4.635': attribute type 15 has an invalid length. [ 211.451473][ T6907] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 211.462415][ T6907] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 211.471393][ T6907] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 211.480333][ T6907] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 211.942076][ T6923] IPv6: addrconf: prefix option has invalid lifetime [ 212.048849][ T6924] loop4: detected capacity change from 0 to 128 [ 212.131377][ T6924] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 213.507421][ T6976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.656'. [ 215.313532][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.368703][ T7024] bond2: (slave batadv0): Removing an active aggregator [ 215.403668][ T5005] bond2: Warning: Found an uninitialized port [ 215.414939][ T7024] bond2: (slave batadv0): Releasing backup interface [ 215.455484][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.478332][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.489455][ T7024] device bridge_slave_0 left promiscuous mode [ 215.496324][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.565395][ T7024] device bridge_slave_1 left promiscuous mode [ 215.582121][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.644569][ T7024] bond0: (slave bond_slave_0): Releasing backup interface [ 215.696547][ T7024] bond0: (slave bond_slave_1): Releasing backup interface [ 215.863007][ T7024] team0: Port device team_slave_0 removed [ 215.899943][ T7024] team0: Port device team_slave_1 removed [ 215.924388][ T7024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.970372][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.032351][ T7024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.060874][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.127868][ T7024] bond1: (slave gretap1): Removing an active aggregator [ 216.166988][ T7024] bond1: (slave gretap1): Releasing backup interface [ 217.543722][ T7076] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 217.704458][ T7076] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.820401][ T7079] bond3: (slave gretap2): making interface the new active one [ 217.871717][ T7079] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 217.899432][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 217.923952][ T7086] lo speed is unknown, defaulting to 1000 [ 218.005483][ T7086] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 218.281922][ T7095] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 218.377563][ T7095] device bond4 entered promiscuous mode [ 218.418450][ T7095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.452599][ T7101] device syzkaller0 entered promiscuous mode [ 218.483983][ T7101] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 218.535564][ T7095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.554022][ T7095] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 218.574808][ T7095] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 218.597683][ T7095] bond4: (slave ip6gre2): making interface the new active one [ 218.611006][ T7095] device ip6gre2 entered promiscuous mode [ 218.630203][ T7095] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 218.699968][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 220.139834][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.705'. [ 220.221612][ T7160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.272555][ T7160] batman_adv: batadv0: Interface deactivated: dummy0 [ 220.297794][ T7160] batman_adv: batadv0: Removing interface: dummy0 [ 220.348737][ T7160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.367909][ T7160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.385534][ T7160] device bridge_slave_0 left promiscuous mode [ 220.412291][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.452022][ T7160] device bridge_slave_1 left promiscuous mode [ 220.474967][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.619861][ T7160] team0: Port device team_slave_0 removed [ 220.703916][ T7160] team0: Port device team_slave_1 removed [ 220.711225][ T7160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.753241][ T7160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.782693][ T7160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.809571][ T7160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.428096][ T7198] overlayfs: failed to clone upperpath [ 223.062268][ T4326] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 225.271384][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.723'. [ 225.659614][ T4713] libceph: connect (1)[c::]:6789 error -101 [ 225.688509][ T4713] libceph: mon0 (1)[c::]:6789 connect error [ 225.718684][ T7227] ceph: No mds server is up or the cluster is laggy [ 225.893226][ T4514] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 226.093114][ T4514] usb 1-1: Using ep0 maxpacket: 32 [ 226.102817][ T4514] usb 1-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 226.140616][ T4514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.163500][ T4514] usb 1-1: Product: syz [ 226.172276][ T4514] usb 1-1: Manufacturer: syz [ 226.183079][ T4514] usb 1-1: SerialNumber: syz [ 226.480810][ T4514] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 226.519022][ T4514] usb 1-1: USB disconnect, device number 5 [ 228.092781][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'. [ 229.204660][ T7309] loop1: detected capacity change from 0 to 32768 [ 229.310909][ T7309] XFS (loop1): Mounting V5 Filesystem [ 229.512212][ T7309] XFS (loop1): Ending clean mount [ 229.552021][ T27] audit: type=1800 audit(1787508817.737:12): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.747" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 229.559910][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.752'. [ 229.651148][ T27] audit: type=1800 audit(1787508817.797:13): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.747" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 229.957483][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.970016][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.980282][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.992185][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.000794][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 230.010483][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.178547][ T7341] lo speed is unknown, defaulting to 1000 [ 230.323877][ T5236] XFS (loop1): Unmounting Filesystem [ 230.793835][ T7341] chnl_net:caif_netlink_parms(): no params data found [ 231.025772][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.055548][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.094419][ T7341] device bridge_slave_0 entered promiscuous mode [ 231.119341][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.160031][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.199526][ T7341] device bridge_slave_1 entered promiscuous mode [ 231.262647][ T7341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.296327][ T7341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.417459][ T7341] team0: Port device team_slave_0 added [ 231.456116][ T7341] team0: Port device team_slave_1 added [ 231.569882][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.602117][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.638659][ T7341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.665504][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.682065][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.719565][ T7341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.859644][ T7379] lo speed is unknown, defaulting to 1000 [ 231.883674][ T7341] device hsr_slave_0 entered promiscuous mode [ 231.900447][ T7341] device hsr_slave_1 entered promiscuous mode [ 231.911843][ T7341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.920190][ T7341] Cannot create hsr debugfs directory [ 232.073650][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 232.361908][ T7341] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 232.411017][ T7341] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 232.433814][ T7341] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 232.458232][ T7341] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 232.705804][ T7400] loop1: detected capacity change from 0 to 512 [ 232.758422][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.771853][ T7400] EXT4-fs (loop1): Test dummy encryption mode enabled [ 232.829106][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.863690][ T7400] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #11: comm syz.1.774: casefold flag without casefold feature [ 232.897738][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.913363][ T7400] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.774: couldn't read orphan inode 11 (err -117) [ 232.962373][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.990231][ T7400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 233.030529][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.044733][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.104160][ T27] audit: type=1800 audit(1787508821.297:14): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.774" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 233.118490][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.133596][ T5040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.233871][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.280211][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.312624][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.338087][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.345499][ T5040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.396773][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.452650][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.496265][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.525478][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.546599][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.573806][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.616321][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.647811][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.667124][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.686330][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.707154][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.752953][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.944838][ T7400] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.774: bg 0: block 7: invalid block bitmap [ 234.153415][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 234.278807][ T5236] EXT4-fs (loop1): unmounting filesystem. [ 234.647973][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.661824][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.685587][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.741002][ T7446] loop1: detected capacity change from 0 to 1764 [ 235.452480][ T7457] loop1: detected capacity change from 0 to 8192 [ 235.642725][ T7465] netlink: 'syz.0.794': attribute type 8 has an invalid length. [ 235.668905][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 235.723845][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 236.055022][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.086491][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.166542][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.202923][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.223305][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 236.245140][ T7341] device veth0_vlan entered promiscuous mode [ 236.258967][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.294243][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.341378][ T7341] device veth1_vlan entered promiscuous mode [ 236.452071][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.474551][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 236.488247][ T27] audit: type=1800 audit(1787508824.677:15): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.791" name="bus" dev="loop1" ino=1048609 res=0 errno=0 [ 236.514928][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.546309][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.576004][ T7341] device veth0_macvtap entered promiscuous mode [ 236.627485][ T7341] device veth1_macvtap entered promiscuous mode [ 236.682666][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.717593][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.751475][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.781244][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.835017][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.865665][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.886125][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.908427][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.934251][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.969626][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.988624][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.999167][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.017237][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.043227][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.060875][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.079869][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.115034][ T7341] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.179914][ T7341] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.213225][ T7341] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.243173][ T7341] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.459499][ T5005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.481822][ T5005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.513898][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.581159][ T5022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.595628][ T5022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.617420][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.851635][ T4713] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 237.884136][ T7493] ceph: No mds server is up or the cluster is laggy [ 238.314367][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 238.681273][ T7515] tipc: Cannot configure node identity twice [ 238.818503][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.812'. [ 240.333315][ T7572] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 240.853049][ T7588] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 241.915389][ T7618] UBIFS error (pid: 7618): cannot open "ubi0:0", error -19 [ 241.919405][ T7618] UBIFS error (pid: 7618): cannot open "ubi0_0", error -19 [ 242.184880][ T7622] netlink: 'syz.5.846': attribute type 1 has an invalid length. [ 242.457018][ T7623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.503822][ T7623] bond0: (slave bond1): making interface the new active one [ 242.523355][ T7623] bond0: (slave bond1): Enslaving as an active interface with an up link [ 242.625637][ T7636] netlink: 668 bytes leftover after parsing attributes in process `syz.7.850'. [ 242.654763][ T7627] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 243.888817][ T7674] overlayfs: failed to clone upperpath [ 244.660224][ T7690] af_packet: packet size is too long (33022 > 736) [ 245.948003][ T7724] netlink: 24 bytes leftover after parsing attributes in process `syz.7.884'. [ 245.981887][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.884'. [ 246.753549][ T7749] netlink: 'syz.4.895': attribute type 1 has an invalid length. [ 246.853351][ T7749] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.936791][ T7757] bond1: (slave macvlan2): Opening slave failed [ 247.101845][ T4288] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 247.663336][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 248.003203][ T4317] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 248.205252][ T4317] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.222305][ T4317] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.279132][ T4317] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 248.323122][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.518982][ T27] audit: type=1326 audit(1787508836.707:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf9e0d9 code=0x7ffc0000 [ 248.554338][ T4317] usb 5-1: usb_control_msg returned -32 [ 248.563343][ T4317] usbtmc 5-1:16.0: can't read capabilities [ 248.585133][ T27] audit: type=1326 audit(1787508836.707:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f156bf9e0d9 code=0x7ffc0000 [ 248.668844][ T27] audit: type=1326 audit(1787508836.707:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf9e0d9 code=0x7ffc0000 [ 248.719312][ T27] audit: type=1326 audit(1787508836.707:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f156bf9e0d9 code=0x7ffc0000 [ 248.753856][ T27] audit: type=1326 audit(1787508836.717:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf9e0d9 code=0x7ffc0000 [ 248.790986][ T27] audit: type=1326 audit(1787508836.727:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f156bf9e0d9 code=0x7ffc0000 [ 248.836606][ T27] audit: type=1326 audit(1787508836.727:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf9e0d9 code=0x7ffc0000 [ 248.884458][ T27] audit: type=1326 audit(1787508836.727:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f156bf9e0d9 code=0x7ffc0000 [ 248.929468][ T27] audit: type=1326 audit(1787508836.727:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf9e0d9 code=0x7ffc0000 [ 248.993345][ T27] audit: type=1326 audit(1787508836.737:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f156bf9e0d9 code=0x7ffc0000 [ 250.123646][ T7822] loop1: detected capacity change from 0 to 32768 [ 250.201563][ T7822] XFS (loop1): Mounting V5 Filesystem [ 250.328264][ T7822] XFS (loop1): Ending clean mount [ 250.354359][ T7822] XFS (loop1): Quotacheck needed: Please wait. [ 250.445971][ T7822] XFS (loop1): Quotacheck: Done. [ 250.539727][ T7822] XFS (loop1): Unmounting Filesystem [ 250.770909][ T4320] usb 5-1: USB disconnect, device number 6 [ 252.059506][ T7873] bridge0: port 3(vlan2) entered blocking state [ 252.096758][ T7873] bridge0: port 3(vlan2) entered disabled state [ 252.123655][ T7873] device vlan2 entered promiscuous mode [ 252.345491][ T7881] netlink: 27 bytes leftover after parsing attributes in process `syz.7.942'. [ 252.783306][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 253.175245][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.950'. [ 253.223924][ T7906] netlink: 48 bytes leftover after parsing attributes in process `syz.4.950'. [ 253.261664][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.950'. [ 253.307239][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 253.336629][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.950'. [ 253.508277][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'. [ 254.190242][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.959'. [ 254.200433][ T5022] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.621511][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.963'. [ 254.758870][ T7948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.875570][ T7954] device macvlan2 entered promiscuous mode [ 254.911504][ T7954] device bond2 entered promiscuous mode [ 254.947091][ T7954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.988001][ T7954] device bond2 left promiscuous mode [ 255.716150][ T7978] device sit0 entered promiscuous mode [ 255.746047][ T7978] netlink: 'syz.4.971': attribute type 1 has an invalid length. [ 255.775199][ T7978] netlink: 1 bytes leftover after parsing attributes in process `syz.4.971'. [ 255.826642][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.833882][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.031371][ T8004] lo speed is unknown, defaulting to 1000 [ 257.873444][ T130] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 257.939024][ T8036] netlink: 'syz.5.997': attribute type 1 has an invalid length. [ 257.994620][ T8036] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.093100][ T130] usb 5-1: Using ep0 maxpacket: 8 [ 258.100631][ T130] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.121774][ T130] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.142505][ T130] usb 5-1: config 1 interface 0 altsetting 45 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.173089][ T130] usb 5-1: config 1 interface 0 has no altsetting 0 [ 258.193992][ T130] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.207264][ T8039] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 258.222741][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.264330][ T130] usb 5-1: Product: syz [ 258.268606][ T130] usb 5-1: Manufacturer: syz [ 258.293634][ T8036] device bond3 entered promiscuous mode [ 258.303892][ T130] usb 5-1: SerialNumber: syz [ 258.547507][ T130] cdc_ether 5-1:1.0: skipping garbage [ 258.573194][ T130] usb 5-1: bad CDC descriptors [ 258.595303][ T130] usb 5-1: USB disconnect, device number 7 [ 258.681594][ T4288] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 258.694319][ T4288] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 258.704123][ T4288] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.715052][ T4288] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.728103][ T4288] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 258.736040][ T4288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 258.817982][ T8044] lo speed is unknown, defaulting to 1000 [ 259.068990][ T8044] chnl_net:caif_netlink_parms(): no params data found [ 259.382383][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.438374][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.463202][ T8044] device bridge_slave_0 entered promiscuous mode [ 259.488834][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.513617][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.546681][ T8044] device bridge_slave_1 entered promiscuous mode [ 259.642338][ T8044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.691828][ T8044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.837512][ T8044] team0: Port device team_slave_0 added [ 259.879014][ T8044] team0: Port device team_slave_1 added [ 259.989804][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.025799][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.107779][ T8044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.145403][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.170621][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.281046][ T8044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.551253][ T8044] device hsr_slave_0 entered promiscuous mode [ 260.584146][ T8044] device hsr_slave_1 entered promiscuous mode [ 260.600687][ T8044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.625472][ T8044] Cannot create hsr debugfs directory [ 260.671861][ T5028] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.726292][ T5028] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.783521][ T4283] Bluetooth: hci6: command 0x0409 tx timeout [ 260.889977][ T5028] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.932481][ T5028] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.943362][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.971646][ T8091] netlink: 'syz.5.1011': attribute type 1 has an invalid length. [ 261.022170][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 261.022187][ T27] audit: type=1326 audit(1787509105.211:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.7.1014" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fbbd9e0d9 code=0x0 [ 261.075250][ T8091] device bond4 entered promiscuous mode [ 261.081438][ T8091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.101867][ T5028] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.142665][ T5028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.188306][ T8091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.196784][ T8091] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 261.210341][ T8091] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 261.223337][ T8091] bond4: (slave xfrm1): making interface the new active one [ 261.231060][ T8091] device xfrm1 entered promiscuous mode [ 261.255469][ T8091] device xfrm1 left promiscuous mode [ 261.323243][ T4518] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 261.333335][ T5028] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.344400][ T5028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.525113][ T4518] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.541201][ T4518] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.555564][ T4518] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 261.566006][ T4518] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.579260][ T4518] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 261.589141][ T8108] netlink: 'syz.5.1016': attribute type 39 has an invalid length. [ 261.615215][ T4518] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 261.633932][ T4518] usb 5-1: Product: syz [ 261.638238][ T4518] usb 5-1: Manufacturer: syz [ 261.674177][ T4518] cdc_wdm 5-1:1.0: skipping garbage [ 261.689805][ T4518] cdc_wdm 5-1:1.0: skipping garbage [ 261.703623][ T4518] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 261.709685][ T4518] cdc_wdm 5-1:1.0: Unknown control protocol [ 261.845765][ T8044] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 261.869573][ T22] usb 5-1: USB disconnect, device number 8 [ 261.915114][ T8044] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 262.012423][ T8044] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 262.037625][ T8044] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 262.312134][ T5028] tipc: Left network mode [ 262.320575][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 262.396923][ T8126] capability: warning: `syz.5.1021' uses deprecated v2 capabilities in a way that may be insecure [ 262.483257][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 262.628483][ T8044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.705172][ T22] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.731248][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.764040][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.772184][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.779974][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.827769][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.878070][ T4283] Bluetooth: hci6: command 0x041b tx timeout [ 262.920883][ T22] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.971311][ T22] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.001221][ T8044] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.008141][ T22] usb 5-1: Product: syz [ 263.012382][ T22] usb 5-1: Manufacturer: syz [ 263.037916][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.070325][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 263.079486][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.091650][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 263.096425][ T5022] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.104170][ T5022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.131281][ T22] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 263.150045][ T22] cdc_wdm 5-1:1.0: Unknown control protocol [ 263.154940][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.190121][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.262609][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.290947][ T5001] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.298495][ T5001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.437983][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.536731][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 263.607468][ T4711] usb 5-1: USB disconnect, device number 9 [ 263.632347][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.669718][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.727754][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.850963][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.865307][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.899166][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.977420][ T8044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.005787][ T8044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.044840][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.058310][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.085595][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.144592][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.434299][ T5028] bond1: (slave gretap2): Releasing active interface [ 264.464225][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.527758][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1031'. [ 264.758545][ T8172] batman_adv: batadv0: Adding interface: veth0 [ 264.773849][ T8172] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.874363][ T8172] batman_adv: batadv0: Interface activated: veth0 [ 264.922372][ T8173] batman_adv: batadv0: Interface deactivated: veth0 [ 264.943545][ T4283] Bluetooth: hci6: command 0x040f tx timeout [ 264.957544][ T8173] batman_adv: batadv0: Removing interface: veth0 [ 265.069269][ T8157] loop7: detected capacity change from 0 to 40427 [ 265.172969][ T8157] F2FS-fs (loop7): Unrecognized mount option "age_extent_cache" or missing value [ 265.304021][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.311730][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.398963][ T8044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.114466][ T5028] device hsr_slave_0 left promiscuous mode [ 266.166247][ T5028] device hsr_slave_1 left promiscuous mode [ 266.198623][ T5028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.254335][ T5028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.301749][ T5028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.354870][ T5028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.381171][ T5028] device bridge_slave_1 left promiscuous mode [ 266.410472][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.468508][ T5028] device bridge_slave_0 left promiscuous mode [ 266.483322][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.602653][ T8213] No such timeout policy "syz1" [ 266.765744][ T5028] device veth1_macvtap left promiscuous mode [ 266.785898][ T5028] device veth0_macvtap left promiscuous mode [ 266.807942][ T5028] device veth1_vlan left promiscuous mode [ 266.831772][ T5028] device veth0_vlan left promiscuous mode [ 267.023398][ T4283] Bluetooth: hci6: command 0x0419 tx timeout [ 267.414551][ T5028] bond2 (unregistering): (slave batadv1): Releasing active interface [ 267.529600][ T5028] bond2 (unregistering): (slave veth3): Releasing active interface [ 267.965794][ T5028] bond2 (unregistering): Released all slaves [ 268.255803][ T5028] bond1 (unregistering): Released all slaves [ 268.977550][ T5028] team0 (unregistering): Port device team_slave_1 removed [ 269.052743][ T5028] team0 (unregistering): Port device team_slave_0 removed [ 269.115914][ T5028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.180331][ T5028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.646002][ T5028] bond0 (unregistering): Released all slaves [ 269.784341][ T8208] netlink: 'syz.7.1042': attribute type 4 has an invalid length. [ 269.812438][ T8210] netlink: 'syz.7.1042': attribute type 4 has an invalid length. [ 270.298772][ T8262] loop7: detected capacity change from 0 to 1024 [ 270.434940][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.458401][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.529896][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.551419][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.590883][ T8262] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 270.639400][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.684383][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.697353][ T8262] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #2: block 16: comm syz.7.1055: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 270.726703][ T8044] device veth0_vlan entered promiscuous mode [ 270.801531][ T8262] EXT4-fs (loop7): Remounting filesystem read-only [ 270.808954][ T8044] device veth1_vlan entered promiscuous mode [ 270.923231][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.979927][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.024564][ T8044] device veth0_macvtap entered promiscuous mode [ 271.056206][ T8044] device veth1_macvtap entered promiscuous mode [ 271.068363][ T7341] EXT4-fs (loop7): unmounting filesystem. [ 271.143464][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.186568][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.215428][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.273094][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.313559][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.342046][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.374104][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.382421][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.465224][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.548388][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.583050][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.624072][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.682160][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.738367][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.783511][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.823880][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.835816][ T8044] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.873269][ T8044] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.907026][ T8044] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.946586][ T8044] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.265672][ T5022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.330393][ T5022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.379714][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.446234][ T5020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.493166][ T5020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.501939][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.223533][ T130] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 273.423116][ T130] usb 5-1: Using ep0 maxpacket: 32 [ 273.425065][ T4513] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 273.455875][ T130] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 273.488025][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.516874][ T130] usb 5-1: Product: syz [ 273.521271][ T130] usb 5-1: Manufacturer: syz [ 273.540514][ T130] usb 5-1: SerialNumber: syz [ 273.625016][ T4513] usb 9-1: config index 0 descriptor too short (expected 8251, got 59) [ 273.638745][ T4513] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.684000][ T4513] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 273.736494][ T4513] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.771446][ T4513] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.772524][ T130] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 273.800054][ T4513] usb 9-1: SerialNumber: syz [ 273.838578][ T130] snd-usb-audio: probe of 5-1:1.1 failed with error -71 [ 273.860937][ T4513] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 273.876772][ T130] snd-usb-audio: probe of 5-1:1.2 failed with error -71 [ 273.911762][ T130] usb 5-1: USB disconnect, device number 10 [ 274.145044][ T8326] Disabled LAPIC found during irq injection [ 274.166625][ T8351] tipc: Started in network mode [ 274.171600][ T8351] tipc: Node identity ac14140f, cluster identity 4711 [ 274.214673][ T8351] tipc: Enabled bearer , priority 10 [ 274.281401][ T4711] usb 9-1: USB disconnect, device number 2 [ 274.528819][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 274.548832][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 274.576112][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 274.625563][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 274.673751][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 274.691681][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 274.725397][ T8366] loop7: detected capacity change from 0 to 512 [ 274.732819][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 274.768134][ T8366] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 274.806559][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 274.871732][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 274.954021][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 274.961395][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): nr7: link becomes ready [ 275.030533][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): nr8: link becomes ready [ 275.038923][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 275.046738][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 275.057970][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 275.066353][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 275.074251][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 275.088598][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 275.097301][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 275.110908][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 275.111929][ T8366] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: block 1803188595: comm syz.7.1078: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 275.123298][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 275.142202][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 275.152555][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 275.173633][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 275.181494][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 275.197049][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 275.219345][ T8366] EXT4-fs (loop7): mount failed [ 275.238764][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1080'. [ 275.310656][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1082'. [ 275.647932][ T4518] tipc: Node number set to 2886997007 [ 275.780738][ T27] audit: type=1804 audit(1787509119.971:28): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1084" name="file1" dev="ramfs" ino=52260 res=1 errno=0 [ 276.041084][ T8387] batman_adv: batadv0: Adding interface: veth0 [ 276.081723][ T8387] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.162081][ T8369] loop4: detected capacity change from 0 to 32768 [ 276.179928][ T8387] batman_adv: batadv0: Interface activated: veth0 [ 276.210966][ T8393] batman_adv: batadv0: Interface deactivated: veth0 [ 276.277108][ T8393] batman_adv: batadv0: Removing interface: veth0 [ 276.570478][ T27] audit: type=1800 audit(1787509120.761:29): pid=8369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1081" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 276.676677][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'. [ 276.974821][ T8415] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 277.072129][ T8415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.139938][ T8421] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 277.973239][ T8415] bond1 (unregistering): (slave syz_tun): Releasing backup interface [ 278.001966][ T8415] bond1 (unregistering): Released all slaves [ 278.451981][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1104'. [ 278.772929][ T8460] netlink: 'syz.4.1108': attribute type 4 has an invalid length. [ 278.851483][ T8464] netlink: 'syz.4.1108': attribute type 4 has an invalid length. [ 279.113278][ T4513] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 279.305115][ T4513] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.332938][ T4513] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.373579][ T4513] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 279.399594][ T4513] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.448641][ T4513] usb 8-1: config 0 descriptor?? [ 279.847719][ T8497] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 279.895143][ T4513] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 279.910803][ T4513] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 279.927662][ T4513] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 279.945865][ T4513] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 279.958679][ T4513] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 279.978969][ T4513] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.7-1/input0 [ 280.077773][ T8489] syz.5.1118 (8489) used greatest stack depth: 18128 bytes left [ 280.397641][ T8512] tipc: Enabling of bearer rejected, failed to enable media [ 280.496854][ T4513] playstation 0003:054C:0DF2.0005: Invalid gyro calibration data for axis (3), disabling calibration. [ 280.521319][ T4513] playstation 0003:054C:0DF2.0005: Invalid gyro calibration data for axis (5), disabling calibration. [ 280.554753][ T4513] playstation 0003:054C:0DF2.0005: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 280.582402][ T4513] playstation 0003:054C:0DF2.0005: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 280.644778][ T4513] input: HID 054c:0df2 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:054C:0DF2.0005/input/input8 [ 280.735137][ T4513] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:054C:0DF2.0005/input/input9 [ 280.789383][ T4513] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:054C:0DF2.0005/input/input10 [ 280.848283][ T4513] playstation 0003:054C:0DF2.0005: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 280.869046][ T4513] usb 8-1: USB disconnect, device number 2 [ 281.322183][ T8526] fido_id[8526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 282.322430][ T8557] loop8: detected capacity change from 0 to 8192 [ 282.443566][ T8557] loop8: p1 p3 < > p4 < p5 > [ 282.460195][ T8557] loop8: partition table partially beyond EOD, truncated [ 282.538776][ T8557] loop8: p1 start 30976 is beyond EOD, truncated [ 282.586267][ T8557] loop8: p3 start 327168 is beyond EOD, truncated [ 282.626393][ T8557] loop8: p5 start 30976 is beyond EOD, truncated [ 283.503311][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 283.516189][ T8546] udevd[8546]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 283.833782][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1152'. [ 283.964875][ T8577] loop4: detected capacity change from 0 to 32768 [ 284.096855][ T8577] XFS (loop4): Mounting V5 Filesystem [ 284.383628][ T8577] XFS (loop4): Ending clean mount [ 284.406259][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1156'. [ 284.473717][ T8622] device bond5 entered promiscuous mode [ 284.479655][ T8622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.562534][ T8624] device bridge2 entered promiscuous mode [ 284.651542][ T8624] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 284.683743][ T8622] bond5: (slave bridge2): Error: Slave device does not support XDP [ 284.691904][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 284.881488][ T4275] XFS (loop4): Unmounting Filesystem [ 284.960314][ T8611] ceph: No mds server is up or the cluster is laggy [ 285.219764][ T5022] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.770096][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1164'. [ 286.202852][ T8666] overlayfs: failed to clone upperpath [ 286.239711][ T8666] overlayfs: failed to clone upperpath [ 286.402737][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1171'. [ 287.150493][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1180'. [ 287.341345][ T8694] overlayfs: failed to clone upperpath [ 287.362819][ T8705] loop8: detected capacity change from 0 to 4096 [ 287.475584][ T8705] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 287.839667][ T8044] EXT4-fs (loop8): unmounting filesystem. [ 287.997363][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1186'. [ 288.650481][ T8713] loop7: detected capacity change from 0 to 32768 [ 288.799108][ T8713] XFS (loop7): Mounting V5 Filesystem [ 289.013963][ T8713] XFS (loop7): Ending clean mount [ 289.050144][ T8713] XFS (loop7): Quotacheck needed: Please wait. [ 289.636975][ T8713] XFS (loop7): Quotacheck: Done. [ 290.479575][ T7341] XFS (loop7): Unmounting Filesystem [ 290.716866][ T8767] loop8: detected capacity change from 0 to 32768 [ 290.829091][ T8767] (syz.8.1208,8767,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 290.909636][ T8767] (syz.8.1208,8767,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 291.008101][ T8767] JBD2: Ignoring recovery information on journal [ 291.189257][ T8782] tipc: Started in network mode [ 291.209359][ T8782] tipc: Node identity 7ae3a18683ae, cluster identity 4711 [ 291.219705][ T8767] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 291.234074][ T8782] tipc: Enabled bearer , priority 0 [ 291.259659][ T8782] device syzkaller0 entered promiscuous mode [ 291.297254][ T8781] tipc: Resetting bearer [ 291.446391][ T8781] tipc: Disabling bearer [ 291.587717][ T8793] (syz.8.1208,8793,1):ocfs2_reflink_ioctl:4426 ERROR: status = -2 [ 292.198932][ T8044] ocfs2: Unmounting device (7,8) on (node local) [ 293.784349][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1225'. [ 294.595487][ T8862] loop8: detected capacity change from 0 to 32768 [ 294.697238][ T8862] JBD2: Ignoring recovery information on journal [ 294.948882][ T8862] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 295.406018][ T27] audit: type=1804 audit(1787509139.601:30): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1226" name="/newroot/29/file1/file1" dev="loop8" ino=17059 res=1 errno=0 [ 295.469767][ T8880] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 295.469767][ T8880] The task syz.4.1229 (8880) triggered the difference, watch for misbehavior. [ 295.720584][ T8044] ocfs2: Unmounting device (7,8) on (node local) [ 296.097834][ T8893] lo speed is unknown, defaulting to 1000 [ 296.753442][ T8914] sctp: [Deprecated]: syz.7.1237 (pid 8914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.753442][ T8914] Use struct sctp_sack_info instead [ 296.785995][ T4713] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 296.945795][ T4711] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 296.985319][ T4713] usb 5-1: Using ep0 maxpacket: 32 [ 296.992761][ T4713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.028211][ T4713] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 297.069959][ T4713] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 297.097697][ T4713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.126309][ T4713] usb 5-1: Product: syz [ 297.130589][ T4713] usb 5-1: Manufacturer: syz [ 297.141921][ T4711] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.165237][ T4713] usb 5-1: SerialNumber: syz [ 297.177452][ T4711] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.228308][ T4711] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 297.246213][ T4711] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.299998][ T4711] usb 9-1: config 0 descriptor?? [ 297.430243][ T4713] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 297.471160][ T4713] snd-usb-audio: probe of 5-1:1.1 failed with error -71 [ 297.503636][ T4713] usb 5-1: USB disconnect, device number 11 [ 297.738851][ T4711] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 297.757404][ T4711] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 297.779907][ T8931] gadgetfs: bound to dummy_udc driver [ 297.792835][ T4711] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 297.810906][ T4711] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 297.835444][ T4711] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 297.851101][ T4711] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 298.118421][ T4513] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 298.135440][ C0] gadgetfs: connected [ 298.144035][ T4513] gadgetfs: disconnected [ 298.323372][ C0] gadgetfs: connected [ 298.329877][ T4513] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 298.353714][ T4711] playstation 0003:054C:0DF2.0006: Invalid gyro calibration data for axis (3), disabling calibration. [ 298.370432][ T4513] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 298.382269][ T4711] playstation 0003:054C:0DF2.0006: Invalid gyro calibration data for axis (5), disabling calibration. [ 298.406812][ T4513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.416553][ T4711] playstation 0003:054C:0DF2.0006: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 298.436137][ T4711] playstation 0003:054C:0DF2.0006: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 298.449335][ C0] gadgetfs: configuration #1 [ 298.468398][ T4711] input: HID 054c:0df2 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:0DF2.0006/input/input11 [ 298.499467][ T4711] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:0DF2.0006/input/input12 [ 298.522208][ T4711] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:0DF2.0006/input/input13 [ 298.559988][ T8934] gadgetfs: suspended from state 3 [ 298.587265][ T4711] playstation 0003:054C:0DF2.0006: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 298.589565][ T22] usb 1-1: USB disconnect, device number 6 [ 298.607608][ T8934] gadgetfs: disconnected [ 298.662428][ T4711] usb 9-1: USB disconnect, device number 3 [ 299.053811][ T8946] fido_id[8946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 300.079135][ T8984] FAULT_INJECTION: forcing a failure. [ 300.079135][ T8984] name fail_futex, interval 1, probability 0, space 0, times 1 [ 300.160391][ T8984] CPU: 0 PID: 8984 Comm: syz.8.1253 Not tainted syzkaller #0 [ 300.167880][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.178186][ T8984] Call Trace: [ 300.181513][ T8984] [ 300.184498][ T8984] dump_stack_lvl+0x188/0x24e [ 300.189247][ T8984] ? show_regs_print_info+0x12/0x12 [ 300.194509][ T8984] ? load_image+0x410/0x410 [ 300.199120][ T8984] ? cgroup_rstat_updated+0xce/0x350 [ 300.204469][ T8984] ? rcu_read_lock_sched_held+0x86/0x110 [ 300.210163][ T8984] should_fail_ex+0x390/0x4c0 [ 300.214908][ T8984] get_futex_key+0x1b1/0x1000 [ 300.219661][ T8984] ? futex_setup_timer+0xc0/0xc0 [ 300.224668][ T8984] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 300.230714][ T8984] ? __lock_acquire+0x7c40/0x7c40 [ 300.235861][ T8984] ? lock_chain_count+0x20/0x20 [ 300.240781][ T8984] futex_wait_setup+0xb8/0x270 [ 300.245671][ T8984] ? futex_wait_multiple+0x920/0x920 [ 300.251016][ T8984] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 300.256978][ T8984] ? _raw_spin_unlock+0x40/0x40 [ 300.261900][ T8984] futex_wait+0x1b8/0x5c0 [ 300.266386][ T8984] ? futex_wait_setup+0x270/0x270 [ 300.271493][ T8984] ? file_end_write+0x156/0x250 [ 300.276447][ T8984] ? vfs_write+0x777/0x9a0 [ 300.280955][ T8984] do_futex+0x310/0x320 [ 300.285175][ T8984] ? __ia32_sys_get_robust_list+0x100/0x100 [ 300.291137][ T8984] __se_sys_futex+0x381/0x410 [ 300.295885][ T8984] ? __x64_sys_futex+0xf0/0xf0 [ 300.300731][ T8984] ? __x64_sys_futex+0x1d/0xf0 [ 300.305553][ T8984] do_syscall_64+0x4c/0xa0 [ 300.310031][ T8984] ? clear_bhb_loop+0x60/0xb0 [ 300.314776][ T8984] ? clear_bhb_loop+0x60/0xb0 [ 300.319531][ T8984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.325507][ T8984] RIP: 0033:0x7f38cc59e0d9 [ 300.329983][ T8984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.349650][ T8984] RSP: 002b:00007f38cd4bf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 300.358138][ T8984] RAX: ffffffffffffffda RBX: 00007f38cc825fa8 RCX: 00007f38cc59e0d9 [ 300.366267][ T8984] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f38cc825fa8 [ 300.374332][ T8984] RBP: 00007f38cc825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 300.382393][ T8984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.390425][ T8984] R13: 00007f38cc826038 R14: 00007fff42d0b570 R15: 00007fff42d0b658 [ 300.398474][ T8984] [ 300.663010][ C1] sched: RT throttling activated [ 301.412620][ T9001] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1257'. [ 302.446293][ T4713] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 302.635168][ T4713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.665469][ T4713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.701294][ T4713] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.726820][ T4713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.742125][ T4713] usb 5-1: Product: syz [ 302.747092][ T4713] usb 5-1: Manufacturer: syz [ 302.752020][ T4713] usb 5-1: SerialNumber: syz [ 302.836471][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.855022][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.871358][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.888139][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.898288][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 302.906214][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.949116][ T9038] lo speed is unknown, defaulting to 1000 [ 302.983587][ T4713] usb 5-1: 0:2 : does not exist [ 302.989446][ T4713] usb 5-1: unit 9 not found! [ 303.036715][ T4713] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4) [ 303.077858][ T4713] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4) [ 303.107940][ T4713] usb 5-1: 4:0: cannot get min/max values for control 4 (id 4) [ 303.194652][ T4713] usb 5-1: USB disconnect, device number 12 [ 303.518701][ T9038] chnl_net:caif_netlink_parms(): no params data found [ 303.860517][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.923272][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.964318][ T9038] device bridge_slave_0 entered promiscuous mode [ 304.012394][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.020060][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.038879][ T9038] device bridge_slave_1 entered promiscuous mode [ 304.137345][ T9038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.189355][ T9038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.299722][ T9038] team0: Port device team_slave_0 added [ 304.337725][ T9038] team0: Port device team_slave_1 added [ 304.410683][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.438365][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.474887][ T27] audit: type=1326 audit(1787509148.671:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.5.1276" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68b99e0d9 code=0x7fc00000 [ 304.604288][ T9038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.648259][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.680590][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.799765][ T9038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.943339][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 305.056606][ T9038] device hsr_slave_0 entered promiscuous mode [ 305.094388][ T9038] device hsr_slave_1 entered promiscuous mode [ 305.221831][ T27] audit: type=1326 audit(1787509149.411:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.5.1276" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc68b997e57 code=0x7fc00000 [ 305.278418][ T9098] gadgetfs: bound to dummy_udc driver [ 305.454585][ T9102] netlink: 'syz.5.1283': attribute type 1 has an invalid length. [ 305.462442][ T9102] netlink: 'syz.5.1283': attribute type 2 has an invalid length. [ 305.489824][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1283'. [ 305.597378][ T4272] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 305.614308][ C1] gadgetfs: connected [ 305.621492][ T4272] gadgetfs: disconnected [ 305.804148][ C1] gadgetfs: connected [ 305.809946][ T4272] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 305.830894][ T9038] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 305.843182][ T4272] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 305.859087][ T4272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.901099][ C1] gadgetfs: configuration #1 [ 305.915030][ T9038] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 305.938755][ T9038] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 305.956899][ T9038] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 306.050056][ T9099] gadgetfs: suspended from state 3 [ 306.063568][ T4713] usb 1-1: USB disconnect, device number 7 [ 306.070499][ T9099] gadgetfs: disconnected [ 306.303331][ T9038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.347361][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.363758][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.397017][ T9038] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.422112][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.457337][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.495086][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.502346][ T5040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.565254][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.576888][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.607339][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.624596][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.631829][ T5040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.668203][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.743504][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.775332][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.846026][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.864458][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.922815][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.962327][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.002836][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.024924][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.035779][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.049353][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 307.056182][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.089508][ T9038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.494237][ T9163] syz.4.1298 sent an empty control message without MSG_MORE. [ 308.081251][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.099327][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.127991][ T9038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.622293][ T9193] loop8: detected capacity change from 0 to 4096 [ 308.799253][ T9193] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 309.103298][ T9208] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1309'. [ 309.103387][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 309.416182][ T8044] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22. [ 309.876052][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.921091][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.173978][ T9230] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1313'. [ 310.223691][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.232321][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.284384][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.312497][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.336586][ T9038] device veth0_vlan entered promiscuous mode [ 310.376675][ T9038] device veth1_vlan entered promiscuous mode [ 310.480331][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.502280][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.531351][ T9038] device veth0_macvtap entered promiscuous mode [ 310.565960][ T9038] device veth1_macvtap entered promiscuous mode [ 310.616568][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.640683][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.654572][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.669970][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.683227][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.703179][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.741467][ T9038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.763822][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 310.787362][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.808200][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.827188][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.847656][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.870301][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.901995][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.932574][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.953296][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.973035][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.995710][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.045473][ T9038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.052905][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1319'. [ 311.128810][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.152544][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.183386][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 311.204260][ T9038] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.220642][ T9038] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.232375][ T9038] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.248516][ T9038] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.464254][ T5032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.472253][ T5032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.547035][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.588574][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.613413][ T9271] netlink: 'syz.1.1324': attribute type 1 has an invalid length. [ 311.621677][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.770445][ T9271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.849908][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 311.908983][ T9278] Mass Storage Function, version: 2009/09/11 [ 311.941058][ T9274] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 311.963161][ T9278] LUN: removable file: (no medium) [ 311.985110][ T5020] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 312.042255][ T9275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1324'. [ 312.139386][ T9281] netlink: 'syz.5.1327': attribute type 26 has an invalid length. [ 312.170929][ T9281] netlink: 64899 bytes leftover after parsing attributes in process `syz.5.1327'. [ 313.519615][ T9318] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 313.815507][ T9320] lo speed is unknown, defaulting to 1000 [ 314.073718][ T9329] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1340'. [ 314.765344][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1350'. [ 315.986631][ T5044] rpcbind: server 127.0.0.1 not responding, timed out [ 316.247492][ T4338] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.976136][ T9399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1367'. [ 317.036742][ T27] audit: type=1804 audit(1787509161.231:33): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1366" name="bus" dev="ramfs" ino=54227 res=1 errno=0 [ 317.241403][ T9402] IPVS: persistence engine module ip_vs_pe_ not found [ 317.268337][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.274896][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.780243][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1377'. [ 318.153558][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1381'. [ 318.185968][ T9442] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.195812][ T9442] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.205096][ T9442] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.214277][ T9442] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.255049][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1381'. [ 318.520232][ T9454] loop9: detected capacity change from 0 to 1024 [ 318.562603][ T9454] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 318.613151][ T9454] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 318.948941][ T9038] EXT4-fs (loop9): unmounting filesystem. [ 318.960010][ T27] audit: type=1804 audit(1787509163.151:34): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1387" name="bus" dev="ramfs" ino=55322 res=1 errno=0 [ 319.109098][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1388'. [ 319.494961][ T9470] block device autoloading is deprecated and will be removed. [ 319.837361][ T9479] netlink: 'syz.8.1394': attribute type 4 has an invalid length. [ 320.054191][ T9480] netlink: 'syz.8.1394': attribute type 4 has an invalid length. [ 322.012831][ T9509] ip_tables: iptables: counters copy to user failed while replacing table [ 325.014889][ T9548] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 326.260580][ T9582] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 326.450883][ T9588] loop8: detected capacity change from 0 to 16 [ 326.493655][ T9588] erofs: (device loop8): mounted with root inode @ nid 36. [ 326.874494][ T9599] xt_connbytes: Forcing CT accounting to be enabled [ 327.243965][ T9614] vim2m vim2m.0: vidioc_s_fmt queue busy [ 328.165450][ T27] audit: type=1326 audit(1787509172.361:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.8.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc59e0d9 code=0x7ffc0000 [ 328.241813][ T27] audit: type=1326 audit(1787509172.361:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.8.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc59e0d9 code=0x7ffc0000 [ 328.332550][ T9642] netlink: 'syz.9.1453': attribute type 4 has an invalid length. [ 328.363271][ T27] audit: type=1326 audit(1787509172.361:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.8.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc59e0d9 code=0x7ffc0000 [ 328.441212][ T27] audit: type=1326 audit(1787509172.391:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.8.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f38cc59e0d9 code=0x7ffc0000 [ 328.466928][ T9643] netlink: 'syz.9.1453': attribute type 4 has an invalid length. [ 328.550147][ T27] audit: type=1326 audit(1787509172.431:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.8.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc59e0d9 code=0x7ffc0000 [ 328.626568][ T27] audit: type=1326 audit(1787509172.431:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.8.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc59e0d9 code=0x7ffc0000 [ 328.713104][ T27] audit: type=1326 audit(1787509172.501:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.8.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc59e0d9 code=0x7ffc0000 [ 328.835977][ T27] audit: type=1326 audit(1787509172.571:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.8.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc59e0d9 code=0x7ffc0000 [ 328.887919][ T27] audit: type=1326 audit(1787509172.591:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.8.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38cc59e0d9 code=0x7ffc0000 [ 328.968580][ T27] audit: type=1326 audit(1787509172.591:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.8.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc59e0d9 code=0x7ffc0000 [ 329.036185][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 329.138654][ T9657] netdevsim netdevsim4 netdevsim0: set [0, 2] type 1 family 0 port 8472 - 0 [ 329.147565][ T9657] netdevsim netdevsim4 netdevsim1: set [0, 2] type 1 family 0 port 8472 - 0 [ 329.157287][ T9657] netdevsim netdevsim4 netdevsim2: set [0, 2] type 1 family 0 port 8472 - 0 [ 329.166380][ T9657] netdevsim netdevsim4 netdevsim3: set [0, 2] type 1 family 0 port 8472 - 0 [ 329.185509][ T9659] overlayfs: failed to clone upperpath [ 329.407601][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 330.869247][ T9677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1466'. [ 330.904727][ T9677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1466'. [ 331.027508][ T9680] netlink: 'syz.4.1467': attribute type 4 has an invalid length. [ 331.148943][ T9683] netlink: 'syz.4.1467': attribute type 4 has an invalid length. [ 331.612896][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'. [ 331.686458][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'. [ 332.742933][ T9707] loop4: detected capacity change from 0 to 1024 [ 332.865324][ T9707] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 332.967039][ T9707] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 333.086176][ T9707] EXT4-fs (loop4): orphan cleanup on readonly fs [ 333.128078][ T9707] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.1477: Freeing blocks not in datazone - block = 0, count = 4096 [ 333.323183][ T9707] EXT4-fs (loop4): Remounting filesystem read-only [ 333.375851][ T9707] EXT4-fs (loop4): 1 orphan inode deleted [ 333.450021][ T9707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 333.667296][ T9707] EXT4-fs error (device loop4): ext4_get_group_desc:277: comm syz.4.1477: block_group >= groups_count - block_group = 1, groups_count = 1 [ 333.861228][ T9707] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4643: inode #40: comm syz.4.1477: unable to read itable block [ 334.332572][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 334.339702][ T9738] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1484'. [ 334.405275][ T9738] unsupported nlmsg_type 40 [ 335.052722][ T9753] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1491'. [ 335.105111][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1491'. [ 335.846846][ T9776] netlink: 'syz.8.1501': attribute type 1 has an invalid length. [ 335.902096][ T9776] device bond1 entered promiscuous mode [ 335.983835][ T9776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.065340][ T9781] device macvlan2 entered promiscuous mode [ 336.107329][ T9781] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 336.812269][ T9802] overlayfs: failed to clone upperpath [ 337.253079][ T9815] overlayfs: failed to get inode (-116) [ 337.260793][ T9818] overlayfs: failed to clone lowerpath [ 337.277800][ T9818] overlayfs: failed to clone lowerpath [ 337.295693][ T9815] overlayfs: failed to get inode (-116) [ 337.708091][ T9834] netlink: 'syz.1.1520': attribute type 1 has an invalid length. [ 337.770136][ T9834] device bond3 entered promiscuous mode [ 337.808123][ T9834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 337.889867][ T9840] device macvlan2 entered promiscuous mode [ 337.935387][ T9840] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 338.000700][ T9845] loop9: detected capacity change from 0 to 256 [ 338.162243][ T9845] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 340.090557][ T9888] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 340.114722][ T9886] loop8: detected capacity change from 0 to 16 [ 340.135782][ T9888] device bond6 entered promiscuous mode [ 340.143243][ T9888] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.186348][ T9890] device macvlan2 entered promiscuous mode [ 340.228622][ T9886] erofs: (device loop8): mounted with root inode @ nid 36. [ 340.298249][ T9890] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 340.828048][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 341.281683][ T9910] lo speed is unknown, defaulting to 1000 [ 341.666726][ T9915] lo speed is unknown, defaulting to 1000 [ 342.991424][ T9952] netlink: 64843 bytes leftover after parsing attributes in process `syz.8.1559'. [ 343.517495][ T9973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1565'. [ 344.700613][ T9984] loop8: detected capacity change from 0 to 32768 [ 344.772053][ T9984] XFS (loop8): Mounting V5 Filesystem [ 344.898531][ T9984] XFS (loop8): Ending clean mount [ 345.722797][ T8044] XFS (loop8): Unmounting Filesystem [ 346.837624][T10046] loop4: detected capacity change from 0 to 256 [ 346.886326][T10046] FAT-fs (loop4): bogus number of FAT sectors [ 346.909174][T10046] FAT-fs (loop4): Can't find a valid FAT filesystem [ 347.273937][ T5044] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.915790][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.933971][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.963903][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.972395][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.983592][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 348.990995][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.114241][T10106] lo speed is unknown, defaulting to 1000 [ 349.230030][T10115] fuse: Bad value for 'fd' [ 349.527020][T10106] chnl_net:caif_netlink_parms(): no params data found [ 349.752672][T10106] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.760668][T10106] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.769944][T10106] device bridge_slave_0 entered promiscuous mode [ 349.780356][T10106] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.788238][T10106] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.797280][T10106] device bridge_slave_1 entered promiscuous mode [ 349.836259][T10106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.870993][T10106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.970642][T10106] team0: Port device team_slave_0 added [ 350.036967][T10106] team0: Port device team_slave_1 added [ 350.175271][T10106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.182322][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.219607][T10106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.246768][T10106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.275105][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.330470][T10136] bcache: register_bcache() error : device busy [ 350.339520][T10106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.360893][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1630'. [ 350.389466][T10138] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.562784][T10138] device bridge_slave_1 left promiscuous mode [ 350.572688][T10138] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.816918][T10106] device hsr_slave_0 entered promiscuous mode [ 350.835629][T10106] device hsr_slave_1 entered promiscuous mode [ 350.850715][T10106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.860951][T10106] Cannot create hsr debugfs directory [ 350.935283][T10153] Bluetooth: MGMT ver 1.22 [ 351.023569][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 352.913562][T10106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 352.964316][T10106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.011916][T10106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 353.023474][ T4283] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 353.031465][ T4283] Bluetooth: hci0: command 0x1407 tx timeout [ 353.098717][T10106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.106815][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 353.420887][T10106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.480078][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.490893][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.526451][T10106] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.554161][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.599310][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.638760][ T5001] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.646218][ T5001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.683527][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.708389][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.726258][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.753810][ T5001] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.761003][ T5001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.800859][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.847966][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.884046][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 353.906194][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.931548][T10217] loop4: detected capacity change from 0 to 32768 [ 353.944789][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.954671][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.992925][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.022567][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.034666][T10217] JBD2: Ignoring recovery information on journal [ 354.056070][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.069952][T10106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.137901][T10106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 354.146533][T10217] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 354.179681][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.190460][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.872331][ T4275] ocfs2: Unmounting device (7,4) on (node local) [ 355.183622][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 355.323910][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.331585][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.388392][T10106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.509945][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.562068][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.661891][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 355.684417][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.727189][T10106] device veth0_vlan entered promiscuous mode [ 355.754548][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.770330][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.810493][T10106] device veth1_vlan entered promiscuous mode [ 355.956747][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 355.978026][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 355.999667][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 356.012074][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 356.048786][T10106] device veth0_macvtap entered promiscuous mode [ 356.099142][T10280] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1664'. [ 356.122054][T10280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1664'. [ 356.232119][T10106] device veth1_macvtap entered promiscuous mode [ 356.295962][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.324922][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.346740][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.368570][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.398148][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.420775][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.447448][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.492056][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.538226][T10106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.555333][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 356.567949][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 356.598669][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.630065][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.645415][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.660366][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.671496][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.682632][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.723152][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.756643][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.811556][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.843208][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.909325][T10106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.950068][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.968998][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.004134][T10106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.034197][T10106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.053048][T10106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.061851][T10106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.263149][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 357.388219][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.418457][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.462879][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 357.557444][ T5045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.571814][ T5045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.602165][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 357.905014][T10327] tipc: Started in network mode [ 357.909999][T10327] tipc: Node identity 1000001, cluster identity 4369 [ 357.947170][T10327] tipc: Node number set to 16777217 [ 357.952801][T10327] tipc: Cannot configure node identity twice [ 357.969010][T10327] tipc: New replicast peer: 127.0.0.1 [ 357.998184][T10327] tipc: Enabled bearer , priority 10 [ 358.175961][ T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 358.296054][T10344] loop2: detected capacity change from 0 to 1024 [ 358.334821][T10344] EXT4-fs: Ignoring removed orlov option [ 358.385788][ T7] usb 5-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 358.419252][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.451733][T10344] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 358.463923][ C1] [ 358.466306][ C1] ================================ [ 358.471432][ C1] WARNING: inconsistent lock state [ 358.476564][ C1] syzkaller #0 Not tainted [ 358.480992][ C1] -------------------------------- [ 358.486114][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 358.493005][ C1] ksoftirqd/1/21 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 358.499285][ C1] ffff88805371c130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x109/0x250 [ 358.508829][ C1] {SOFTIRQ-ON-W} state was registered at: [ 358.514594][ C1] lock_acquire+0x1bb/0x4a0 [ 358.519537][ C1] lock_sock_nested+0x44/0x100 [ 358.524434][ C1] x25_bind+0x1aa/0x3e0 [ 358.528735][ C1] __sys_bind+0x2e9/0x3e0 [ 358.533278][ C1] __x64_sys_bind+0x76/0x80 [ 358.537906][ C1] do_syscall_64+0x4c/0xa0 [ 358.542495][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.548634][ C1] irq event stamp: 1894582 [ 358.553079][ C1] hardirqs last enabled at (1894582): [] __local_bh_enable_ip+0x136/0x1c0 [ 358.563297][ C1] hardirqs last disabled at (1894581): [] __local_bh_enable_ip+0xd7/0x1c0 [ 358.573407][ C1] softirqs last enabled at (1894524): [] run_ksoftirqd+0xa4/0x100 [ 358.582995][ C1] softirqs last disabled at (1894529): [] run_ksoftirqd+0xa4/0x100 [ 358.592503][ C1] [ 358.592503][ C1] other info that might help us debug this: [ 358.600582][ C1] Possible unsafe locking scenario: [ 358.600582][ C1] [ 358.608048][ C1] CPU0 [ 358.611338][ C1] ---- [ 358.614632][ C1] lock(sk_lock-AF_X25); [ 358.618981][ C1] [ 358.622440][ C1] lock(sk_lock-AF_X25); [ 358.627000][ C1] [ 358.627000][ C1] *** DEADLOCK *** [ 358.627000][ C1] [ 358.635156][ C1] 1 lock held by ksoftirqd/1/21: [ 358.640114][ C1] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x30/0x230 [ 358.650263][ C1] [ 358.650263][ C1] stack backtrace: [ 358.656174][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 358.663590][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.673685][ C1] Call Trace: [ 358.676993][ C1] [ 358.679967][ C1] dump_stack_lvl+0x188/0x24e [ 358.684827][ C1] ? show_regs_print_info+0x12/0x12 [ 358.690090][ C1] valid_state+0x13b/0x1d0 [ 358.694653][ C1] mark_lock_irq+0xa9/0x900 [ 358.699198][ C1] ? stack_trace_save+0xa6/0xf0 [ 358.704150][ C1] ? save_trace+0xbb0/0xbb0 [ 358.708703][ C1] ? mark_lock+0x94/0x320 [ 358.713087][ C1] ? save_trace+0x5a/0xbb0 [ 358.717543][ C1] ? mark_lock+0x94/0x320 [ 358.721909][ C1] mark_lock+0x208/0x320 [ 358.726223][ C1] __lock_acquire+0xce0/0x7c40 [ 358.731026][ C1] ? debug_objects_fill_pool+0x87/0x780 [ 358.736687][ C1] ? verify_lock_unused+0x140/0x140 [ 358.741958][ C1] ? verify_lock_unused+0x140/0x140 [ 358.747225][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 358.753245][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 358.758302][ C1] ? lock_chain_count+0x20/0x20 [ 358.763184][ C1] lock_acquire+0x1bb/0x4a0 [ 358.767717][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 358.772856][ C1] ? x25_kill_by_neigh+0xff/0x250 [ 358.777910][ C1] ? read_lock_is_recursive+0x10/0x10 [ 358.783321][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 358.788719][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 358.793944][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 358.799352][ C1] ? _local_bh_enable+0xa0/0xa0 [ 358.804234][ C1] lock_sock_nested+0x44/0x100 [ 358.809024][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 358.814170][ C1] x25_kill_by_neigh+0x109/0x250 [ 358.819143][ C1] x25_lapb_receive_frame+0x1a3/0xf20 [ 358.824567][ C1] ? netif_receive_skb_core+0x30/0x230 [ 358.830074][ C1] ? netif_receive_skb_core+0x30/0x230 [ 358.835571][ C1] ? x25_device_event+0x250/0x250 [ 358.840624][ C1] netif_receive_skb_core+0x166/0x230 [ 358.846024][ C1] lapbeth_napi_poll+0x3e/0x80 [ 358.850849][ C1] __napi_poll+0xbb/0x460 [ 358.855214][ C1] net_rx_action+0x622/0xbc0 [ 358.859939][ C1] ? net_tx_action+0x930/0x930 [ 358.864739][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 358.870747][ C1] ? __bpf_trace_tasklet+0x10/0x10 [ 358.875890][ C1] ? lock_chain_count+0x20/0x20 [ 358.880783][ C1] ? finish_task_switch+0x262/0x8e0 [ 358.886108][ C1] handle_softirqs+0x291/0x910 [ 358.890922][ C1] ? run_ksoftirqd+0xa4/0x100 [ 358.895623][ C1] ? do_softirq+0x210/0x210 [ 358.900154][ C1] run_ksoftirqd+0xa4/0x100 [ 358.904711][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 358.909933][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 358.915359][ C1] ? takeover_tasklets+0x770/0x770 [ 358.920496][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 358.925719][ C1] smpboot_thread_fn+0x667/0xa30 [ 358.930748][ C1] ? smpboot_thread_fn+0x49/0xa30 [ 358.935847][ C1] kthread+0x29d/0x330 [ 358.939941][ C1] ? cpu_report_death+0x250/0x250 [ 358.945018][ C1] ? kthread_blkcg+0xd0/0xd0 [ 358.949641][ C1] ret_from_fork+0x1f/0x30 [ 358.954101][ C1] [ 358.957212][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3506 [ 358.966049][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 21, name: ksoftirqd/1 [ 358.975104][ C1] preempt_count: 100, expected: 0 [ 358.980173][ C1] RCU nest depth: 1, expected: 0 [ 358.985151][ C1] INFO: lockdep is turned off. [ 358.989932][ C1] Preemption disabled at: [ 358.989940][ C1] [] handle_softirqs+0xfd/0x910 [ 359.000736][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 359.008057][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.018169][ C1] Call Trace: [ 359.021496][ C1] [ 359.024554][ C1] dump_stack_lvl+0x188/0x24e [ 359.029310][ C1] ? show_regs_print_info+0x12/0x12 [ 359.034589][ C1] ? load_image+0x410/0x410 [ 359.039217][ C1] ? handle_softirqs+0xfd/0x910 [ 359.044130][ C1] __might_resched+0x489/0x5f0 [ 359.048943][ C1] ? handle_softirqs+0xfd/0x910 [ 359.053830][ C1] ? __might_sleep+0xd0/0xd0 [ 359.058431][ C1] ? read_lock_is_recursive+0x10/0x10 [ 359.063820][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 359.069209][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 359.074449][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 359.079989][ C1] ? _local_bh_enable+0xa0/0xa0 [ 359.084858][ C1] lock_sock_nested+0x59/0x100 [ 359.089729][ C1] x25_kill_by_neigh+0x109/0x250 [ 359.094719][ C1] x25_lapb_receive_frame+0x1a3/0xf20 [ 359.100121][ C1] ? netif_receive_skb_core+0x30/0x230 [ 359.105613][ C1] ? netif_receive_skb_core+0x30/0x230 [ 359.111118][ C1] ? x25_device_event+0x250/0x250 [ 359.116155][ C1] netif_receive_skb_core+0x166/0x230 [ 359.121673][ C1] lapbeth_napi_poll+0x3e/0x80 [ 359.126478][ C1] __napi_poll+0xbb/0x460 [ 359.130830][ C1] net_rx_action+0x622/0xbc0 [ 359.135489][ C1] ? net_tx_action+0x930/0x930 [ 359.140267][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 359.146284][ C1] ? __bpf_trace_tasklet+0x10/0x10 [ 359.151468][ C1] ? lock_chain_count+0x20/0x20 [ 359.156384][ C1] ? finish_task_switch+0x262/0x8e0 [ 359.161604][ C1] handle_softirqs+0x291/0x910 [ 359.166724][ C1] ? run_ksoftirqd+0xa4/0x100 [ 359.171459][ C1] ? do_softirq+0x210/0x210 [ 359.175998][ C1] run_ksoftirqd+0xa4/0x100 [ 359.180643][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 359.185879][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 359.191322][ C1] ? takeover_tasklets+0x770/0x770 [ 359.196464][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 359.201718][ C1] smpboot_thread_fn+0x667/0xa30 [ 359.206699][ C1] ? smpboot_thread_fn+0x49/0xa30 [ 359.211762][ C1] kthread+0x29d/0x330 [ 359.215872][ C1] ? cpu_report_death+0x250/0x250 [ 359.220966][ C1] ? kthread_blkcg+0xd0/0xd0 [ 359.225589][ C1] ret_from_fork+0x1f/0x30 [ 359.230091][ C1] [ 359.255379][ T7] mos7720 5-1:1.0: Moschip 2 port adapter converter detected [ 359.280895][ T7] usb 5-1: mos7720: usb_control_msg() failed: 0 [ 359.290867][ T7] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 359.302915][ T7] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 359.403030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 359.423013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 359.433004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 359.512985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 359.523004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 359.533003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 359.607403][T10106] EXT4-fs (loop2): unmounting filesystem. [ 361.423370][ T28] INFO: task syz.6.662:6997 blocked for more than 143 seconds. [ 361.439232][ T28] Tainted: G W syzkaller #0 [ 361.446205][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.458222][ T28] task:syz.6.662 state:D stack:27088 pid:6997 ppid:5194 flags:0x00004004 [ 361.467930][ T28] Call Trace: [ 361.471517][ T28] [ 361.477761][ T28] __schedule+0x107f/0x4030 [ 361.482624][ T28] ? release_firmware_map_entry+0x187/0x187 [ 361.488964][ T28] ? __mutex_trylock_common+0x86/0x260 [ 361.497746][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 361.504383][ T28] schedule+0xb9/0x180 [ 361.510138][ T28] schedule_preempt_disabled+0xf/0x20 [ 361.519146][ T28] __mutex_lock+0x548/0xae0 [ 361.526195][ T28] ? __mutex_lock+0x3ba/0xae0 [ 361.531113][ T28] ? write_versions+0x90/0xbb0 [ 361.540640][ T28] ? mutex_lock_nested+0x10/0x10 [ 361.548795][ T28] write_versions+0x90/0xbb0 [ 361.556724][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 361.561990][ T28] ? __virt_addr_valid+0x188/0x540 [ 361.567782][ T28] ? write_pool_threads+0x5e0/0x5e0 [ 361.576358][ T28] ? __might_fault+0xc2/0x120 [ 361.579893][ T4319] usb 5-1: USB disconnect, device number 13 [ 361.581301][ C0] usb 5-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 361.602082][ T4319] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 361.607466][ T28] ? __might_fault+0xa6/0x120 [ 361.620750][ T28] ? _copy_from_user+0x10b/0x170 [ 361.626073][ T28] ? simple_transaction_get+0x119/0x140 [ 361.631824][ T28] nfsctl_transaction_write+0x105/0x150 [ 361.641623][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 361.646945][ T4319] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 361.651139][ T28] vfs_write+0x2dc/0x9a0 [ 361.666462][ T28] ? file_end_write+0x250/0x250 [ 361.671411][ T28] ? __fget_files+0x28/0x460 [ 361.676839][ T4319] mos7720 5-1:1.0: device disconnected [ 361.676929][ T28] ? __fget_files+0x3fc/0x460 [ 361.689451][ T28] ? __fdget_pos+0x2ae/0x360 [ 361.697388][ T28] ? ksys_write+0x70/0x260 [ 361.701969][ T28] ksys_write+0x14d/0x260 [ 361.715052][ T28] ? __ia32_sys_read+0x80/0x80 [ 361.720013][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 361.727856][ T28] do_syscall_64+0x4c/0xa0 [ 361.732371][ T28] ? clear_bhb_loop+0x60/0xb0 [ 361.737855][ T28] ? clear_bhb_loop+0x60/0xb0 [ 361.742609][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.752474][ T28] RIP: 0033:0x7fe19c59e0d9 [ 361.758672][ T28] RSP: 002b:00007fe19a7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 361.770003][ T28] RAX: ffffffffffffffda RBX: 00007fe19c826090 RCX: 00007fe19c59e0d9 [ 361.780437][ T28] RDX: 000000000000000d RSI: 0000200000000240 RDI: 0000000000000004 [ 361.791270][ T28] RBP: 00007fe19c635024 R08: 0000000000000000 R09: 0000000000000000 [ 361.799994][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.810410][ T28] R13: 00007fe19c826128 R14: 00007fe19c826090 R15: 00007ffc50e25118 [ 361.820556][ T28] [ 361.826090][ T28] INFO: task syz.6.662:7000 blocked for more than 143 seconds. [ 361.834322][ T28] Tainted: G W syzkaller #0 [ 361.840859][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.855070][ T28] task:syz.6.662 state:D stack:27088 pid:7000 ppid:5194 flags:0x00004004 [ 361.867740][ T28] Call Trace: [ 361.871097][ T28] [ 361.875332][ T28] __schedule+0x107f/0x4030 [ 361.879928][ T28] ? release_firmware_map_entry+0x187/0x187 [ 361.890011][ T28] ? __mutex_trylock_common+0x86/0x260 [ 361.896175][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 361.902471][ T28] schedule+0xb9/0x180 [ 361.909026][ T28] schedule_preempt_disabled+0xf/0x20 [ 361.916349][ T28] __mutex_lock+0x548/0xae0 [ 361.920917][ T28] ? __mutex_lock+0x3ba/0xae0 [ 361.929753][ T28] ? nfsd_svc+0x61/0xab0 [ 361.934182][ T28] ? mutex_lock_nested+0x10/0x10 [ 361.939242][ T28] ? net_generic+0x1e/0x240 [ 361.943845][ T28] ? net_generic+0x1e/0x240 [ 361.948668][ T28] nfsd_svc+0x61/0xab0 [ 361.952876][ T28] ? qword_get+0x5a5/0x640 [ 361.957564][ T28] write_threads+0x2ea/0x350 [ 361.962210][ T28] ? write_unlock_fs+0x1f0/0x1f0 [ 361.968348][ T28] ? __might_fault+0xc2/0x120 [ 361.974414][ T28] ? _copy_from_user+0x10b/0x170 [ 361.979490][ T28] ? simple_transaction_get+0x119/0x140 [ 361.985849][ T28] nfsctl_transaction_write+0x105/0x150 [ 361.991544][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 362.000419][ T28] vfs_write+0x2dc/0x9a0 [ 362.005692][ T28] ? file_end_write+0x250/0x250 [ 362.010667][ T28] ? __fget_files+0x28/0x460 [ 362.017138][ T28] ? __fget_files+0x3fc/0x460 [ 362.024134][ T28] ? __fdget_pos+0x2ae/0x360 [ 362.028864][ T28] ? ksys_write+0x70/0x260 [ 362.035155][ T28] ksys_write+0x14d/0x260 [ 362.039633][ T28] ? __ia32_sys_read+0x80/0x80 [ 362.045201][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 362.050538][ T28] do_syscall_64+0x4c/0xa0 [ 362.056989][ T28] ? clear_bhb_loop+0x60/0xb0 [ 362.061917][ T28] ? clear_bhb_loop+0x60/0xb0 [ 362.069521][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.080881][ T28] RIP: 0033:0x7fe19c59e0d9 [ 362.087809][ T28] RSP: 002b:00007fe19a7b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.098823][ T28] RAX: ffffffffffffffda RBX: 00007fe19c826180 RCX: 00007fe19c59e0d9 [ 362.122045][ T28] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000005 [ 362.137876][ T28] RBP: 00007fe19c635024 R08: 0000000000000000 R09: 0000000000000000 [ 362.146019][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.168950][ T28] R13: 00007fe19c826218 R14: 00007fe19c826180 R15: 00007ffc50e25118 [ 362.177208][ T28] [ 362.180369][ T28] INFO: lockdep is turned off. [ 362.188571][ T28] NMI backtrace for cpu 0 [ 362.192970][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W syzkaller #0 [ 362.201691][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.211794][ T28] Call Trace: [ 362.215114][ T28] [ 362.218085][ T28] dump_stack_lvl+0x188/0x24e [ 362.222818][ T28] ? irq_work_queue+0xb8/0x140 [ 362.227741][ T28] ? show_regs_print_info+0x12/0x12 [ 362.233005][ T28] ? load_image+0x410/0x410 [ 362.237557][ T28] ? vprintk_emit+0x59f/0x6a0 [ 362.242316][ T28] ? printk_sprint+0x460/0x460 [ 362.247137][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 362.252199][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 362.258415][ T28] ? _printk+0xda/0x130 [ 362.262628][ T28] ? watchdog+0x1ed/0xf50 [ 362.267102][ T28] ? load_image+0x410/0x410 [ 362.271669][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 362.277806][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 362.284018][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 362.290071][ T28] watchdog+0xf0e/0xf50 [ 362.294301][ T28] ? watchdog+0x1ed/0xf50 [ 362.298948][ T28] kthread+0x29d/0x330 [ 362.303058][ T28] ? hungtask_pm_notify+0x40/0x40 [ 362.308157][ T28] ? kthread_blkcg+0xd0/0xd0 [ 362.312796][ T28] ret_from_fork+0x1f/0x30 [ 362.317303][ T28] [ 362.321683][ T28] Sending NMI from CPU 0 to CPUs 1: [ 362.327619][ C1] NMI backtrace for cpu 1 [ 362.327632][ C1] CPU: 1 PID: 5044 Comm: kworker/u4:30 Tainted: G W syzkaller #0 [ 362.327651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.327663][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 362.327788][ C1] RIP: 0010:__set_page_owner_handle+0x1b7/0x3c0 [ 362.327840][ C1] Code: 42 0f b6 04 28 84 c0 0f 85 c2 01 00 00 89 6b 34 65 8b 3d 5c fc 25 7e e8 67 ca 84 ff 49 89 c4 48 8d 7b 10 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 5d 4e f7 ff 4c 89 63 10 49 81 c6 b0 08 00 [ 362.327855][ C1] RSP: 0018:ffffc9000e05f610 EFLAGS: 00000a06 [ 362.327869][ C1] RAX: 1ffff1100388f996 RBX: ffff88801c47cca0 RCX: c02e3198f6e6df00 [ 362.327883][ C1] RDX: 1ffffffff1f44e08 RSI: ffffffff8fa2705c RDI: ffff88801c47ccb0 [ 362.327896][ C1] RBP: 00000000000013b4 R08: ffffffff8fa27048 R09: ffffffff8fa27058 [ 362.327908][ C1] R10: ffffffff8fa27050 R11: ffffffff8fa27043 R12: 000000545c68702b [ 362.327921][ C1] R13: dffffc0000000000 R14: ffff888029911e00 R15: ffff88801c47cc98 [ 362.327935][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 362.327950][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.327962][ C1] CR2: 00007fac7a500000 CR3: 000000007e746000 CR4: 00000000003506e0 [ 362.327978][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.327988][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.327999][ C1] Call Trace: [ 362.328004][ C1] [ 362.328014][ C1] __set_page_owner+0x41/0x60 [ 362.328033][ C1] post_alloc_hook+0x173/0x1a0 [ 362.328095][ C1] get_page_from_freelist+0x206b/0x2180 [ 362.328124][ C1] ? ret_from_fork+0x1f/0x30 [ 362.328161][ C1] __alloc_pages+0x1ec/0x4f0 [ 362.328187][ C1] ? zone_statistics+0x170/0x170 [ 362.328212][ C1] ? lock_release+0xcf/0x920 [ 362.328237][ C1] ? __kmem_cache_alloc_node+0x126/0x270 [ 362.328283][ C1] alloc_slab_page+0x5d/0x180 [ 362.328305][ C1] new_slab+0x87/0x2d0 [ 362.328326][ C1] ___slab_alloc+0xbc5/0x1240 [ 362.328344][ C1] ? ___slab_alloc+0x20e/0x1240 [ 362.328363][ C1] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 362.328388][ C1] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 362.328412][ C1] __kmem_cache_alloc_node+0x126/0x270 [ 362.328433][ C1] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 362.328456][ C1] __kmalloc_node_track_caller+0xa0/0x240 [ 362.328525][ C1] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 362.328548][ C1] __alloc_skb+0x226/0x7d0 [ 362.328574][ C1] nsim_dev_trap_report_work+0x24f/0xa80 [ 362.328603][ C1] ? process_one_work+0x7b4/0x1160 [ 362.328649][ C1] process_one_work+0x8ab/0x1160 [ 362.328675][ C1] ? worker_detach_from_pool+0x240/0x240 [ 362.328697][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 362.328718][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 362.328740][ C1] ? wq_worker_running+0x97/0x190 [ 362.328768][ C1] worker_thread+0xaf5/0x12a0 [ 362.328798][ C1] kthread+0x29d/0x330 [ 362.328812][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 362.328830][ C1] ? kthread_blkcg+0xd0/0xd0 [ 362.328846][ C1] ret_from_fork+0x1f/0x30 [ 362.328874][ C1] [ 362.671119][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 362.678080][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W syzkaller #0 [ 362.686813][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.697018][ T28] Call Trace: [ 362.700359][ T28] [ 362.703336][ T28] dump_stack_lvl+0x188/0x24e [ 362.708089][ T28] ? memcpy+0x3c/0x60 [ 362.712218][ T28] ? show_regs_print_info+0x12/0x12 [ 362.717492][ T28] ? load_image+0x410/0x410 [ 362.722071][ T28] panic+0x2d3/0x710 [ 362.726011][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 362.731718][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 362.736258][ T28] ? load_image+0x410/0x410 [ 362.740825][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 362.747062][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 362.753299][ T28] watchdog+0xf4d/0xf50 [ 362.757516][ T28] ? watchdog+0x1ed/0xf50 [ 362.761912][ T28] kthread+0x29d/0x330 [ 362.766048][ T28] ? hungtask_pm_notify+0x40/0x40 [ 362.771141][ T28] ? kthread_blkcg+0xd0/0xd0 [ 362.775785][ T28] ret_from_fork+0x1f/0x30 [ 362.780254][ T28] [ 362.783924][ T28] Kernel Offset: disabled [ 362.788275][ T28] Rebooting in 86400 seconds..